Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/918c988b-0921-3937-8aee-46f40fdd3524.roa
File:                     918c988b-0921-3937-8aee-46f40fdd3524.roa (raw, json)
Hash identifier:          yCKBj7QAp1rS3d3qCm2BsRqkLGse+u1WP+dUex39G8c=
Subject key identifier:   31:3F:41:9C:1D:B9:7F:C4:99:E8:2D:53:39:72:F4:C0:E6:D7:43:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA19CA60D045BB9BF42500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/918c988b-0921-3937-8aee-46f40fdd3524.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.68.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:19:ca:60:d0:45:bb:9b:f4:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0dc8878b-124c-4adb-99fc-d6b26d06aeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:6e:9e:d3:52:ca:f6:75:43:b2:e1:a5:ab:
                    39:97:c1:69:c2:a5:a7:b9:74:7f:4c:bf:76:61:c9:
                    7e:6b:37:57:36:f0:0b:82:b1:6c:99:00:f3:82:bb:
                    7d:df:5d:08:39:56:6c:ab:81:a7:9c:e2:49:ba:2c:
                    82:20:2c:e3:fd:0b:7d:7a:a8:5d:74:00:e7:fa:ea:
                    da:a6:29:5c:44:39:b0:f7:50:b9:be:d5:4c:83:84:
                    9e:6d:75:f6:8a:03:d1:d4:75:4c:31:5f:2a:12:2e:
                    9f:c1:4c:45:4f:93:ac:40:cf:83:fe:ef:0b:49:02:
                    22:30:be:6f:a4:de:ee:0e:27:92:ac:92:0f:ba:f8:
                    ad:24:1f:f2:ce:fb:ac:f0:3a:78:67:b3:3d:51:0a:
                    d5:eb:b4:2f:b0:05:79:b5:25:97:ac:70:f9:ca:1f:
                    f0:6a:75:4a:bb:32:5d:cd:21:86:22:c7:d2:e3:45:
                    bf:17:2d:25:a5:80:4c:52:23:08:31:d0:79:fd:25:
                    5e:71:e3:f9:b2:b3:2d:d6:be:c9:3f:d5:02:b9:21:
                    a3:ac:96:80:4a:51:14:ae:24:e4:55:c0:bc:6a:4c:
                    64:00:f8:46:1c:6e:77:d7:71:86:ab:3c:f2:6a:c2:
                    29:73:46:7b:30:17:15:eb:1d:cd:f0:78:a9:37:0c:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3F:41:9C:1D:B9:7F:C4:99:E8:2D:53:39:72:F4:C0:E6:D7:43:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/918c988b-0921-3937-8aee-46f40fdd3524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:61:d3:bd:3c:4f:14:28:57:33:82:41:24:2e:6d:fd:77:75:
         4d:c5:24:5d:38:b3:a8:b7:6f:86:eb:ac:a0:7a:53:6d:7c:ed:
         8b:87:51:08:0f:38:fa:61:81:68:e8:bf:53:cb:6b:5d:4a:df:
         b3:6e:90:57:1c:29:18:12:d2:e9:ba:00:87:12:a1:2e:1b:c8:
         2c:7d:d6:a4:e4:63:2d:3d:68:fb:15:49:5e:bd:80:4c:e7:e6:
         1f:5d:09:f4:82:16:31:aa:93:81:5d:7e:46:71:06:13:51:12:
         81:78:d7:19:46:ec:69:62:6b:82:07:3a:79:86:4d:4d:a0:db:
         3f:86:7f:f3:06:d1:d4:12:c4:26:5c:2d:4f:1a:6d:09:78:7f:
         95:0b:2e:a2:ad:a2:a1:0c:33:4f:25:7f:cb:a4:3f:79:35:b4:
         c7:06:a6:94:36:a2:92:89:04:f1:b4:0b:5a:70:4e:ea:02:63:
         28:6c:72:4e:e4:37:cf:d7:31:31:cb:02:17:2e:58:55:ab:9e:
         98:9f:f0:fc:ef:f4:bf:73:b5:b9:b0:9c:ed:44:50:25:82:30:
         19:06:30:91:91:bb:53:f3:96:75:26:c8:ff:c6:4a:4f:fd:52:
         75:47:09:96:39:d8:0a:3d:56:72:e6:11:36:69:db:30:db:8e:
         cf:61:ae:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqhnKYNBFu5v0JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
MGRjODg3OGItMTI0Yy00YWRiLTk5ZmMtZDZiMjZkMDZhZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieRuntNSyvZ1Q7Lhpas5l8FpwqWnuXR/TL92
Ycl+azdXNvALgrFsmQDzgrt9310IOVZsq4GnnOJJuiyCICzj/Qt9eqhddADn+ura
pilcRDmw91C5vtVMg4SebXX2igPR1HVMMV8qEi6fwUxFT5OsQM+D/u8LSQIiML5v
pN7uDieSrJIPuvitJB/yzvus8Dp4Z7M9UQrV67QvsAV5tSWXrHD5yh/wanVKuzJd
zSGGIsfS40W/Fy0lpYBMUiMIMdB5/SVeceP5srMt1r7JP9UCuSGjrJaASlEUriTk
VcC8akxkAPhGHG5313GGqzzyasIpc0Z7MBcV6x3N8HipNwyXBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDE/QZwduX/EmegtUzly9MDm10OaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTE4Yzk4OGItMDkyMS0z
OTM3LThhZWUtNDZmNDBmZGQzNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUTUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBh0708TxQoVzOCQSQubf13dU3FJF04s6i3b4brrKB6U2187YuHUQgP
OPphgWjov1PLa11K37NukFccKRgS0um6AIcSoS4byCx91qTkYy09aPsVSV69gEzn
5h9dCfSCFjGqk4FdfkZxBhNREoF41xlG7Glia4IHOnmGTU2g2z+Gf/MG0dQSxCZc
LU8abQl4f5ULLqKtoqEMM08lf8ukP3k1tMcGppQ2opKJBPG0C1pwTuoCYyhsck7k
N8/XMTHLAhcuWFWrnpif8Pzv9L9ztbmwnO1EUCWCMBkGMJGRu1PzlnUmyP/GSk/9
UnVHCZY52Ao9VnLmETZp2zDbjs9hrtQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:48:38 2025 by rpki-client