Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa
File:                     f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa (raw, json)
Hash identifier:          glRbsAleoPKmqM1GblOkwUC6yYkUbnSYwkUWCIt8LjU=
Subject key identifier:   2C:A8:45:35:25:BD:00:0A:27:73:F4:4D:7A:69:57:10:AB:32:A9:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4308D25525664B7C7C6E1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.34.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:8d:25:52:56:64:b7:c7:c6:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=7a2b202f-d337-4a75-8ffc-de6ee922be97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:3a:3e:78:5b:53:f0:18:49:b3:1f:8d:a9:
                    f0:3f:c2:10:85:e8:5e:00:eb:61:f7:f9:69:01:bc:
                    41:c1:4e:e2:1a:f6:8e:75:da:9b:74:74:a9:d7:94:
                    7d:f5:f4:8c:46:c8:42:44:26:0f:b7:5f:1a:53:be:
                    c8:92:0c:9b:18:8d:b1:42:8f:8a:00:65:56:5a:33:
                    a3:fd:14:d2:37:6d:5c:eb:ad:38:bd:e1:02:f1:e9:
                    f7:46:bb:b4:90:eb:33:2b:88:2c:6f:8e:f2:bb:a5:
                    9e:11:fb:8f:72:8c:8c:e1:e2:4b:5d:8a:7b:a8:10:
                    e7:83:32:77:83:6e:4b:d7:9f:3c:38:b5:49:1c:b2:
                    0c:51:0f:9e:1d:34:35:d2:31:bf:0f:33:04:47:df:
                    da:e3:2c:92:d4:33:42:83:0e:4c:40:00:17:04:e0:
                    18:2b:82:9e:e8:64:98:a7:81:4d:aa:ef:fd:ad:7d:
                    2b:d2:a5:54:cf:c3:11:c0:e8:f3:a5:10:6e:d0:f3:
                    38:e8:a5:3d:0e:e3:09:d0:53:a8:b6:83:af:3e:02:
                    a1:76:27:69:0e:77:82:26:b6:3b:7e:c1:bb:2a:b2:
                    60:c1:4d:aa:c5:05:da:9b:30:d2:4a:00:61:2f:7e:
                    17:3b:f6:bc:01:50:67:52:e2:e6:aa:78:de:a0:68:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:45:35:25:BD:00:0A:27:73:F4:4D:7A:69:57:10:AB:32:A9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:35:17:da:7f:3e:a8:03:68:c7:f4:14:99:aa:d4:51:0f:73:
         95:03:34:19:2c:73:96:10:6e:04:80:6f:ec:1e:5b:c2:46:64:
         f3:6f:a7:da:4c:7c:92:bc:ed:12:5c:db:5e:9b:ef:bd:e9:06:
         04:74:18:ae:fd:2a:6f:a1:3c:14:86:6d:e1:98:7c:a0:17:98:
         c2:47:bf:5c:e7:09:91:33:93:e3:9e:c0:13:bb:8f:fa:6e:3c:
         c5:d2:9b:ba:a5:1b:31:bb:a4:e2:c1:45:89:c7:11:f7:ed:9f:
         bc:b8:9a:a3:9a:a6:4a:73:7d:c6:2e:8f:eb:36:02:62:92:ed:
         72:e0:f5:f5:d9:e0:df:85:89:3b:1f:a4:fd:35:3b:22:4c:cd:
         06:86:79:ca:4d:eb:f3:22:8f:0a:c1:36:0e:3e:4f:73:10:b1:
         14:54:dc:6c:de:38:a5:05:32:61:29:03:74:ad:df:77:9b:7b:
         39:a9:22:37:e7:58:55:77:72:c1:2c:ba:55:61:3e:de:e5:c5:
         74:84:31:07:3f:f5:ad:d2:77:78:0e:5f:f3:cf:f7:0b:53:e8:
         46:c1:a2:79:61:34:35:f1:4c:14:8e:56:1d:bd:f4:b7:eb:84:
         5c:02:32:1f:e3:4d:df:4f:80:70:ed:94:47:ae:60:de:2a:02:
         f4:55:88:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMI0lUlZkt8fG4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
N2EyYjIwMmYtZDMzNy00YTc1LThmZmMtZGU2ZWU5MjJiZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJs6PnhbU/AYSbMfjanwP8IQheheAOth9/lp
AbxBwU7iGvaOddqbdHSp15R99fSMRshCRCYPt18aU77IkgybGI2xQo+KAGVWWjOj
/RTSN21c6604veEC8en3Rru0kOszK4gsb47yu6WeEfuPcoyM4eJLXYp7qBDngzJ3
g25L1588OLVJHLIMUQ+eHTQ10jG/DzMER9/a4yyS1DNCgw5MQAAXBOAYK4Ke6GSY
p4FNqu/9rX0r0qVUz8MRwOjzpRBu0PM46KU9DuMJ0FOotoOvPgKhdidpDneCJrY7
fsG7KrJgwU2qxQXamzDSSgBhL34XO/a8AVBnUuLmqnjeoGj7gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyoRTUlvQAKJ3P0TXppVxCrMqlSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc5ZDczZDQtYTg3ZS0z
NGY4LThhNWUtZjU5YmJlZmIyNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJk1F9p/PqgDaMf0FJmq1FEPc5UDNBksc5YQbgSAb+weW8JGZPNvp9pM
fJK87RJc216b773pBgR0GK79Km+hPBSGbeGYfKAXmMJHv1znCZEzk+OewBO7j/pu
PMXSm7qlGzG7pOLBRYnHEfftn7y4mqOapkpzfcYuj+s2AmKS7XLg9fXZ4N+FiTsf
pP01OyJMzQaGecpN6/MijwrBNg4+T3MQsRRU3GzeOKUFMmEpA3St33ebezmpIjfn
WFV3csEsulVhPt7lxXSEMQc/9a3Sd3gOX/PP9wtT6EbBonlhNDXxTBSOVh299Lfr
hFwCMh/jTd9PgHDtlEeuYN4qAvRViGs=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:49:05 2025 by rpki-client