Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfed8fb1-ee8d-3469-8c18-deaeb8aec7fe.roa
File:                     dfed8fb1-ee8d-3469-8c18-deaeb8aec7fe.roa (raw, json)
Hash identifier:          wDTHtTEuZcSQcvdiFigRqKVnxDGe56xtDQTFzrGdlrA=
Subject key identifier:   2D:21:6F:DB:F4:65:D8:93:F4:6F:16:AA:2E:82:51:D8:BD:3A:70:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05A06B8C572172160D53C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfed8fb1-ee8d-3469-8c18-deaeb8aec7fe.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        69.142.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:a0:6b:8c:57:21:72:16:0d:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=22f79d8c-b6d3-41a5-9172-5c44ceffe7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:b8:29:95:14:84:9c:94:4b:e4:b6:97:68:
                    fa:c5:c7:7f:4b:a4:b7:9f:fe:bf:32:b6:d6:c5:a9:
                    af:45:6e:fc:67:73:64:68:de:1f:12:96:8b:a2:35:
                    c5:13:d5:0a:4a:08:2b:e5:05:27:d1:9d:67:8f:c5:
                    56:8d:20:10:88:48:8a:8b:54:2c:84:f1:e7:e7:41:
                    75:b3:d1:db:9e:94:90:9f:66:04:0c:99:2b:41:7a:
                    0b:3e:5d:cf:47:8c:b8:c0:6d:60:e0:32:91:64:f1:
                    c8:9e:8d:c4:28:55:fc:9e:f7:c4:4c:9c:d3:98:b6:
                    40:22:c1:bf:a3:8a:e5:c7:5d:30:5b:e7:0d:83:4a:
                    64:99:9b:f2:7b:d7:ce:dd:2c:d5:34:14:3a:cd:42:
                    79:03:74:ca:bd:a7:08:11:46:22:57:ff:63:be:2e:
                    15:99:39:5f:86:73:51:b1:48:77:ff:32:12:fa:91:
                    0d:18:05:1e:39:11:3a:5f:b8:a2:06:81:8f:2d:9f:
                    2f:fe:6b:da:10:60:f7:d7:02:e4:20:68:61:77:1a:
                    81:80:3d:30:26:fc:84:8e:31:7c:c7:15:80:d7:20:
                    5f:81:3d:11:b0:9b:b8:f5:6a:a4:bb:e7:8f:5f:aa:
                    97:97:4d:1a:aa:bb:2d:30:66:ac:1c:82:ee:b4:e9:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:6F:DB:F4:65:D8:93:F4:6F:16:AA:2E:82:51:D8:BD:3A:70:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfed8fb1-ee8d-3469-8c18-deaeb8aec7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:9e:77:df:f2:ea:6e:2d:86:d8:5c:bb:98:9e:d5:12:78:79:
         4a:0f:7b:b0:19:77:0d:ae:6a:76:dc:dd:66:83:d8:29:95:41:
         8e:74:28:11:57:be:cd:82:b8:af:c6:8e:64:1b:2c:db:81:5a:
         91:86:51:12:13:cd:0b:99:7f:78:bf:da:4c:e5:45:fe:8c:de:
         70:22:eb:a9:15:3a:bc:02:c2:4d:15:fa:db:8b:2c:48:8e:d5:
         c5:f5:c5:10:3a:f5:5d:55:6e:98:d2:0e:6c:77:e4:03:0a:b8:
         7a:5d:55:27:21:92:2c:0e:2d:ac:19:d1:31:00:20:56:0f:39:
         2b:16:ee:c0:02:9e:19:3c:bd:71:a7:27:53:d2:7b:03:12:60:
         12:6a:8d:ca:00:2b:2e:18:53:6c:4c:6d:8e:8c:c7:16:3d:7f:
         3e:91:20:a1:61:cb:80:9e:e3:18:cd:ec:55:95:ac:ec:47:0d:
         0b:16:1b:0c:ab:73:d6:95:79:69:df:87:16:6b:10:40:60:04:
         35:25:3e:a7:f2:75:e8:d7:ed:81:b9:31:2b:dd:a8:d8:12:46:
         ba:67:d3:69:83:68:7e:92:e4:d7:6a:7a:16:cb:92:24:2b:f9:
         d5:fb:e7:bf:f2:da:d5:27:2a:fd:38:2e:5a:3a:3f:f1:4c:37:
         92:df:55:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBaBrjFchchYNU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MjJmNzlkOGMtYjZkMy00MWE1LTkxNzItNWM0NGNlZmZlN2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+C4KZUUhJyUS+S2l2j6xcd/S6S3n/6/MrbW
xamvRW78Z3NkaN4fEpaLojXFE9UKSggr5QUn0Z1nj8VWjSAQiEiKi1QshPHn50F1
s9HbnpSQn2YEDJkrQXoLPl3PR4y4wG1g4DKRZPHIno3EKFX8nvfETJzTmLZAIsG/
o4rlx10wW+cNg0pkmZvye9fO3SzVNBQ6zUJ5A3TKvacIEUYiV/9jvi4VmTlfhnNR
sUh3/zIS+pENGAUeORE6X7iiBoGPLZ8v/mvaEGD31wLkIGhhdxqBgD0wJvyEjjF8
xxWA1yBfgT0RsJu49Wqku+ePX6qXl00aqrstMGasHILutOlbLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0hb9v0ZdiT9G8Wqi6CUdi9OnC3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZlZDhmYjEtZWU4ZC0z
NDY5LThjMTgtZGVhZWI4YWVjN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRY5qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANqed9/y6m4ththcu5ie1RJ4eUoPe7AZdw2uanbc3WaD2CmVQY50KBFX
vs2CuK/GjmQbLNuBWpGGURITzQuZf3i/2kzlRf6M3nAi66kVOrwCwk0V+tuLLEiO
1cX1xRA69V1VbpjSDmx35AMKuHpdVSchkiwOLawZ0TEAIFYPOSsW7sACnhk8vXGn
J1PSewMSYBJqjcoAKy4YU2xMbY6MxxY9fz6RIKFhy4Ce4xjN7FWVrOxHDQsWGwyr
c9aVeWnfhxZrEEBgBDUlPqfydejX7YG5MSvdqNgSRrpn02mDaH6S5NdqehbLkiQr
+dX757/y2tUnKv04Llo6P/FMN5LfVfA=
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:03:58 2025 by rpki-client