Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8d782f5-f1c9-30d6-b519-489f2585c3b2.roa
File:                     c8d782f5-f1c9-30d6-b519-489f2585c3b2.roa (raw, json)
Hash identifier:          2olrbOFlkTcCapzI//eenJnnMRFgVLR0h5qZ2LsbTXo=
Subject key identifier:   7F:3B:BA:00:EE:AC:A5:AA:5D:23:F2:BA:17:DA:78:9D:48:64:30:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43261504657E90FC0EF81A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8d782f5-f1c9-30d6-b519-489f2585c3b2.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.142.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:61:50:46:57:e9:0f:c0:ef:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4532522f-a209-4f59-b659-c1794f07c739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:51:15:3d:70:05:c7:f5:28:fd:7d:3d:25:
                    8d:a4:a6:b6:21:fe:01:1d:74:c8:78:00:54:8d:ea:
                    0c:7d:48:78:be:d2:01:5b:dc:b1:0e:2a:e7:d8:0d:
                    72:f9:23:63:0f:4f:5a:8b:da:c9:0d:5c:6a:b2:d3:
                    13:04:46:ab:27:1b:f4:2a:4a:42:c3:22:0e:7e:52:
                    43:0f:8c:7d:ff:ae:4b:56:1d:c4:62:06:da:42:b7:
                    6f:57:7a:82:3c:3e:db:20:7f:c3:31:5d:c2:16:4c:
                    c3:2f:f8:16:5b:bf:0f:08:33:bd:71:5b:7b:2f:33:
                    c1:6f:ed:5c:51:a4:4a:fc:1a:e2:ec:63:8d:c9:10:
                    5e:82:36:b2:ab:88:ea:81:7f:db:12:f3:80:51:97:
                    40:2b:d2:0b:fd:ab:db:a3:7b:e4:3f:e9:28:b1:a7:
                    7a:55:bf:71:ad:ce:92:71:f7:75:6b:6c:47:eb:38:
                    fc:aa:b1:cb:d5:30:a4:cb:61:34:aa:52:fe:d2:80:
                    58:ba:0c:2c:64:e8:7f:39:34:f5:b2:9d:0c:04:51:
                    2f:74:40:42:ee:18:6e:74:7b:0d:28:ae:84:f9:bd:
                    35:1d:99:c8:6e:61:17:38:90:ff:e2:2a:5c:a1:d1:
                    e6:a6:88:1d:de:a4:f9:c3:ff:96:20:cd:69:ed:e2:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3B:BA:00:EE:AC:A5:AA:5D:23:F2:BA:17:DA:78:9D:48:64:30:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8d782f5-f1c9-30d6-b519-489f2585c3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:8d:81:62:5f:60:26:e5:e8:c8:3e:16:5d:a1:28:26:31:20:
         40:09:6d:80:c7:88:f7:8e:f6:d7:c0:6d:67:a7:22:9e:61:22:
         2b:ab:c4:04:a2:b5:04:52:07:6c:32:85:5a:8d:d2:9f:07:23:
         1c:8f:03:e9:8d:50:ab:69:f3:38:28:7c:44:8d:6c:3f:93:e6:
         57:aa:47:44:90:26:3f:ad:61:df:15:ac:53:19:a4:3b:86:33:
         52:2a:0d:8b:bb:00:5a:9c:66:52:41:a9:b5:a5:1b:53:a4:e3:
         93:3a:14:b2:cc:41:08:6b:58:fc:1b:40:aa:ba:6c:8d:a3:de:
         e6:1a:c9:ee:7d:c4:23:70:a3:e7:2c:74:ef:6e:08:a7:ca:c5:
         c2:e8:26:63:6f:00:14:15:56:73:3d:aa:87:40:df:fc:6a:f0:
         a3:dc:24:39:15:01:4f:be:33:69:a8:7e:93:a6:b9:fe:eb:cd:
         35:31:0d:93:c4:3e:3c:fb:51:f3:f7:62:5f:12:cc:1b:8b:1b:
         08:68:65:fc:ff:f6:98:31:e7:7d:f0:6d:66:30:69:73:f9:14:
         40:f2:cc:3b:9c:c0:c0:ed:8e:99:da:b7:da:25:2b:85:ab:d1:
         f2:fe:7b:f7:7d:a8:94:3a:49:fd:07:3d:90:b7:ae:9a:f6:cf:
         dc:cb:dd:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMmFQRlfpD8DvgaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDUzMjUyMmYtYTIwOS00ZjU5LWI2NTktYzE3OTRmMDdjNzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb5RFT1wBcf1KP19PSWNpKa2If4BHXTIeABU
jeoMfUh4vtIBW9yxDirn2A1y+SNjD09ai9rJDVxqstMTBEarJxv0KkpCwyIOflJD
D4x9/65LVh3EYgbaQrdvV3qCPD7bIH/DMV3CFkzDL/gWW78PCDO9cVt7LzPBb+1c
UaRK/Bri7GONyRBegjayq4jqgX/bEvOAUZdAK9IL/avbo3vkP+kosad6Vb9xrc6S
cfd1a2xH6zj8qrHL1TCky2E0qlL+0oBYugwsZOh/OTT1sp0MBFEvdEBC7hhudHsN
KK6E+b01HZnIbmEXOJD/4ipcodHmpogd3qT5w/+WIM1p7eLpNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH87ugDurKWqXSPyuhfaeJ1IZDBpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhkNzgyZjUtZjFjOS0z
MGQ2LWI1MTktNDg5ZjI1ODVjM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI54MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALaNgWJfYCbl6Mg+Fl2hKCYxIEAJbYDHiPeO9tfAbWenIp5hIiurxASi
tQRSB2wyhVqN0p8HIxyPA+mNUKtp8zgofESNbD+T5leqR0SQJj+tYd8VrFMZpDuG
M1IqDYu7AFqcZlJBqbWlG1Ok45M6FLLMQQhrWPwbQKq6bI2j3uYaye59xCNwo+cs
dO9uCKfKxcLoJmNvABQVVnM9qodA3/xq8KPcJDkVAU++M2mofpOmuf7rzTUxDZPE
Pjz7UfP3Yl8SzBuLGwhoZfz/9pgx533wbWYwaXP5FEDyzDucwMDtjpnat9olK4Wr
0fL+e/d9qJQ6Sf0HPZC3rpr2z9zL3VQ=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:50:07 2025 by rpki-client