Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/909777a2-19d4-3dd2-b229-2d1ffbf97e3d.roa
File:                     909777a2-19d4-3dd2-b229-2d1ffbf97e3d.roa (raw, json)
Hash identifier:          wYfjSiWtPtkD5au41CVq+LtY3xIMz+sgdSMoQ71CdSw=
Subject key identifier:   08:12:36:8C:77:30:A7:35:3F:5B:89:8B:DF:9F:6E:76:3A:0E:F8:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4321F3F45C00E5513233DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/909777a2-19d4-3dd2-b229-2d1ffbf97e3d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        76.112.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:1f:3f:45:c0:0e:55:13:23:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d7f0b766-53d5-4891-99ba-4b035e11d694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:42:fe:9d:b8:8b:41:c2:46:17:d2:de:88:
                    fd:e3:4a:b8:b1:60:37:cf:4c:12:05:d9:1f:7e:df:
                    f0:58:61:78:a4:4c:a5:01:12:a4:eb:0b:3a:ed:a8:
                    2e:c6:8e:2e:3a:5a:52:29:68:f3:ff:a0:d8:c9:74:
                    66:d1:29:94:2f:fe:7e:64:2e:03:89:36:b3:95:94:
                    69:fc:e1:e1:ed:6d:71:b1:bb:99:20:51:eb:90:d2:
                    b0:e6:e3:ea:9a:8a:d0:4a:85:58:ae:57:ea:3e:59:
                    08:a0:01:c9:4f:bb:42:34:f1:59:7a:e0:39:a8:25:
                    8f:b5:2f:f1:cc:07:a7:77:95:48:66:24:ab:f6:c5:
                    39:c0:24:0d:a5:00:24:ef:42:fb:ea:15:ec:91:65:
                    85:a3:c5:41:4f:af:fd:19:11:cd:2a:95:fe:4f:22:
                    70:4d:a1:f2:fc:9a:0a:36:0e:f9:4f:9f:5d:cf:51:
                    59:f4:3b:e0:e1:3c:70:d9:d3:2d:02:6e:74:2a:3a:
                    b7:06:47:f8:5e:83:ba:23:22:eb:40:38:9b:67:6c:
                    84:ab:28:12:cd:04:94:ad:b8:d2:7b:ce:3a:d1:22:
                    40:ac:14:18:73:1a:82:b6:91:6b:f0:f1:79:c6:2e:
                    68:3e:48:c0:a0:0c:d8:1a:e0:7b:35:ad:c0:a9:ae:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:36:8C:77:30:A7:35:3F:5B:89:8B:DF:9F:6E:76:3A:0E:F8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/909777a2-19d4-3dd2-b229-2d1ffbf97e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:d1:04:60:37:40:b0:96:e3:25:55:58:0c:f3:17:dc:52:
         80:1c:6d:61:88:dd:42:52:dd:93:07:31:45:0c:cd:74:a8:2e:
         3f:7c:52:ff:3f:24:0f:8d:59:60:5b:78:63:fd:44:e5:37:a1:
         45:0f:36:b9:57:6f:12:fb:ef:08:7b:a4:e1:9d:35:a7:3f:7e:
         60:89:2d:03:e6:c0:a0:c5:af:52:8a:4c:ab:63:1b:8d:1b:ad:
         4c:83:25:54:8e:d8:f5:73:47:20:d2:86:c0:71:a4:1c:ca:e7:
         65:b5:d5:86:83:7e:52:f6:8f:10:5d:48:72:29:16:67:f1:65:
         ce:a2:1c:26:d8:12:2a:0a:b4:e1:ac:2c:ea:f6:33:08:36:26:
         db:df:ea:97:bd:cd:d7:5d:bb:cb:59:65:d3:82:89:2d:fa:64:
         4a:2f:5a:44:0b:2c:5b:2c:4e:a2:24:b1:6f:65:eb:53:84:72:
         91:0b:44:8e:29:e2:d8:72:b3:89:84:60:d4:e2:5f:09:69:64:
         df:e9:28:e2:67:02:ea:df:28:76:cc:94:3b:3e:5c:e3:a3:df:
         68:8e:65:f9:05:4c:ca:61:a3:1d:82:85:7f:11:f6:ae:1f:54:
         71:cc:75:10:df:52:2f:48:1c:eb:f9:09:8f:cd:26:8b:22:01:
         c2:17:fd:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMh8/RcAOVRMjPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZDdmMGI3NjYtNTNkNS00ODkxLTk5YmEtNGIwMzVlMTFkNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUFC/p24i0HCRhfS3oj940q4sWA3z0wSBdkf
ft/wWGF4pEylARKk6ws67aguxo4uOlpSKWjz/6DYyXRm0SmUL/5+ZC4DiTazlZRp
/OHh7W1xsbuZIFHrkNKw5uPqmorQSoVYrlfqPlkIoAHJT7tCNPFZeuA5qCWPtS/x
zAend5VIZiSr9sU5wCQNpQAk70L76hXskWWFo8VBT6/9GRHNKpX+TyJwTaHy/JoK
Ng75T59dz1FZ9Dvg4Txw2dMtAm50Kjq3Bkf4XoO6IyLrQDibZ2yEqygSzQSUrbjS
e8460SJArBQYcxqCtpFr8PF5xi5oPkjAoAzYGuB7Na3Aqa7JyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgSNox3MKc1P1uJi9+fbnY6DvjCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA5Nzc3YTItMTlkNC0z
ZGQyLWIyMjktMmQxZmZiZjk3ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFe90QRgN0CwluMlVVgM8xfcUoAcbWGI3UJS3ZMHMUUMzXSoLj98Uv8/
JA+NWWBbeGP9ROU3oUUPNrlXbxL77wh7pOGdNac/fmCJLQPmwKDFr1KKTKtjG40b
rUyDJVSO2PVzRyDShsBxpBzK52W11YaDflL2jxBdSHIpFmfxZc6iHCbYEioKtOGs
LOr2Mwg2Jtvf6pe9zdddu8tZZdOCiS36ZEovWkQLLFssTqIksW9l61OEcpELRI4p
4thys4mEYNTiXwlpZN/pKOJnAurfKHbMlDs+XOOj32iOZfkFTMphox2ChX8R9q4f
VHHMdRDfUi9IHOv5CY/NJosiAcIX/Ro=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:58:06 2025 by rpki-client