Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ca8da24-83ae-337e-8e7f-f3e6cf06cd9c.roa
File:                     0ca8da24-83ae-337e-8e7f-f3e6cf06cd9c.roa (raw, json)
Hash identifier:          2dnAVxGrdC3nMemYPec0MEnIv6EQzZF7N4SSQQpVIQw=
Subject key identifier:   34:70:2D:D3:48:62:9B:12:32:0B:45:11:9D:84:0B:4A:6B:8D:09:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75645C3D132679E5085240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ca8da24-83ae-337e-8e7f-f3e6cf06cd9c.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        76.145.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:64:5c:3d:13:26:79:e5:08:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=c7d1605b-d13d-42f0-9b9e-ed1c603dcd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:e0:25:f9:ea:39:3e:eb:3a:e9:6d:a6:31:
                    9f:cc:93:29:bb:5d:d4:74:59:db:fa:67:b7:fc:12:
                    ed:6a:c4:79:d3:4f:f2:d8:87:2b:b6:fd:ae:a5:38:
                    20:d1:58:dd:83:d9:7d:12:ef:c5:9d:65:8b:40:81:
                    7e:9b:77:b1:a0:ca:bc:c4:e5:c7:3b:86:71:0b:99:
                    fa:53:a8:6e:5f:ba:9c:d7:dc:bc:04:aa:cc:9a:c4:
                    c5:3b:9f:a0:63:bf:38:5a:13:e5:25:b6:57:0a:b7:
                    86:5c:8c:15:ab:99:21:dd:33:93:42:8e:f7:aa:e7:
                    eb:dd:df:4e:d1:29:ea:40:17:9e:5f:3f:5b:e1:b5:
                    05:f5:36:07:58:83:89:a3:e7:f5:84:e8:ec:9b:54:
                    50:f4:58:ea:6b:25:9a:4a:20:37:e2:80:1d:d7:d8:
                    77:89:ac:a9:4b:10:7e:eb:0d:dd:95:b5:60:2d:95:
                    c4:95:bb:b9:3b:4e:a1:d2:95:d2:39:eb:19:f7:5d:
                    74:9d:b4:1b:d9:48:50:bf:98:97:d5:44:c1:b4:67:
                    c5:98:e1:91:83:67:8c:3a:3a:55:dc:76:bf:86:68:
                    12:e7:a5:f8:3e:d7:ef:5c:47:83:4b:89:06:a7:38:
                    48:a9:40:a2:81:82:c4:83:fb:87:98:5e:cb:46:fd:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:2D:D3:48:62:9B:12:32:0B:45:11:9D:84:0B:4A:6B:8D:09:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ca8da24-83ae-337e-8e7f-f3e6cf06cd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:3c:54:02:9d:0e:80:ec:0c:cc:87:27:44:77:1d:d9:46:
         f8:a1:a0:1b:c3:1e:5f:e5:32:af:08:59:9e:67:5c:e3:ae:a9:
         e5:11:fa:37:aa:3d:7e:da:c1:be:9b:6e:c7:f1:cb:1b:3c:b3:
         95:ee:ce:d9:68:b8:54:42:2c:01:cb:a6:a1:59:04:69:f3:0f:
         f6:ca:a8:a4:92:17:87:0d:f8:23:66:bc:6e:3f:0a:e8:c9:74:
         d8:12:5f:ce:b1:80:27:40:b2:d3:50:c6:e9:44:37:35:9f:db:
         d8:b6:4d:42:31:3f:48:4b:20:3f:1f:d9:df:80:09:c8:23:b4:
         ab:eb:d3:24:0e:66:35:e9:6d:3e:c3:b1:69:85:23:db:06:a5:
         25:30:6c:3f:49:bd:5b:b1:5f:ed:44:43:7c:2e:93:fc:09:18:
         00:36:ee:fa:01:e8:24:40:41:be:91:48:8c:e7:47:08:97:92:
         b1:14:59:3d:91:0f:7a:e0:45:88:89:3d:1d:52:64:93:85:3a:
         77:32:2d:99:ae:3f:1a:c5:66:eb:0a:2a:58:7b:8f:73:12:0b:
         ab:70:e1:f5:4d:24:f6:85:02:50:71:5a:00:3c:22:35:74:3d:
         0c:4b:97:56:99:50:cf:7f:f4:45:1e:de:d7:31:27:e4:c2:a3:
         54:99:80:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dWRcPRMmeeUIUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
YzdkMTYwNWItZDEzZC00MmYwLTliOWUtZWQxYzYwM2RjZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEPgJfnqOT7rOultpjGfzJMpu13UdFnb+me3
/BLtasR500/y2Icrtv2upTgg0Vjdg9l9Eu/FnWWLQIF+m3exoMq8xOXHO4ZxC5n6
U6huX7qc19y8BKrMmsTFO5+gY784WhPlJbZXCreGXIwVq5kh3TOTQo73qufr3d9O
0SnqQBeeXz9b4bUF9TYHWIOJo+f1hOjsm1RQ9FjqayWaSiA34oAd19h3iaypSxB+
6w3dlbVgLZXElbu5O06h0pXSOesZ9110nbQb2UhQv5iX1UTBtGfFmOGRg2eMOjpV
3Ha/hmgS56X4PtfvXEeDS4kGpzhIqUCigYLEg/uHmF7LRv2H+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRwLdNIYpsSMgtFEZ2EC0prjQmoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNhOGRhMjQtODNhZS0z
MzdlLThlN2YtZjNlNmNmMDZjZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJGuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVaPFQCnQ6A7AzMhydEdx3ZRvihoBvDHl/lMq8IWZ5nXOOuqeUR+jeq
PX7awb6bbsfxyxs8s5XuztlouFRCLAHLpqFZBGnzD/bKqKSSF4cN+CNmvG4/CujJ
dNgSX86xgCdAstNQxulENzWf29i2TUIxP0hLID8f2d+ACcgjtKvr0yQOZjXpbT7D
sWmFI9sGpSUwbD9JvVuxX+1EQ3wuk/wJGAA27voB6CRAQb6RSIznRwiXkrEUWT2R
D3rgRYiJPR1SZJOFOncyLZmuPxrFZusKKlh7j3MSC6tw4fVNJPaFAlBxWgA8IjV0
PQxLl1aZUM9/9EUe3tcxJ+TCo1SZgJY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:25:45 2025 by rpki-client