Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c51a1eb3-a236-39d9-a103-ee9e2779f913.roa
File:                     c51a1eb3-a236-39d9-a103-ee9e2779f913.roa (raw, json)
Hash identifier:          e/vg5xJM4inKCkH8SSAZ23zcqBnt4rAkmyEb8cXfUZ4=
Subject key identifier:   E1:62:49:4C:09:74:24:C8:B2:99:6F:D6:B9:4E:41:3D:78:06:24:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C060289C8182B4900E4B5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c51a1eb3-a236-39d9-a103-ee9e2779f913.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        76.124.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:02:89:c8:18:2b:49:00:e4:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=797bcb32-8f47-4f96-8b49-e23772c6bf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:59:7f:0b:66:4b:dd:ef:32:7f:21:28:1e:
                    05:11:cb:7d:37:4d:12:10:1f:3b:45:1a:8c:48:ee:
                    25:72:36:65:2c:08:95:0c:34:e2:db:e9:04:2f:c7:
                    73:15:79:f4:12:fc:0e:84:52:df:cb:76:55:53:6c:
                    1b:47:c7:a4:03:6c:24:03:fc:b7:27:28:5a:4a:1b:
                    cb:38:b2:b0:fb:64:42:f3:68:87:39:1d:f1:9a:de:
                    dc:95:cc:90:f5:b2:55:7e:41:d8:04:d5:a5:ec:a4:
                    2a:45:cf:f8:2a:20:67:06:9a:5a:cc:16:eb:30:b0:
                    79:e9:f7:71:5f:69:6d:bc:8e:40:42:39:f7:d6:32:
                    d6:c2:00:8f:1e:ad:81:5a:5a:76:d0:2f:4c:aa:91:
                    e0:ae:c0:24:f2:82:e9:f5:a4:f5:bf:03:8c:18:d5:
                    1e:26:98:a2:ff:7e:d9:0e:32:14:78:8a:cc:6e:d5:
                    0c:cc:3a:22:d9:e3:1d:81:f1:4f:c6:b0:c3:9a:9c:
                    f9:d9:ef:b1:95:17:d2:b6:31:fc:a6:52:bc:44:74:
                    9a:30:01:72:45:2d:07:ba:84:00:b6:8b:75:f2:36:
                    aa:09:3f:ad:af:be:4c:11:22:e6:da:c3:ce:5f:af:
                    a3:bf:2d:f7:1e:a2:42:82:16:32:3e:4b:f6:04:ce:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:62:49:4C:09:74:24:C8:B2:99:6F:D6:B9:4E:41:3D:78:06:24:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c51a1eb3-a236-39d9-a103-ee9e2779f913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:5c:f2:eb:3f:ed:c5:71:89:84:43:21:b7:b6:a1:7c:90:
         1d:4a:74:b9:29:da:40:c5:68:73:67:08:b3:ac:ef:c6:e4:df:
         53:0e:ea:31:12:55:f1:a0:51:c6:f7:16:c7:a1:85:1a:1a:27:
         06:c2:dd:f3:99:49:13:4a:72:1b:df:57:aa:0b:b4:dc:c2:87:
         8d:f2:9c:38:3e:24:15:53:e2:e4:bc:3f:39:15:37:eb:07:07:
         28:a4:99:09:52:6a:83:4f:09:2d:71:66:1e:dd:36:74:dd:2f:
         60:db:9c:97:45:5f:1c:f0:e1:26:b9:81:a3:61:bd:33:a9:7b:
         9a:e6:71:14:c2:f8:4e:bf:ce:02:ab:ae:8c:f0:1d:2f:a3:92:
         5c:3f:d5:58:e8:35:d6:94:27:97:77:a0:66:72:2b:74:51:be:
         ea:94:28:85:1c:e8:72:60:02:5e:03:36:3c:e1:d8:26:d9:65:
         23:4c:9d:61:76:ae:2c:f8:51:67:92:f3:9f:d0:0a:36:c6:dd:
         98:9f:6d:8d:f0:23:d3:86:4d:6f:dc:c1:c9:99:e8:08:6a:5e:
         07:0f:84:9b:19:3c:1b:c7:bf:12:34:f7:b6:f1:d3:4d:0a:56:
         66:90:c5:3a:13:08:32:95:c5:90:6a:3f:27:82:54:95:b4:2e:
         7e:a6:a0:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBgKJyBgrSQDktcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
Nzk3YmNiMzItOGY0Ny00Zjk2LThiNDktZTIzNzcyYzZiZjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpNZfwtmS93vMn8hKB4FEct9N00SEB87RRqM
SO4lcjZlLAiVDDTi2+kEL8dzFXn0EvwOhFLfy3ZVU2wbR8ekA2wkA/y3JyhaShvL
OLKw+2RC82iHOR3xmt7clcyQ9bJVfkHYBNWl7KQqRc/4KiBnBppazBbrMLB56fdx
X2ltvI5AQjn31jLWwgCPHq2BWlp20C9MqpHgrsAk8oLp9aT1vwOMGNUeJpii/37Z
DjIUeIrMbtUMzDoi2eMdgfFPxrDDmpz52e+xlRfStjH8plK8RHSaMAFyRS0HuoQA
tot18jaqCT+tr75MESLm2sPOX6+jvy33HqJCghYyPkv2BM5RvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFiSUwJdCTIsplv1rlOQT14BiTeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzUxYTFlYjMtYTIzNi0z
OWQ5LWExMDMtZWU5ZTI3NzlmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHzIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+IXPLrP+3FcYmEQyG3tqF8kB1KdLkp2kDFaHNnCLOs78bk31MO6jES
VfGgUcb3FsehhRoaJwbC3fOZSRNKchvfV6oLtNzCh43ynDg+JBVT4uS8PzkVN+sH
ByikmQlSaoNPCS1xZh7dNnTdL2DbnJdFXxzw4Sa5gaNhvTOpe5rmcRTC+E6/zgKr
rozwHS+jklw/1VjoNdaUJ5d3oGZyK3RRvuqUKIUc6HJgAl4DNjzh2CbZZSNMnWF2
riz4UWeS85/QCjbG3ZifbY3wI9OGTW/cwcmZ6AhqXgcPhJsZPBvHvxI097bx000K
VmaQxToTCDKVxZBqPyeCVJW0Ln6moFg=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:49:00 2025 by rpki-client