Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c71880-bd4e-3ca3-9700-46f690b77542.roa
File:                     87c71880-bd4e-3ca3-9700-46f690b77542.roa (raw, json)
Hash identifier:          rPA2V/2W6vA0B7icVXnV7vdPWQWMVtscxkuPnsOiKIM=
Subject key identifier:   5D:9F:3C:50:9D:10:69:3A:74:B9:1B:86:27:4C:B7:C1:73:97:3E:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB04D9E978661C1DBD56C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c71880-bd4e-3ca3-9700-46f690b77542.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        68.83.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:4d:9e:97:86:61:c1:db:d5:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=14ad9c4e-0e77-47c5-b387-e2cc24d97e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:d3:c0:e0:32:0e:b2:45:50:1a:6e:39:73:
                    7a:0e:8a:fe:88:e4:6a:17:03:31:64:fa:8e:3f:71:
                    22:6d:ca:f2:aa:71:c3:ac:2e:cd:48:bd:da:73:72:
                    a3:f0:ef:0e:bb:26:35:3c:b5:e9:c4:6e:a3:54:4b:
                    d7:5f:b0:29:db:cb:e7:39:d9:02:6d:85:1d:1a:4d:
                    44:f7:af:b7:ac:0b:d1:7c:2e:bf:6e:a0:82:cf:f0:
                    bc:1b:56:f8:a1:c4:78:3f:18:0e:62:29:3a:8c:63:
                    0a:de:11:f5:0f:8d:85:62:e2:9d:d7:a5:b3:40:9e:
                    37:09:10:96:76:d1:05:08:ec:3d:82:8f:33:ab:e6:
                    be:b7:57:f2:43:b1:84:a1:e2:da:2a:69:d1:98:18:
                    a0:df:ee:1c:72:67:48:81:3b:c9:8a:aa:db:b3:4d:
                    8d:15:30:0e:c2:e5:e9:5b:c2:70:d7:df:f6:71:4a:
                    cb:39:b1:60:b7:70:c5:ec:31:fd:55:57:d8:82:81:
                    64:66:99:7d:33:7d:0e:58:cf:68:61:a0:20:8b:bb:
                    a0:6a:51:ba:9c:6c:6f:fc:c1:9d:ed:08:a1:e0:8f:
                    6a:c7:8a:9f:3e:f9:65:22:60:c5:a3:24:af:06:c1:
                    12:c3:20:1a:25:62:64:1b:2e:f4:12:16:37:24:26:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9F:3C:50:9D:10:69:3A:74:B9:1B:86:27:4C:B7:C1:73:97:3E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c71880-bd4e-3ca3-9700-46f690b77542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:79:8a:3c:af:e5:51:5d:2e:ef:2d:85:98:de:5d:0a:8f:90:
         2a:a1:43:23:ef:c6:d6:bd:d9:3d:29:ed:30:9d:bd:80:a8:57:
         70:7c:cb:b3:f8:16:d1:d5:60:ed:18:ff:ff:10:d0:a7:27:e5:
         23:17:dd:5e:47:f2:5d:0d:ff:43:ed:8b:5e:b2:23:51:9a:7b:
         c0:55:dd:ea:23:b2:88:57:da:0a:40:79:23:1c:99:70:95:42:
         a8:ab:f7:58:ab:97:96:4a:c9:1b:12:11:f0:6e:4a:62:f3:60:
         f0:d7:be:01:ae:76:d2:79:e9:4b:d1:c4:9b:5e:d9:36:e9:58:
         42:f8:dd:cb:f6:14:18:80:95:8a:ac:d6:0f:4a:19:e9:30:12:
         69:f2:c0:d1:39:dc:5b:a4:8b:2b:e5:a0:f5:cb:0b:be:e7:94:
         d0:1e:84:5c:69:ef:7f:6a:8b:60:e1:7e:3f:1f:fb:8a:a9:63:
         b5:d2:ff:e8:63:97:43:5a:37:7f:b2:d0:10:c2:ff:46:bd:71:
         11:1c:cb:81:b2:fa:d3:58:50:72:01:5e:48:17:f3:d2:9b:e7:
         0f:10:14:af:66:42:85:32:1c:74:0a:98:7a:e2:97:0d:77:ca:
         27:51:0d:e2:76:c4:74:a2:f2:e7:13:79:06:cc:5c:6e:0d:cd:
         94:a5:98:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssE2el4ZhwdvVbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTRhZDljNGUtMGU3Ny00N2M1LWIzODctZTJjYzI0ZDk3ZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2znTwOAyDrJFUBpuOXN6Dor+iORqFwMxZPqO
P3EibcryqnHDrC7NSL3ac3Kj8O8OuyY1PLXpxG6jVEvXX7Ap28vnOdkCbYUdGk1E
96+3rAvRfC6/bqCCz/C8G1b4ocR4PxgOYik6jGMK3hH1D42FYuKd16WzQJ43CRCW
dtEFCOw9go8zq+a+t1fyQ7GEoeLaKmnRmBig3+4ccmdIgTvJiqrbs02NFTAOwuXp
W8Jw19/2cUrLObFgt3DF7DH9VVfYgoFkZpl9M30OWM9oYaAgi7ugalG6nGxv/MGd
7Qih4I9qx4qfPvllImDFoySvBsESwyAaJWJkGy70EhY3JCZz7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2fPFCdEGk6dLkbhidMt8Fzlz7SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdjNzE4ODAtYmQ0ZS0z
Y2EzLTk3MDAtNDZmNjkwYjc3NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK95ijyv5VFdLu8thZjeXQqPkCqhQyPvxta92T0p7TCdvYCoV3B8y7P4
FtHVYO0Y//8Q0Kcn5SMX3V5H8l0N/0Pti16yI1Gae8BV3eojsohX2gpAeSMcmXCV
Qqir91irl5ZKyRsSEfBuSmLzYPDXvgGudtJ56UvRxJte2TbpWEL43cv2FBiAlYqs
1g9KGekwEmnywNE53FukiyvloPXLC77nlNAehFxp739qi2Dhfj8f+4qpY7XS/+hj
l0NaN3+y0BDC/0a9cREcy4Gy+tNYUHIBXkgX89Kb5w8QFK9mQoUyHHQKmHrilw13
yidRDeJ2xHSi8ucTeQbMXG4NzZSlmFo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:14 2025 by rpki-client