Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f82b5b22-83d3-3592-b2b6-a1dc60d69036.roa
File:                     f82b5b22-83d3-3592-b2b6-a1dc60d69036.roa (raw, json)
Hash identifier:          0925HZf0I87fRaalO+6oBlL9GE4C4xuQjQi246LLBVk=
Subject key identifier:   AC:52:79:EB:03:65:3B:69:85:2B:E6:FD:37:5F:5A:1A:A2:B2:D1:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D165607BF412D665870E2D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f82b5b22-83d3-3592-b2b6-a1dc60d69036.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        69.246.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:60:7b:f4:12:d6:65:87:0e:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=e7b00c7d-f358-40b8-b59a-cea8f535c954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:8a:c5:21:fa:bd:2e:6f:70:3b:cc:ef:7d:
                    7d:5d:ac:64:46:fc:2e:fd:07:d5:56:07:7c:51:ee:
                    2e:52:1e:df:dd:bd:32:53:c0:ac:50:7f:00:f3:3a:
                    ac:42:e9:f7:ff:ad:7e:d9:08:21:b3:65:98:be:89:
                    88:d3:52:b4:7f:35:b2:62:de:68:e5:82:e0:66:6b:
                    8e:88:c4:52:1e:aa:07:81:34:7a:0b:c2:54:d1:d8:
                    18:74:6e:06:cb:01:e4:d3:b6:ca:ea:81:bf:ed:0e:
                    89:4b:a8:9e:e3:11:55:0b:d9:96:33:17:45:b7:da:
                    6b:97:48:c5:be:80:8b:38:7f:56:e5:b6:1d:93:b7:
                    93:42:12:6a:87:c8:dd:9d:4a:36:07:a8:3f:97:52:
                    20:dd:ba:80:e2:41:ab:c1:1c:93:91:51:35:e3:e6:
                    ea:3c:81:44:9a:1a:11:c8:fa:bf:d9:72:25:05:03:
                    40:97:ca:53:fa:e0:87:e9:3b:7b:bd:9f:77:73:87:
                    92:08:ad:65:52:2f:02:c6:b4:fc:26:ad:67:ab:dd:
                    39:20:b2:03:43:1e:cd:60:95:8c:92:4e:db:fb:54:
                    36:9d:31:aa:ce:d6:c5:e0:f3:13:35:ff:b5:69:c0:
                    63:9c:86:be:69:78:e7:c8:d6:ca:d2:16:b2:6e:e6:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:79:EB:03:65:3B:69:85:2B:E6:FD:37:5F:5A:1A:A2:B2:D1:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f82b5b22-83d3-3592-b2b6-a1dc60d69036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:78:15:0e:6f:ad:fe:a7:f5:b0:10:8f:da:59:cb:71:e5:
         c7:ea:fd:be:29:72:0f:1d:97:10:dd:60:57:38:c3:1c:de:f5:
         a6:0d:14:44:a2:d8:68:12:f3:b5:2e:de:65:dd:18:c8:e9:3c:
         8f:e5:64:9f:79:dd:85:2e:67:41:f8:5e:be:0b:3a:76:51:84:
         93:47:f7:3b:ed:89:02:60:fe:1d:5d:c0:11:84:25:d7:5f:1d:
         3f:ef:89:2f:e6:09:17:7f:ba:b1:a0:a7:fe:c3:f3:38:41:66:
         35:09:d1:e7:0e:e9:84:c3:c9:bd:25:83:bd:cc:a3:71:65:7c:
         3b:8c:ea:ce:10:ce:48:f8:39:b8:a1:16:4f:a4:0b:0f:07:66:
         48:87:e2:d1:e6:de:c2:66:19:6b:89:ef:0e:8e:73:2d:93:01:
         d9:49:b0:fb:6e:a5:46:4f:e7:c8:0a:49:62:03:44:66:df:d9:
         a9:1c:28:3f:75:71:0f:09:f4:78:66:b2:e1:d7:ca:b8:47:63:
         50:66:8c:3b:13:4c:86:ce:6d:c3:3b:34:01:85:af:b8:9e:be:
         e0:a4:f9:ef:31:84:aa:b7:f9:bb:1a:4c:33:58:26:c5:e1:7f:
         3c:f2:34:ff:bf:e0:53:0d:2a:93:25:8a:c6:07:03:96:5b:6a:
         07:8c:e3:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZWB79BLWZYcOLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTdiMDBjN2QtZjM1OC00MGI4LWI1OWEtY2VhOGY1MzVjOTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/yKxSH6vS5vcDvM7319XaxkRvwu/QfVVgd8
Ue4uUh7f3b0yU8CsUH8A8zqsQun3/61+2Qghs2WYvomI01K0fzWyYt5o5YLgZmuO
iMRSHqoHgTR6C8JU0dgYdG4GywHk07bK6oG/7Q6JS6ie4xFVC9mWMxdFt9prl0jF
voCLOH9W5bYdk7eTQhJqh8jdnUo2B6g/l1Ig3bqA4kGrwRyTkVE14+bqPIFEmhoR
yPq/2XIlBQNAl8pT+uCH6Tt7vZ93c4eSCK1lUi8CxrT8Jq1nq905ILIDQx7NYJWM
kk7b+1Q2nTGqztbF4PMTNf+1acBjnIa+aXjnyNbK0haybuZCDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxSeesDZTtphSvm/TdfWhqistFWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjgyYjViMjItODNkMy0z
NTkyLWIyYjYtYTFkYzYwZDY5MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARfYrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEA+eBUOb63+p/WwEI/aWctx5cfq/b4pcg8dlxDdYFc4wxze9aYNFESi
2GgS87Uu3mXdGMjpPI/lZJ953YUuZ0H4Xr4LOnZRhJNH9zvtiQJg/h1dwBGEJddf
HT/viS/mCRd/urGgp/7D8zhBZjUJ0ecO6YTDyb0lg73Mo3FlfDuM6s4Qzkj4Obih
Fk+kCw8HZkiH4tHm3sJmGWuJ7w6Ocy2TAdlJsPtupUZP58gKSWIDRGbf2akcKD91
cQ8J9HhmsuHXyrhHY1BmjDsTTIbObcM7NAGFr7ievuCk+e8xhKq3+bsaTDNYJsXh
fzzyNP+/4FMNKpMlisYHA5ZbageM43k=
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:52:38 2025 by rpki-client