Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd0bf3fb-798b-3333-95ec-67ba6a00598d.roa
File:                     fd0bf3fb-798b-3333-95ec-67ba6a00598d.roa (raw, json)
Hash identifier:          lK+IVbY+5S6O+XS+T+c5SdqEmYVmbiv+cnm0oSB4OVE=
Subject key identifier:   B8:AB:7F:47:E9:5F:AD:62:3E:19:53:41:DB:39:BD:7A:F3:F3:4C:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07783C88711E911332F460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd0bf3fb-798b-3333-95ec-67ba6a00598d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        24.0.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:78:3c:88:71:1e:91:13:32:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6627793f-ff77-44fb-a565-efff686d4684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:6b:85:92:b3:2e:3d:35:83:a0:de:d8:68:
                    8c:7a:73:30:15:c2:d8:b5:e1:6b:5c:a4:13:2a:0e:
                    89:18:3b:bd:8f:78:32:e6:bc:03:e6:d2:78:cc:42:
                    db:c6:a4:3d:2d:c9:83:e3:ce:de:97:c8:87:f2:b4:
                    8f:1c:e3:16:b9:44:21:5e:a9:2f:e0:81:62:4d:3b:
                    9b:b2:27:17:c1:a2:2f:dd:79:33:46:05:63:90:ff:
                    45:9c:f5:8e:3f:88:ae:87:5c:68:b9:85:70:26:ab:
                    c8:7a:ac:c7:d6:32:70:c0:51:60:13:01:99:ed:7d:
                    0b:e3:3f:26:71:20:72:2a:ff:80:94:2e:b7:90:62:
                    cd:7a:cf:f2:2a:bd:ae:d6:f3:54:b7:94:3a:0e:2d:
                    1e:e0:0d:85:03:33:dc:7a:21:83:5e:82:a8:3d:59:
                    82:70:90:75:2b:9e:ae:9a:5e:f7:ac:46:4c:80:be:
                    ef:d0:de:1f:71:a5:fd:a3:67:97:53:a1:20:59:06:
                    3e:c7:75:22:fa:6f:a3:16:58:2d:11:a9:21:99:14:
                    20:4c:61:41:ca:ee:a8:3a:26:32:e5:e5:97:fd:75:
                    a2:39:fb:50:0d:e0:06:ec:8e:30:d6:d9:3f:5d:80:
                    51:c8:f4:0a:74:da:72:64:23:20:f6:f0:b5:e4:9d:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:7F:47:E9:5F:AD:62:3E:19:53:41:DB:39:BD:7A:F3:F3:4C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd0bf3fb-798b-3333-95ec-67ba6a00598d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:60:fa:92:1f:12:c0:5e:d1:3e:61:40:a6:12:c8:7b:dc:16:
         f6:9a:f0:7e:98:f5:d7:e8:00:b5:8a:27:5e:c5:da:43:0f:69:
         72:53:01:d0:ed:41:1b:9f:8c:20:fb:05:bb:28:51:62:00:3e:
         c7:62:d5:0a:df:29:3f:46:26:c9:f3:63:2b:3f:b7:21:a7:bd:
         5d:ad:a1:5e:a8:bb:1a:2b:e8:7c:a3:d9:dd:cb:f1:ef:3b:2b:
         22:f2:95:a3:4b:af:04:24:09:74:d6:67:f1:38:e9:12:e5:17:
         2b:db:12:66:75:c6:ab:66:60:b4:e6:3b:ec:57:05:fe:d8:43:
         a8:f5:fd:7c:54:fb:fd:a5:78:1b:d3:10:8f:1a:7e:90:ff:03:
         89:d7:19:5f:d8:35:39:fd:a5:25:24:5b:aa:b5:2c:d2:68:2a:
         d2:81:35:e2:ae:bb:ff:db:d0:3c:69:07:95:26:b2:a1:c9:8b:
         e1:16:1e:40:9c:5d:aa:f1:a4:c0:75:77:72:83:36:78:1d:e7:
         8f:9f:dc:c4:f9:fb:22:45:c8:94:e1:63:b0:0f:02:e0:15:12:
         ad:4d:ce:ec:f9:62:d5:81:42:1b:4d:cf:49:42:99:2a:d7:24:
         ee:26:2a:48:cf:75:6e:01:e2:c0:7c:dd:e2:b8:26:3d:41:b6:
         46:23:d7:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB3g8iHEekRMy9GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NjYyNzc5M2YtZmY3Ny00NGZiLWE1NjUtZWZmZjY4NmQ0Njg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4prhZKzLj01g6De2GiMenMwFcLYteFrXKQT
Kg6JGDu9j3gy5rwD5tJ4zELbxqQ9LcmD487el8iH8rSPHOMWuUQhXqkv4IFiTTub
sicXwaIv3XkzRgVjkP9FnPWOP4iuh1xouYVwJqvIeqzH1jJwwFFgEwGZ7X0L4z8m
cSByKv+AlC63kGLNes/yKr2u1vNUt5Q6Di0e4A2FAzPceiGDXoKoPVmCcJB1K56u
ml73rEZMgL7v0N4fcaX9o2eXU6EgWQY+x3Ui+m+jFlgtEakhmRQgTGFByu6oOiYy
5eWX/XWiOftQDeAG7I4w1tk/XYBRyPQKdNpyZCMg9vC15J167wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLirf0fpX61iPhlTQds5vXrz80z5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQwYmYzZmItNzk4Yi0z
MzMzLTk1ZWMtNjdiYTZhMDA1OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGABkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhg+pIfEsBe0T5hQKYSyHvcFvaa8H6Y9dfoALWKJ17F2kMPaXJTAdDt
QRufjCD7BbsoUWIAPsdi1QrfKT9GJsnzYys/tyGnvV2toV6ouxor6Hyj2d3L8e87
KyLylaNLrwQkCXTWZ/E46RLlFyvbEmZ1xqtmYLTmO+xXBf7YQ6j1/XxU+/2leBvT
EI8afpD/A4nXGV/YNTn9pSUkW6q1LNJoKtKBNeKuu//b0DxpB5UmsqHJi+EWHkCc
XarxpMB1d3KDNngd54+f3MT5+yJFyJThY7APAuAVEq1Nzuz5YtWBQhtNz0lCmSrX
JO4mKkjPdW4B4sB83eK4Jj1BtkYj17w=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:08:50 2025 by rpki-client