Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81f1b380-e4b6-3321-ab46-5b2ed9148357.roa
File:                     81f1b380-e4b6-3321-ab46-5b2ed9148357.roa (raw, json)
Hash identifier:          BggMllPE+M4CptYVDQlrAJfhmU7sWNiqB7fCkjLntvI=
Subject key identifier:   E3:E6:93:73:58:39:D8:61:B3:1A:C1:7E:B6:31:17:E4:37:59:DF:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8BE5A74A160B5CBCFEA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81f1b380-e4b6-3321-ab46-5b2ed9148357.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        76.119.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:be:5a:74:a1:60:b5:cb:cf:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=0ffa8e6d-c043-43cf-ae2e-c25a921836b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:b1:12:0d:66:13:20:32:c9:38:d4:2a:c9:
                    19:69:1f:21:e8:60:02:5e:ee:08:03:18:a8:f7:3d:
                    2d:5c:20:f2:65:96:bc:a0:b1:0d:de:7a:47:4e:cc:
                    ea:19:47:cd:70:5c:e4:7f:0f:3c:82:3d:15:d1:4d:
                    49:3c:45:23:93:88:49:82:c4:00:dc:c5:da:99:55:
                    5a:09:fd:67:ae:b6:b9:6f:39:89:11:f2:ef:72:22:
                    2c:0b:d4:ad:e8:f3:4e:da:75:e2:32:ef:e7:1d:45:
                    f1:f9:3a:0e:68:69:a2:ac:8c:20:97:9b:e1:25:f7:
                    1c:89:3e:bf:1a:1d:d8:5b:89:f7:88:32:31:23:33:
                    c1:1a:72:eb:b4:41:ca:ea:35:57:2e:db:04:71:94:
                    87:ec:c2:04:9f:4a:f3:29:f6:09:f2:7a:0f:ec:fd:
                    83:82:da:a0:37:ed:86:06:30:bb:6e:03:69:f5:b0:
                    ed:9a:bd:b1:d7:d0:a2:16:fa:7c:04:3e:51:ce:5d:
                    19:7c:9d:1b:cf:2a:6f:77:28:b0:45:e4:65:27:9c:
                    0b:82:a0:2e:ee:5c:17:69:62:56:5e:4c:8e:5a:a7:
                    bd:ab:0c:a5:0d:37:bf:57:07:64:3a:71:a6:d2:ae:
                    5b:52:52:17:1e:b4:32:9d:b5:55:21:b0:98:e4:1f:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:93:73:58:39:D8:61:B3:1A:C1:7E:B6:31:17:E4:37:59:DF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81f1b380-e4b6-3321-ab46-5b2ed9148357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.119.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:26:b2:01:81:5c:83:aa:b4:5b:5d:2b:d1:cc:49:58:1b:56:
         9d:4f:97:53:0c:68:2b:a3:02:33:9f:7b:62:17:b8:04:67:3a:
         17:88:45:11:3b:a4:f7:ca:f5:95:6f:89:ac:5b:ee:bd:d1:d6:
         74:e2:e2:d2:8d:52:0d:c3:98:3c:35:3d:71:6f:f8:39:4f:c8:
         e6:1b:f0:65:3c:b1:19:35:b9:0c:a5:fb:f8:5e:6c:93:76:8e:
         34:69:c2:ab:6b:03:ec:63:e3:50:14:bd:2e:2d:fe:17:2b:91:
         5e:fc:f2:80:94:cb:99:15:c3:1a:47:93:f7:c0:17:a7:c6:a6:
         ff:01:ad:c4:a3:44:a7:b9:fb:29:bc:e3:8c:e2:31:cd:83:a7:
         bb:aa:5d:4d:36:d4:11:78:2b:09:87:7e:af:67:2b:3a:bd:38:
         b2:07:be:8b:10:37:92:78:d5:ac:4a:54:f0:71:e8:c4:a0:1c:
         f5:6f:e6:11:4f:e2:98:f3:c1:fd:db:66:62:8c:e2:dd:ef:78:
         b5:b0:21:f2:25:a6:7f:6f:fc:e2:7a:b3:94:3a:aa:7a:ce:cd:
         a7:ef:c7:4d:84:96:17:c7:97:a6:2e:00:3b:ce:24:e6:d9:a6:
         d5:69:47:6e:bb:66:14:a1:b1:b8:33:c4:34:65:11:37:43:3c:
         b5:91:17:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+L5adKFgtcvP6kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MGZmYThlNmQtYzA0My00M2NmLWFlMmUtYzI1YTkyMTgzNmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxmxEg1mEyAyyTjUKskZaR8h6GACXu4IAxio
9z0tXCDyZZa8oLEN3npHTszqGUfNcFzkfw88gj0V0U1JPEUjk4hJgsQA3MXamVVa
Cf1nrra5bzmJEfLvciIsC9St6PNO2nXiMu/nHUXx+ToOaGmirIwgl5vhJfcciT6/
Gh3YW4n3iDIxIzPBGnLrtEHK6jVXLtsEcZSH7MIEn0rzKfYJ8noP7P2DgtqgN+2G
BjC7bgNp9bDtmr2x19CiFvp8BD5Rzl0ZfJ0bzypvdyiwReRlJ5wLgqAu7lwXaWJW
XkyOWqe9qwylDTe/VwdkOnGm0q5bUlIXHrQynbVVIbCY5B/A8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPmk3NYOdhhsxrBfrYxF+Q3Wd+EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODFmMWIzODAtZTRiNi0z
MzIxLWFiNDYtNWIyZWQ5MTQ4MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHdyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsmsgGBXIOqtFtdK9HMSVgbVp1Pl1MMaCujAjOfe2IXuARnOheIRRE7
pPfK9ZVviaxb7r3R1nTi4tKNUg3DmDw1PXFv+DlPyOYb8GU8sRk1uQyl+/hebJN2
jjRpwqtrA+xj41AUvS4t/hcrkV788oCUy5kVwxpHk/fAF6fGpv8BrcSjRKe5+ym8
44ziMc2Dp7uqXU021BF4KwmHfq9nKzq9OLIHvosQN5J41axKVPBx6MSgHPVv5hFP
4pjzwf3bZmKM4t3veLWwIfIlpn9v/OJ6s5Q6qnrOzafvx02ElhfHl6YuADvOJObZ
ptVpR267ZhShsbgzxDRlETdDPLWRF68=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:01 2025 by rpki-client