Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b6f45f-fd1f-329c-a5a2-ce2657799f2d.roa
File:                     d2b6f45f-fd1f-329c-a5a2-ce2657799f2d.roa (raw, json)
Hash identifier:          KfcI2RC2s7Kv0z8rJIQV6iNVmfCZO1/Jv7U3hfcO2BY=
Subject key identifier:   DD:D9:9C:0D:9E:B9:D7:3E:3D:A6:47:AB:49:37:3C:36:46:CB:0D:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7541CB90A5E7187C7BB500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b6f45f-fd1f-329c-a5a2-ce2657799f2d.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        71.56.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:41:cb:90:a5:e7:18:7c:7b:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=9ffc117e-5571-473a-835d-7ea513793a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:3d:5f:f4:a6:9e:01:df:94:25:52:01:00:
                    f7:66:08:30:69:8d:3d:7e:e1:4b:9d:e6:e8:0b:03:
                    0d:76:50:09:a5:53:b8:8e:87:6c:79:03:de:bb:9d:
                    b7:9c:61:56:2b:dd:67:17:cc:7e:86:4c:39:b6:9f:
                    1f:e4:dc:bf:54:18:3f:cb:f8:c5:34:6a:c3:41:48:
                    f7:2b:ba:83:9d:13:32:bc:57:48:f3:16:7c:9d:9f:
                    5c:fc:83:1c:9e:e3:bc:26:26:c2:77:de:19:4b:53:
                    5a:e0:93:18:4d:e1:dd:49:b5:97:9c:d6:97:6f:13:
                    52:60:2b:c4:90:6c:f0:83:3e:21:8e:e7:a0:2a:51:
                    c4:7c:0d:f0:a2:a0:be:72:25:36:55:d3:85:29:59:
                    e1:bd:3d:da:ab:a7:c9:47:2a:50:44:50:0f:51:f0:
                    96:d3:33:92:b9:ee:00:1a:37:6f:84:c7:6a:36:76:
                    7e:c3:4f:7e:ed:6b:67:f5:06:c8:ba:5d:c7:57:8f:
                    eb:ea:5b:b4:ac:3a:a8:69:d3:ae:e2:de:15:48:86:
                    32:de:a4:f1:b2:68:49:e3:ab:41:f8:23:11:1b:af:
                    d4:48:8a:16:6c:1f:5c:5d:08:59:58:7f:c7:99:ee:
                    2e:fb:e8:f4:fc:31:24:ca:4b:59:f6:d2:23:bc:d9:
                    83:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:9C:0D:9E:B9:D7:3E:3D:A6:47:AB:49:37:3C:36:46:CB:0D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b6f45f-fd1f-329c-a5a2-ce2657799f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:2d:a7:6d:44:1b:24:95:89:8b:87:0f:fe:d7:e0:42:e5:
         5a:3a:04:7b:40:8c:74:bc:b1:4a:29:88:97:1f:ad:82:25:e5:
         f8:da:a3:89:0b:4f:7d:63:16:51:ba:39:61:e7:c0:37:f1:a9:
         21:bb:e1:9a:ae:aa:f6:f5:5a:e1:cd:1f:94:dd:50:e6:7b:05:
         27:a1:2b:5a:5e:34:e2:66:85:f6:5a:ce:62:4c:df:64:c3:af:
         64:e9:b8:24:73:52:ba:30:02:b4:64:48:c7:c2:9d:f3:33:12:
         98:b5:96:d9:5c:5e:3d:f1:b1:51:4a:fc:d0:87:4e:3c:77:6a:
         2d:7d:bc:57:cf:60:12:47:8f:84:84:cf:dd:31:9f:8c:3b:9c:
         7a:75:73:cf:4a:29:f9:15:ac:60:75:72:87:d5:9f:5a:b5:50:
         c3:d6:cf:03:8e:f6:64:4e:57:48:37:7b:ff:52:4f:2b:e9:6a:
         9d:82:14:31:2b:6e:6d:30:ae:5e:2c:21:88:19:0e:8b:19:87:
         6a:ae:6c:15:58:48:d1:dd:39:4b:c4:7f:bd:cc:fc:67:ef:9d:
         77:6e:00:bd:b9:1a:08:09:ee:a9:2c:09:b9:62:86:74:82:8d:
         13:7d:f9:de:b8:81:38:3d:ad:16:0a:5c:52:c0:2f:f5:6c:10:
         a5:fa:64:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dUHLkKXnGHx7tQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
OWZmYzExN2UtNTU3MS00NzNhLTgzNWQtN2VhNTEzNzkzYTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzo9X/SmngHflCVSAQD3ZggwaY09fuFLnebo
CwMNdlAJpVO4jodseQPeu523nGFWK91nF8x+hkw5tp8f5Ny/VBg/y/jFNGrDQUj3
K7qDnRMyvFdI8xZ8nZ9c/IMcnuO8JibCd94ZS1Na4JMYTeHdSbWXnNaXbxNSYCvE
kGzwgz4hjuegKlHEfA3woqC+ciU2VdOFKVnhvT3aq6fJRypQRFAPUfCW0zOSue4A
GjdvhMdqNnZ+w09+7Wtn9QbIul3HV4/r6lu0rDqoadOu4t4VSIYy3qTxsmhJ46tB
+CMRG6/USIoWbB9cXQhZWH/Hme4u++j0/DEkyktZ9tIjvNmDNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3ZnA2eudc+PaZHq0k3PDZGyw0EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJiNmY0NWYtZmQxZi0z
MjljLWE1YTItY2UyNjU3Nzk5ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzgGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6pLadtRBsklYmLhw/+1+BC5Vo6BHtAjHS8sUopiJcfrYIl5fjao4kL
T31jFlG6OWHnwDfxqSG74Zquqvb1WuHNH5TdUOZ7BSehK1peNOJmhfZazmJM32TD
r2TpuCRzUrowArRkSMfCnfMzEpi1ltlcXj3xsVFK/NCHTjx3ai19vFfPYBJHj4SE
z90xn4w7nHp1c89KKfkVrGB1cofVn1q1UMPWzwOO9mROV0g3e/9STyvpap2CFDEr
bm0wrl4sIYgZDosZh2qubBVYSNHdOUvEf73M/GfvnXduAL25GggJ7qksCblihnSC
jRN9+d64gTg9rRYKXFLAL/VsEKX6ZHg=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:46:41 2025 by rpki-client