Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047d7c21-d2f0-3b3f-860b-bcc31bf36a98.roa
File:                     047d7c21-d2f0-3b3f-860b-bcc31bf36a98.roa (raw, json)
Hash identifier:          QK+iKnz/0sCJfjFmgXNrrNDQ/kt4SmKSEAQwizvXGbw=
Subject key identifier:   DB:43:43:7F:8A:E0:6A:96:1F:D7:A6:4A:D7:84:A9:A0:81:F3:22:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141E19AFCC7EE6A37426180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047d7c21-d2f0-3b3f-860b-bcc31bf36a98.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        69.252.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:e1:9a:fc:c7:ee:6a:37:42:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=9e3fc185-a57e-473c-98d3-65c9155b369a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:65:1d:3b:a2:44:7f:b6:b5:b0:bc:8f:2c:
                    ea:45:02:04:c7:b3:b8:6e:27:a8:dc:b7:3b:89:d7:
                    bd:11:ae:66:01:d9:33:65:8d:16:46:a7:59:45:1c:
                    b0:8d:28:4b:ef:e8:14:65:cd:05:28:5b:45:39:20:
                    78:72:8d:bd:45:3e:6a:2d:c4:98:06:a9:da:56:1f:
                    c9:ea:7a:fa:06:84:3d:6e:e0:01:53:01:72:b0:d0:
                    5c:0f:4a:dc:01:7f:58:27:d9:e4:93:e1:ce:b7:28:
                    6f:7d:b7:d7:73:96:9b:bc:d4:91:6f:13:2c:15:99:
                    10:49:9a:1b:98:6f:94:6f:f8:61:66:e2:7b:7d:48:
                    44:f9:2f:41:a1:87:dd:11:fe:70:68:45:ad:21:3b:
                    7a:ff:1b:04:f4:3c:b4:ef:c1:26:85:88:cf:89:ba:
                    e2:e0:39:2b:87:9d:41:be:e6:5c:ee:88:9d:35:13:
                    5b:36:6b:c6:b7:8d:31:1f:a9:63:1e:f3:50:5e:e5:
                    1b:f7:2b:ae:68:37:f8:fa:97:b4:4b:4f:8e:84:aa:
                    50:82:3f:b2:a9:4c:8e:7d:03:e1:47:92:58:59:b7:
                    7e:a4:d2:90:f4:35:c4:98:0a:39:68:81:00:ad:a1:
                    8e:a9:2e:87:80:80:ad:b5:a1:3b:a4:e6:d2:16:79:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:43:7F:8A:E0:6A:96:1F:D7:A6:4A:D7:84:A9:A0:81:F3:22:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047d7c21-d2f0-3b3f-860b-bcc31bf36a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:c9:0b:07:c4:88:0e:e6:d1:4e:54:d9:b0:3e:7c:07:ca:
         53:37:dd:24:fb:b4:cf:ba:96:e9:c2:16:b4:30:54:1d:46:ee:
         9d:ae:1a:47:44:51:83:b5:ba:c3:78:21:df:9d:8b:45:5d:ac:
         e7:e0:57:33:2f:40:e9:bf:3f:0f:0b:31:1b:b4:b5:f7:0e:fd:
         ca:62:e8:bc:b8:7d:40:40:c9:4b:e0:21:3d:fe:79:91:fe:2c:
         7c:bc:3a:f9:5c:e8:46:b2:27:72:80:dd:e5:b4:48:fa:dd:19:
         59:f5:40:65:1a:13:0b:9b:9e:14:b8:a1:21:31:26:52:75:6a:
         59:4d:18:0e:bb:a1:49:92:29:39:73:73:0b:d8:d0:15:e1:60:
         31:26:dc:1f:89:03:20:79:f0:8c:d4:51:81:b2:75:79:7c:c4:
         d4:4e:8e:73:b8:a4:2b:44:80:71:f2:39:dd:e9:f5:3e:1d:98:
         9a:1c:07:a0:4d:bf:1c:c3:09:f5:6e:58:ef:7e:f6:d3:08:10:
         ab:e3:b5:8d:9c:39:43:de:ac:9d:51:91:fd:0c:ad:e2:d4:2b:
         d2:37:11:34:ba:20:22:af:98:20:78:33:3f:86:f6:14:b7:22:
         f9:ff:d6:f7:d2:23:82:90:51:73:27:3a:a9:08:9e:e2:3d:8b:
         ac:ea:08:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQeGa/MfuajdCYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
OWUzZmMxODUtYTU3ZS00NzNjLTk4ZDMtNjVjOTE1NWIzNjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeplHTuiRH+2tbC8jyzqRQIEx7O4bieo3Lc7
ide9Ea5mAdkzZY0WRqdZRRywjShL7+gUZc0FKFtFOSB4co29RT5qLcSYBqnaVh/J
6nr6BoQ9buABUwFysNBcD0rcAX9YJ9nkk+HOtyhvfbfXc5abvNSRbxMsFZkQSZob
mG+Ub/hhZuJ7fUhE+S9BoYfdEf5waEWtITt6/xsE9Dy078EmhYjPibri4Dkrh51B
vuZc7oidNRNbNmvGt40xH6ljHvNQXuUb9yuuaDf4+pe0S0+OhKpQgj+yqUyOfQPh
R5JYWbd+pNKQ9DXEmAo5aIEAraGOqS6HgICttaE7pObSFnmNmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtDQ3+K4GqWH9emSteEqaCB8yI9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ3ZDdjMjEtZDJmMC0z
YjNmLTg2MGItYmNjMzFiZjM2YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfxkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZ/yQsHxIgO5tFOVNmwPnwHylM33ST7tM+6lunCFrQwVB1G7p2uGkdE
UYO1usN4Id+di0VdrOfgVzMvQOm/Pw8LMRu0tfcO/cpi6Ly4fUBAyUvgIT3+eZH+
LHy8Ovlc6EayJ3KA3eW0SPrdGVn1QGUaEwubnhS4oSExJlJ1allNGA67oUmSKTlz
cwvY0BXhYDEm3B+JAyB58IzUUYGydXl8xNROjnO4pCtEgHHyOd3p9T4dmJocB6BN
vxzDCfVuWO9+9tMIEKvjtY2cOUPerJ1Rkf0MreLUK9I3ETS6ICKvmCB4Mz+G9hS3
Ivn/1vfSI4KQUXMnOqkInuI9i6zqCKI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:16 2025 by rpki-client