Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/077640b4-e378-3c38-b118-fe1cbadacd43.roa
File:                     077640b4-e378-3c38-b118-fe1cbadacd43.roa (raw, json)
Hash identifier:          ZEj/+0j+wIgHeNIY5T3ZMKDnE9/Sedb3UOR5UvBT+jc=
Subject key identifier:   C1:95:F7:BC:31:2C:43:EE:F7:25:C1:E2:E8:18:CD:A9:35:46:84:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3CB01FF2203916E5B6A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/077640b4-e378-3c38-b118-fe1cbadacd43.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        68.81.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:cb:01:ff:22:03:91:6e:5b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=37e7339d-85e8-4ec7-b690-1375d40f7102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:67:97:91:72:ca:3f:41:96:3c:dc:92:75:
                    5d:37:2d:2c:a2:24:35:50:3b:61:85:5e:ba:3b:32:
                    87:f2:f3:7a:2f:f0:f1:b8:b7:c5:b1:7b:29:63:11:
                    d1:9e:ce:1d:81:99:b8:69:2f:3e:32:31:05:7d:73:
                    a0:05:f6:bb:25:e6:1c:8d:dc:a4:49:ae:f5:a2:c5:
                    7b:40:a3:a8:39:46:76:1e:de:a0:66:e9:7a:dd:36:
                    ac:4c:9c:19:ff:08:40:f6:9c:06:2e:6b:f9:f8:0a:
                    c7:aa:39:50:28:1f:88:eb:c1:22:45:b8:6a:68:cc:
                    90:eb:70:6b:cd:16:a3:96:43:6c:af:b7:c2:83:1e:
                    22:cb:82:4a:4e:de:bf:4a:e5:21:c0:de:55:ee:87:
                    c3:40:27:d7:1b:46:bc:06:be:36:0c:a1:31:52:20:
                    d0:b5:98:be:6a:3b:12:7f:c6:01:c2:f9:59:cd:39:
                    32:ee:57:9a:ab:93:a7:a5:ab:7d:bc:f6:57:1f:9e:
                    06:0e:40:85:ec:d5:67:72:da:a9:43:45:61:da:f3:
                    ea:25:bd:7c:44:71:87:6e:18:8c:ed:a5:c2:24:5d:
                    ce:f5:4c:47:1b:63:66:3a:c1:29:ef:8c:7f:e3:7b:
                    75:5d:60:d8:7b:1e:a1:33:fb:aa:b7:2a:59:91:9c:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:F7:BC:31:2C:43:EE:F7:25:C1:E2:E8:18:CD:A9:35:46:84:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/077640b4-e378-3c38-b118-fe1cbadacd43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:ee:75:69:6e:55:a3:82:9d:eb:55:ca:4a:6e:b9:d2:b0:
         f9:58:15:cd:a7:0c:e4:9e:2d:fe:ce:89:ed:b6:43:7c:1a:79:
         e0:1e:bc:49:80:49:45:da:1b:a0:a4:79:cf:0d:22:cf:ab:41:
         1a:da:11:36:18:b7:5c:6b:0d:77:f1:14:c6:34:c8:62:56:21:
         57:a4:4a:60:30:2d:01:a9:c1:b5:f2:09:33:a0:d2:fb:d8:3b:
         a2:28:ce:c3:c2:6e:56:a2:e6:d4:49:89:b0:74:9a:96:a7:e6:
         7d:ec:e6:cc:12:04:37:46:5d:48:46:95:0d:49:76:7e:ee:18:
         4d:85:ac:b2:02:2f:61:f9:63:19:10:8e:d0:9b:af:19:e3:b5:
         00:87:ba:15:41:39:70:6c:3c:d1:72:a6:17:c7:a5:27:7b:b7:
         a8:00:40:32:cb:ea:ab:59:d9:ea:f1:f9:6d:43:9b:9d:7f:8d:
         ce:7c:74:cd:bf:42:c3:de:8f:5e:a1:11:98:30:85:cc:4a:b6:
         0d:1b:8e:58:47:ea:53:dd:cc:c9:35:95:0c:bd:e6:97:f9:ab:
         78:c8:ab:5c:d0:f9:89:34:a4:b6:d9:f5:72:4e:5c:24:79:88:
         38:f7:85:7e:03:69:9b:0b:69:89:f7:7c:af:81:ed:91:87:3b:
         38:73:44:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw8sB/yIDkW5bagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MzdlNzMzOWQtODVlOC00ZWM3LWI2OTAtMTM3NWQ0MGY3MTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU9nl5Fyyj9BljzcknVdNy0soiQ1UDthhV66
OzKH8vN6L/DxuLfFsXspYxHRns4dgZm4aS8+MjEFfXOgBfa7JeYcjdykSa71osV7
QKOoOUZ2Ht6gZul63TasTJwZ/whA9pwGLmv5+ArHqjlQKB+I68EiRbhqaMyQ63Br
zRajlkNsr7fCgx4iy4JKTt6/SuUhwN5V7ofDQCfXG0a8Br42DKExUiDQtZi+ajsS
f8YBwvlZzTky7leaq5Onpat9vPZXH54GDkCF7NVnctqpQ0Vh2vPqJb18RHGHbhiM
7aXCJF3O9UxHG2NmOsEp74x/43t1XWDYex6hM/uqtypZkZw2SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGV97wxLEPu9yXB4ugYzak1RoSuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDc3NjQwYjQtZTM3OC0z
YzM4LWIxMTgtZmUxY2JhZGFjZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4E7nVpblWjgp3rVcpKbrnSsPlYFc2nDOSeLf7Oie22Q3waeeAevEmA
SUXaG6Ckec8NIs+rQRraETYYt1xrDXfxFMY0yGJWIVekSmAwLQGpwbXyCTOg0vvY
O6IozsPCblai5tRJibB0mpan5n3s5swSBDdGXUhGlQ1Jdn7uGE2FrLICL2H5YxkQ
jtCbrxnjtQCHuhVBOXBsPNFyphfHpSd7t6gAQDLL6qtZ2erx+W1Dm51/jc58dM2/
QsPej16hEZgwhcxKtg0bjlhH6lPdzMk1lQy95pf5q3jIq1zQ+Yk0pLbZ9XJOXCR5
iDj3hX4DaZsLaYn3fK+B7ZGHOzhzRAo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:42 2025 by rpki-client