Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d65cfe0c-6b11-37cb-bc3a-d5ef5573f4c6.roa
File:                     d65cfe0c-6b11-37cb-bc3a-d5ef5573f4c6.roa (raw, json)
Hash identifier:          uSAxF9BBuj1Mz6J1Ne57CfFbyoZSgUoYZL/7khmkDEg=
Subject key identifier:   54:C2:C7:41:35:D0:59:FE:39:84:4B:6F:9A:7C:7F:F4:72:11:A0:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75CA7267961AD304E239C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d65cfe0c-6b11-37cb-bc3a-d5ef5573f4c6.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        76.145.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:ca:72:67:96:1a:d3:04:e2:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=3c61d7bd-63ef-4906-bba6-42c17e8878fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:86:f2:77:c6:dd:db:8c:86:9f:62:0c:19:
                    27:d8:19:1a:bd:eb:45:fc:9d:0a:49:72:de:3e:d0:
                    98:56:cc:01:82:0f:7f:f8:4c:f7:a8:a9:c9:ee:b8:
                    e3:4b:e9:dd:9b:9e:1b:9a:60:51:0b:8b:69:59:68:
                    bd:2d:11:8b:95:cc:67:73:3d:68:4f:c6:56:50:75:
                    08:c4:f1:88:64:72:08:05:ad:9a:09:30:99:d9:20:
                    21:1e:cf:69:f7:01:82:13:24:c3:23:ec:52:49:d0:
                    88:26:45:09:d1:f4:d9:e0:78:0b:cb:65:62:23:e8:
                    b1:d7:b1:8b:ce:c7:79:af:0f:79:65:2c:95:6f:96:
                    e3:9a:62:2b:c5:46:8f:ac:87:06:0a:7a:f4:88:cb:
                    3d:2d:fa:43:26:fd:93:52:b0:48:50:e3:8f:09:09:
                    41:9b:b6:68:d8:47:b6:a2:31:90:88:e3:4e:f9:97:
                    26:7c:90:76:16:40:c5:6e:9b:8c:89:b8:36:54:1d:
                    48:51:4e:e5:37:a3:c1:97:e0:a0:45:ca:e4:61:d4:
                    90:39:67:96:96:45:b2:ec:15:17:6f:ce:5f:fc:5a:
                    6b:3a:74:ab:79:30:a6:bf:5a:c1:2e:f3:ee:57:30:
                    26:c0:6c:13:00:be:be:16:02:bc:0e:09:e6:60:20:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:C7:41:35:D0:59:FE:39:84:4B:6F:9A:7C:7F:F4:72:11:A0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d65cfe0c-6b11-37cb-bc3a-d5ef5573f4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:0c:a3:ef:fe:87:09:f6:28:a6:91:34:1e:1f:a5:e1:e1:
         a0:4c:32:ff:13:5f:b4:53:4d:51:7b:29:ab:44:82:1b:4e:65:
         a7:c3:36:b2:6b:b8:22:d2:e9:a7:61:b8:46:5b:84:7d:1e:6c:
         c8:3e:b4:2d:2c:44:6c:0f:03:0e:dd:37:30:03:7b:e5:16:d6:
         9f:7a:dd:9a:e6:ce:5c:8d:46:3d:45:48:0d:88:e2:54:2d:6e:
         cb:76:05:9f:81:be:d5:bd:7c:6b:cf:98:cc:cc:a9:0f:f8:1f:
         c5:69:51:3d:5f:ec:01:3e:80:86:a5:a4:00:74:fe:db:bb:60:
         de:10:30:03:dc:5d:01:0d:be:0d:da:ce:25:40:9d:f0:ed:69:
         a5:5e:18:3e:d6:a1:b2:e9:00:bc:e2:a2:5c:55:8d:2f:c6:58:
         48:f4:e5:94:23:7c:ac:fc:5f:fd:96:54:2f:ea:87:bf:b3:b6:
         01:83:2e:30:f6:98:bf:a9:88:30:da:92:26:4b:04:ff:b5:09:
         95:a6:6f:f9:ac:aa:bd:3e:5c:e5:b3:13:4e:f2:c7:fe:dd:18:
         04:27:8a:87:d6:03:a9:8c:2b:bd:9c:b7:59:51:d3:ba:ff:eb:
         6b:ac:ea:df:eb:e4:6b:d6:ed:b1:71:96:55:1a:95:b2:01:71:
         e4:08:5a:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dcpyZ5Ya0wTiOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
M2M2MWQ3YmQtNjNlZi00OTA2LWJiYTYtNDJjMTdlODg3OGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE6G8nfG3duMhp9iDBkn2BkavetF/J0KSXLe
PtCYVswBgg9/+Ez3qKnJ7rjjS+ndm54bmmBRC4tpWWi9LRGLlcxncz1oT8ZWUHUI
xPGIZHIIBa2aCTCZ2SAhHs9p9wGCEyTDI+xSSdCIJkUJ0fTZ4HgLy2ViI+ix17GL
zsd5rw95ZSyVb5bjmmIrxUaPrIcGCnr0iMs9LfpDJv2TUrBIUOOPCQlBm7Zo2Ee2
ojGQiONO+ZcmfJB2FkDFbpuMibg2VB1IUU7lN6PBl+CgRcrkYdSQOWeWlkWy7BUX
b85f/FprOnSreTCmv1rBLvPuVzAmwGwTAL6+FgK8DgnmYCD38QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTCx0E10Fn+OYRLb5p8f/RyEaAMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY1Y2ZlMGMtNmIxMS0z
N2NiLWJjM2EtZDVlZjU1NzNmNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJGaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKt8DKPv/ocJ9iimkTQeH6Xh4aBMMv8TX7RTTVF7KatEghtOZafDNrJr
uCLS6adhuEZbhH0ebMg+tC0sRGwPAw7dNzADe+UW1p963ZrmzlyNRj1FSA2I4lQt
bst2BZ+BvtW9fGvPmMzMqQ/4H8VpUT1f7AE+gIalpAB0/tu7YN4QMAPcXQENvg3a
ziVAnfDtaaVeGD7WobLpALziolxVjS/GWEj05ZQjfKz8X/2WVC/qh7+ztgGDLjD2
mL+piDDakiZLBP+1CZWmb/msqr0+XOWzE07yx/7dGAQniofWA6mMK72ct1lR07r/
62us6t/r5GvW7bFxllUalbIBceQIWrE=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:50:21 2025 by rpki-client