Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d3d4f02-10bd-3f27-99fd-426cb03a0346.roa
File:                     0d3d4f02-10bd-3f27-99fd-426cb03a0346.roa (raw, json)
Hash identifier:          5My0lmjCeEdhD6/f6nM+7TThG1mvjZuKzUox4ZbZUuc=
Subject key identifier:   84:A1:22:E1:6E:A3:18:87:A5:38:BB:03:B2:40:9B:E4:13:A4:37:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDAC74577AA868F6333518
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d3d4f02-10bd-3f27-99fd-426cb03a0346.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        96.216.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:ac:74:57:7a:a8:68:f6:33:35:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=91f1b50a-9fe7-456f-9551-f79b95291785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:72:5f:5c:9b:17:78:c3:ea:ff:3b:bb:19:
                    92:2f:4d:50:37:c7:38:1b:0b:36:2e:77:b0:96:90:
                    c7:52:e5:8f:6f:5c:3d:7a:a5:d9:2a:9c:f8:3a:dc:
                    56:91:e9:0a:7c:65:1e:61:13:58:8e:41:4b:e8:7b:
                    d3:2e:cc:44:f8:1b:60:a9:d6:a9:a7:e6:f7:6e:7b:
                    88:7d:f0:27:a6:89:d0:ba:4d:e2:85:81:e0:29:35:
                    5d:88:4e:5f:d3:a4:b1:81:f8:3a:34:60:87:cf:d5:
                    de:70:1c:95:34:b1:72:10:3a:d3:08:99:79:79:8e:
                    93:56:ee:ee:50:a1:1c:a3:4b:78:87:e0:66:47:43:
                    3f:d7:0b:67:7c:53:f6:ab:60:37:54:e4:10:92:14:
                    19:6a:dd:95:61:e6:d1:c5:1f:54:dd:f8:f7:01:d8:
                    6d:39:37:d3:ca:4c:67:e4:58:1e:a4:a3:43:b9:5f:
                    fd:12:0a:cf:57:0e:90:37:91:5e:1d:9d:39:82:c7:
                    46:52:f3:2f:53:81:00:fd:a7:fe:67:36:94:66:b1:
                    d3:c4:30:56:8e:c5:0b:9c:f8:98:31:b5:08:30:4b:
                    10:d6:fc:ca:3e:a8:ec:12:38:2e:ba:07:78:9e:f4:
                    e3:37:09:34:94:ae:b6:60:9d:18:8d:7a:b5:14:15:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A1:22:E1:6E:A3:18:87:A5:38:BB:03:B2:40:9B:E4:13:A4:37:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d3d4f02-10bd-3f27-99fd-426cb03a0346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:00:e4:1a:7a:fd:ad:e0:db:6f:6a:7d:cf:db:5f:d2:5d:e4:
         0e:0f:53:a6:12:2f:eb:8c:7c:0c:2d:c7:99:cf:9f:94:14:dd:
         aa:3a:34:7f:4a:a7:64:3e:19:e5:85:3b:e7:78:39:7f:8d:f0:
         5d:68:fd:27:61:f6:c3:e9:af:24:79:85:6e:e8:06:3d:a5:b4:
         84:ea:71:78:3d:c2:44:7f:ab:c6:47:bd:4b:4d:c2:6e:bc:b3:
         4a:2e:6b:91:e8:fe:56:fe:66:2c:e3:13:ca:2c:a0:35:5b:21:
         1a:f9:f0:94:97:95:be:70:1c:ee:c0:69:61:8f:6d:19:01:93:
         8b:37:7f:08:95:2c:45:97:d8:bf:0c:d6:2b:22:f0:cd:f6:73:
         56:c0:8c:d9:21:ce:d2:12:a9:0d:f3:d6:09:a0:67:5a:7a:2a:
         90:e2:ca:e6:82:a5:b4:88:e8:d8:62:36:55:7d:be:7c:ab:56:
         ad:da:70:47:d0:0c:43:1b:c1:89:ba:bf:28:d2:56:88:df:82:
         25:f1:86:c3:d6:ca:07:f8:e8:66:f9:da:82:23:51:5d:4d:4a:
         a0:d2:fb:b4:7d:e4:5d:9f:c3:be:fb:85:21:ef:17:7d:25:e8:
         64:d5:d9:d7:70:37:18:0d:4c:c3:6d:df:5a:29:1f:fa:a7:49:
         9b:c3:77:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/ax0V3qoaPYzNRgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
OTFmMWI1MGEtOWZlNy00NTZmLTk1NTEtZjc5Yjk1MjkxNzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUByX1ybF3jD6v87uxmSL01QN8c4Gws2Lnew
lpDHUuWPb1w9eqXZKpz4OtxWkekKfGUeYRNYjkFL6HvTLsxE+Btgqdapp+b3bnuI
ffAnponQuk3ihYHgKTVdiE5f06Sxgfg6NGCHz9XecByVNLFyEDrTCJl5eY6TVu7u
UKEco0t4h+BmR0M/1wtnfFP2q2A3VOQQkhQZat2VYebRxR9U3fj3AdhtOTfTykxn
5FgepKNDuV/9EgrPVw6QN5FeHZ05gsdGUvMvU4EA/af+ZzaUZrHTxDBWjsULnPiY
MbUIMEsQ1vzKPqjsEjguugd4nvTjNwk0lK62YJ0YjXq1FBXWhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIShIuFuoxiHpTi7A7JAm+QTpDfvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQzZDRmMDItMTBiZC0z
ZjI3LTk5ZmQtNDI2Y2IwM2EwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYNgYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgA5Bp6/a3g229qfc/bX9Jd5A4PU6YSL+uMfAwtx5nPn5QU3ao6NH9K
p2Q+GeWFO+d4OX+N8F1o/Sdh9sPpryR5hW7oBj2ltITqcXg9wkR/q8ZHvUtNwm68
s0oua5Ho/lb+ZizjE8osoDVbIRr58JSXlb5wHO7AaWGPbRkBk4s3fwiVLEWX2L8M
1isi8M32c1bAjNkhztISqQ3z1gmgZ1p6KpDiyuaCpbSI6NhiNlV9vnyrVq3acEfQ
DEMbwYm6vyjSVojfgiXxhsPWygf46Gb52oIjUV1NSqDS+7R95F2fw777hSHvF30l
6GTV2ddwNxgNTMNt31opH/qnSZvDd3M=
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:37:05 2025 by rpki-client