Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f105077b-bb60-3445-b5bb-731f9047ec7a.roa
File:                     f105077b-bb60-3445-b5bb-731f9047ec7a.roa (raw, json)
Hash identifier:          Ieie213OzmlHwH6SB40AnS9HtqPZ2zBnD42cy8huW4c=
Subject key identifier:   58:0C:C3:EB:EE:5D:C9:D4:EC:7E:21:C3:0A:E5:F5:66:B9:B5:60:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8CB588EFD4F306F29AAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f105077b-bb60-3445-b5bb-731f9047ec7a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.55.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:cb:58:8e:fd:4f:30:6f:29:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9f798f86-d593-4b0b-a4d8-97ae91ce90ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:3a:be:e6:4d:0e:48:87:3a:40:b1:ae:2c:
                    21:dd:3e:50:38:0a:b6:d8:32:ca:ae:f2:ad:e5:53:
                    64:5c:e9:16:3e:2d:2d:a2:74:37:1d:53:13:d4:74:
                    23:cc:17:d9:24:1e:31:3e:d1:7a:06:a1:fd:c1:2e:
                    c7:15:84:61:18:f1:f0:99:4d:f4:05:d6:5f:64:5f:
                    c0:e7:39:c6:9b:40:be:cb:31:a8:dd:f9:05:28:cd:
                    2f:44:9f:9b:59:db:6c:92:14:df:02:58:a8:6b:7f:
                    8a:3c:b0:b3:6e:85:f7:e1:19:54:35:d7:41:5f:77:
                    a0:10:a7:be:2f:6e:99:a8:96:32:28:12:98:c6:0f:
                    77:cd:b8:6e:39:ce:6d:67:3c:9c:3a:60:7b:5b:01:
                    9b:d7:eb:5f:64:5a:27:1a:ac:65:fd:f7:da:89:7e:
                    25:ff:0e:b3:62:95:77:e4:ba:54:4b:7e:4a:a4:59:
                    3d:0a:8c:ec:b1:fd:6a:28:11:58:ff:c4:8b:2a:bd:
                    34:ed:5b:20:3d:df:a5:c8:90:82:b7:81:78:60:bb:
                    44:f3:25:b4:17:8c:a2:bc:94:c6:d2:b6:3b:4e:1c:
                    85:c8:bf:f2:ef:24:2a:1e:1c:63:0a:26:c6:98:7f:
                    1a:3d:06:99:df:7d:f2:32:69:c8:eb:84:de:0c:38:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0C:C3:EB:EE:5D:C9:D4:EC:7E:21:C3:0A:E5:F5:66:B9:B5:60:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f105077b-bb60-3445-b5bb-731f9047ec7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.55.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:10:35:76:07:0e:0a:d6:6e:4a:79:1d:70:c8:4a:b3:10:c7:
         65:47:6f:14:54:42:6a:aa:e2:be:09:3e:13:bc:73:03:c5:2c:
         ab:ae:b6:1b:d7:bb:79:ce:6b:af:c0:93:56:ba:bc:3c:91:e6:
         17:29:44:3e:64:4b:95:72:ce:92:9c:64:ec:a3:04:25:84:33:
         c6:50:f5:a0:02:62:a2:0b:56:f5:ba:d9:b8:82:6c:69:5d:ce:
         9a:0c:74:0c:22:96:c9:ea:bb:6f:b0:59:58:ff:4a:bc:8e:4a:
         bc:e8:e7:19:76:24:30:c8:1c:e4:16:31:8c:e4:e0:23:eb:3d:
         f0:92:02:a8:94:5e:a3:13:11:c6:67:a6:2b:0c:6c:8f:59:45:
         53:3a:ee:d7:4d:57:2e:f4:df:71:01:1a:53:4e:b9:e8:92:8e:
         78:ce:27:74:e2:55:0d:17:82:ab:dc:a6:29:9c:fb:4d:d6:72:
         78:de:3f:cb:7b:85:e3:49:60:2e:4f:e3:e1:d5:e1:f2:39:57:
         a1:d1:63:36:4d:a3:ac:8f:7c:c8:38:82:b7:d4:b4:4d:5b:30:
         ab:5d:1d:66:61:a1:8a:c2:60:0f:32:c1:82:5e:ef:24:95:6f:
         bf:a4:6d:47:b1:80:4e:e5:cb:f7:1d:56:5c:dd:d3:ae:60:1b:
         d3:00:a8:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMtYjv1PMG8pqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
OWY3OThmODYtZDU5My00YjBiLWE0ZDgtOTdhZTkxY2U5MGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+M6vuZNDkiHOkCxriwh3T5QOAq22DLKrvKt
5VNkXOkWPi0tonQ3HVMT1HQjzBfZJB4xPtF6BqH9wS7HFYRhGPHwmU30BdZfZF/A
5znGm0C+yzGo3fkFKM0vRJ+bWdtskhTfAlioa3+KPLCzboX34RlUNddBX3egEKe+
L26ZqJYyKBKYxg93zbhuOc5tZzycOmB7WwGb1+tfZFonGqxl/ffaiX4l/w6zYpV3
5LpUS35KpFk9Cozssf1qKBFY/8SLKr007VsgPd+lyJCCt4F4YLtE8yW0F4yivJTG
0rY7ThyFyL/y7yQqHhxjCibGmH8aPQaZ333yMmnI64TeDDhNswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgMw+vuXcnU7H4hwwrl9Wa5tWD5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjEwNTA3N2ItYmI2MC0z
NDQ1LWI1YmItNzMxZjkwNDdlYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDfYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANcQNXYHDgrWbkp5HXDISrMQx2VHbxRUQmqq4r4JPhO8cwPFLKuuthvX
u3nOa6/Ak1a6vDyR5hcpRD5kS5VyzpKcZOyjBCWEM8ZQ9aACYqILVvW62biCbGld
zpoMdAwilsnqu2+wWVj/SryOSrzo5xl2JDDIHOQWMYzk4CPrPfCSAqiUXqMTEcZn
pisMbI9ZRVM67tdNVy7033EBGlNOueiSjnjOJ3TiVQ0Xgqvcpimc+03WcnjeP8t7
heNJYC5P4+HV4fI5V6HRYzZNo6yPfMg4grfUtE1bMKtdHWZhoYrCYA8ywYJe7ySV
b7+kbUexgE7ly/cdVlzd065gG9MAqDo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:39:38 2025 by rpki-client