Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3356caf-53e4-3a5b-8252-42ec85826289.roa
File:                     f3356caf-53e4-3a5b-8252-42ec85826289.roa (raw, json)
Hash identifier:          bcGjipXH75ASSNDLHCgasGxmBDyh6R6m9W777Q72hXk=
Subject key identifier:   CC:78:26:74:9A:26:E8:7E:DC:E8:74:DC:0A:7F:28:84:FE:CE:08:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C080ABE551A86239E80E008
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3356caf-53e4-3a5b-8252-42ec85826289.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.168.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:0a:be:55:1a:86:23:9e:80:e0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=958680db-8149-4f0c-9b2a-9fe1e4e3138b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:cb:e5:3a:9b:35:4a:80:59:d3:ca:8c:64:
                    1c:99:7f:88:46:cf:ff:c2:5c:2c:e5:6e:92:0c:92:
                    33:85:b2:58:a2:34:58:6f:56:f4:07:ef:35:e9:c6:
                    b7:11:d4:4a:5d:d5:6b:e2:1b:ca:d4:48:ad:e9:f8:
                    b0:59:bf:3c:75:32:5e:07:c3:f4:af:96:48:0e:e5:
                    d7:74:e0:de:8a:c9:4c:fe:40:98:39:a7:77:5b:c3:
                    ed:e6:d7:90:c4:b9:d7:c9:a0:68:a7:15:c4:c7:ea:
                    2f:e9:1d:d3:0f:9f:34:56:79:10:ce:2a:d4:76:bd:
                    db:90:fd:0a:54:09:7e:8c:f7:13:18:ef:27:2b:13:
                    fd:24:e0:cf:1d:6b:2a:68:6b:0d:95:98:6e:74:c5:
                    b7:27:71:a5:4f:d9:f4:f0:1f:8f:d4:9c:b9:25:0b:
                    48:a2:e9:23:5d:a1:08:a8:52:63:f6:7e:b1:45:15:
                    e5:10:87:31:be:84:20:40:6b:48:c6:50:a8:0b:f8:
                    ca:1c:56:fc:23:0a:bf:8c:8d:c9:0f:4b:56:be:de:
                    57:a4:fa:9b:e8:5c:11:7d:85:58:ec:5c:08:e3:bf:
                    2f:f5:90:5c:90:29:cc:01:69:e4:cb:a4:da:6d:b0:
                    0e:05:8b:73:19:d4:ad:29:c0:3e:c8:a0:03:41:e7:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:26:74:9A:26:E8:7E:DC:E8:74:DC:0A:7F:28:84:FE:CE:08:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3356caf-53e4-3a5b-8252-42ec85826289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:54:91:fa:c9:98:b3:de:24:97:92:f5:31:92:94:04:51:
         69:c1:4f:0e:4d:48:25:14:2d:32:0c:0b:8f:e3:7f:84:7c:4e:
         cb:a9:7d:d6:41:7e:0f:89:5b:7f:d3:d2:1f:5d:96:27:85:b6:
         91:4e:c0:0d:9a:ba:13:be:97:6e:d9:62:73:9a:fd:6d:44:41:
         76:b0:40:36:9a:b4:5a:c5:93:d1:ec:4c:57:70:9f:e7:08:2a:
         54:7e:a9:29:1f:48:f8:12:03:ba:6d:5c:b7:da:bc:05:ff:05:
         4d:6b:8f:6c:2d:97:6b:f1:7c:5f:6d:ce:c5:7e:a0:ca:1e:b2:
         a4:18:4b:bb:be:8d:de:c1:4b:30:6d:53:bb:48:5a:75:72:3e:
         ef:31:78:d4:b9:1c:0a:38:f8:b5:45:9b:fa:38:83:c0:9e:71:
         43:6c:05:6a:27:6c:b1:34:62:b7:3f:12:9c:83:86:32:b5:36:
         72:fb:bb:01:7e:c7:c9:db:bc:2c:69:d0:a7:7a:09:47:db:f7:
         32:1a:b3:e7:f7:6a:d3:0c:ec:36:f1:97:94:40:fc:5e:e0:ed:
         85:3b:da:e9:b5:a7:76:20:45:0e:92:49:ac:3b:57:d5:64:96:
         12:c6:d5:ce:a0:5f:0a:02:c0:95:df:72:8f:6a:fa:34:4c:2b:
         6b:f5:cc:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCAq+VRqGI56A4AgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
OTU4NjgwZGItODE0OS00ZjBjLTliMmEtOWZlMWU0ZTMxMzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlovL5TqbNUqAWdPKjGQcmX+IRs//wlws5W6S
DJIzhbJYojRYb1b0B+816ca3EdRKXdVr4hvK1Eit6fiwWb88dTJeB8P0r5ZIDuXX
dODeislM/kCYOad3W8Pt5teQxLnXyaBopxXEx+ov6R3TD580VnkQzirUdr3bkP0K
VAl+jPcTGO8nKxP9JODPHWsqaGsNlZhudMW3J3GlT9n08B+P1Jy5JQtIoukjXaEI
qFJj9n6xRRXlEIcxvoQgQGtIxlCoC/jKHFb8Iwq/jI3JD0tWvt5XpPqb6FwRfYVY
7FwI478v9ZBckCnMAWnky6TabbAOBYtzGdStKcA+yKADQef0KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMx4JnSaJuh+3Oh03Ap/KIT+zgimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjMzNTZjYWYtNTNlNC0z
YTViLTgyNTItNDJlYzg1ODI2Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASai/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU6VJH6yZiz3iSXkvUxkpQEUWnBTw5NSCUULTIMC4/jf4R8TsupfdZB
fg+JW3/T0h9dlieFtpFOwA2auhO+l27ZYnOa/W1EQXawQDaatFrFk9HsTFdwn+cI
KlR+qSkfSPgSA7ptXLfavAX/BU1rj2wtl2vxfF9tzsV+oMoesqQYS7u+jd7BSzBt
U7tIWnVyPu8xeNS5HAo4+LVFm/o4g8CecUNsBWonbLE0Yrc/EpyDhjK1NnL7uwF+
x8nbvCxp0Kd6CUfb9zIas+f3atMM7Dbxl5RA/F7g7YU72um1p3YgRQ6SSaw7V9Vk
lhLG1c6gXwoCwJXfco9q+jRMK2v1zDA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:57:12 2025 by rpki-client