Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4c9c87b-e817-3bf6-bf34-22703dde3e4e.roa
File:                     c4c9c87b-e817-3bf6-bf34-22703dde3e4e.roa (raw, json)
Hash identifier:          BfXiRGZ3RtGzL1VX31GyGybixqcEEW72vSlT8V0A7/E=
Subject key identifier:   14:18:A0:58:C0:AB:65:EA:BE:8F:79:29:80:32:DE:15:62:B4:5A:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F846D5BA9A160A3206DA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4c9c87b-e817-3bf6-bf34-22703dde3e4e.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.138.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:46:d5:ba:9a:16:0a:32:06:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=41105592-b069-421d-9120-3d1dd31e259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:cd:39:68:a2:c2:d1:d2:29:3a:db:3f:63:
                    33:b7:75:38:8a:92:a7:6f:be:2c:20:a7:94:75:6f:
                    bc:b0:db:bd:d1:43:34:a4:d3:c5:f5:68:27:93:9f:
                    1f:62:cf:b2:39:42:9e:7b:72:94:75:a0:82:2e:1d:
                    84:7a:c3:ec:0b:54:bb:85:e1:36:e0:b8:61:a6:f1:
                    42:f3:7b:7a:72:fc:69:3c:73:13:3b:c2:67:c6:53:
                    64:dd:00:29:4f:39:e4:9d:b1:8b:df:99:de:fc:56:
                    9a:12:44:c7:db:94:24:8b:e2:f8:ea:4e:51:33:3e:
                    b1:4b:33:56:30:f0:c4:d7:2d:6b:9c:de:a0:89:72:
                    dc:1f:cf:e9:69:7b:87:af:0c:32:e2:5c:90:40:a6:
                    d1:b4:4c:68:c9:89:61:7f:75:74:f3:23:f4:91:f6:
                    2e:f9:52:cb:d1:8b:cd:2a:ea:90:6b:f7:69:79:42:
                    eb:81:cd:f7:4e:c4:7f:01:f9:ec:4f:a7:07:1c:1d:
                    e5:92:18:f7:f2:af:14:4e:96:40:21:b5:31:af:29:
                    eb:c0:b7:d6:53:89:96:3c:07:c0:5b:01:cb:f2:66:
                    b7:08:aa:d3:cc:d5:54:cc:f4:8a:67:09:bb:e0:86:
                    b9:7c:b5:c5:bb:32:98:79:69:7a:05:17:39:34:17:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:A0:58:C0:AB:65:EA:BE:8F:79:29:80:32:DE:15:62:B4:5A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4c9c87b-e817-3bf6-bf34-22703dde3e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:6b:e3:6e:2d:40:c5:2a:b2:38:be:f0:b3:54:74:c3:e2:
         11:e4:6b:e9:5d:87:85:df:90:cc:ed:eb:c3:73:69:05:9c:9c:
         38:7a:a1:ef:50:68:6d:12:0b:26:e9:cf:d2:21:f8:7a:a6:73:
         a5:ed:78:d9:0a:26:68:32:68:80:cd:91:cb:b8:7f:49:0d:b8:
         34:f0:5d:11:f6:a0:3f:08:c2:1b:48:36:08:0e:a0:97:bb:e7:
         15:b9:96:6f:71:4e:5f:81:bc:0d:5d:eb:a4:ef:23:84:33:84:
         12:f0:f9:10:f9:e6:63:2e:ea:fd:0e:8e:d9:59:cf:68:c4:a7:
         05:6e:0f:0b:37:f4:66:a2:88:e8:9f:28:b3:3d:ea:43:e0:bc:
         0b:9f:05:eb:a0:c9:5d:4c:09:be:f3:73:7e:38:68:63:07:46:
         2c:62:0e:64:3a:e0:59:d8:73:e8:1a:55:8a:6b:2a:8b:09:fd:
         c3:ec:2c:0c:1c:3c:fd:0a:54:fe:91:97:f9:6e:d9:0f:06:ed:
         99:c4:97:ca:46:c6:00:50:b0:ce:5d:b7:1e:38:84:14:88:ed:
         5e:b7:db:2d:c2:9b:8e:67:98:45:72:53:b1:91:be:1d:9b:1c:
         61:e3:ae:de:8e:c8:99:aa:ab:87:74:c5:55:28:92:03:5c:7f:
         d2:fd:dd:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+EbVupoWCjIG2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NDExMDU1OTItYjA2OS00MjFkLTkxMjAtM2QxZGQzMWUyNTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviXNOWiiwtHSKTrbP2Mzt3U4ipKnb74sIKeU
dW+8sNu90UM0pNPF9Wgnk58fYs+yOUKee3KUdaCCLh2EesPsC1S7heE24LhhpvFC
83t6cvxpPHMTO8JnxlNk3QApTznknbGL35ne/FaaEkTH25Qki+L46k5RMz6xSzNW
MPDE1y1rnN6giXLcH8/paXuHrwwy4lyQQKbRtExoyYlhf3V08yP0kfYu+VLL0YvN
KuqQa/dpeULrgc33TsR/AfnsT6cHHB3lkhj38q8UTpZAIbUxrynrwLfWU4mWPAfA
WwHL8ma3CKrTzNVUzPSKZwm74Ia5fLXFuzKYeWl6BRc5NBd4YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQYoFjAq2Xqvo95KYAy3hVitFqcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzRjOWM4N2ItZTgxNy0z
YmY2LWJmMzQtMjI3MDNkZGUzZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIqGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO7a+NuLUDFKrI4vvCzVHTD4hHka+ldh4XfkMzt68NzaQWcnDh6oe9Q
aG0SCybpz9Ih+Hqmc6XteNkKJmgyaIDNkcu4f0kNuDTwXRH2oD8IwhtINggOoJe7
5xW5lm9xTl+BvA1d66TvI4QzhBLw+RD55mMu6v0OjtlZz2jEpwVuDws39GaiiOif
KLM96kPgvAufBeugyV1MCb7zc344aGMHRixiDmQ64FnYc+gaVYprKosJ/cPsLAwc
PP0KVP6Rl/lu2Q8G7ZnEl8pGxgBQsM5dtx44hBSI7V632y3Cm45nmEVyU7GRvh2b
HGHjrt6OyJmqq4d0xVUokgNcf9L93ck=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:58:01 2025 by rpki-client