Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa
File:                     1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa (raw, json)
Hash identifier:          22FgQs23NksXz6xyU2ilOc+8pIyCjwQ0p8oEhzJ5Mek=
Subject key identifier:   59:A9:4C:28:05:68:5A:01:E2:3D:95:A2:0D:D3:70:81:74:15:00:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC36D08138895E8E4EDADC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        76.129.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:6d:08:13:88:95:e8:e4:ed:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0b1908ff-712c-4960-beef-9ee4b5e6153a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:cb:58:16:b2:c9:2d:0d:d0:d9:0d:ef:d1:
                    85:ac:58:60:99:0b:4a:60:e7:d4:d5:57:c8:35:83:
                    41:78:ba:cc:8f:5e:40:21:72:f7:b6:1c:7a:54:06:
                    73:fd:92:7f:2a:92:7f:79:31:d3:94:9b:b7:30:b4:
                    a3:39:e5:8c:54:d7:3a:b3:46:87:b2:27:fc:13:b6:
                    22:9a:08:1c:f2:04:52:78:ba:f9:4f:41:37:75:4a:
                    9a:85:c6:b7:7d:da:cd:42:ff:b6:dc:da:1c:89:27:
                    e8:6c:dd:53:30:9e:03:35:67:7a:12:52:65:3e:a7:
                    a4:18:99:5f:25:47:74:8a:41:91:08:2f:16:31:25:
                    99:eb:8d:d3:23:69:7e:2b:fb:aa:78:f4:91:12:46:
                    65:ce:07:7c:08:fb:31:28:27:23:0c:dc:93:de:d4:
                    9f:ed:0f:02:88:53:ac:e9:8a:58:67:c2:12:cf:6f:
                    cd:9a:52:a5:51:6f:40:5a:d0:82:34:d8:0c:41:d8:
                    53:2a:69:51:7f:32:93:cd:66:9d:64:b5:bf:4a:02:
                    b7:a6:fc:80:6e:6e:c3:e0:89:77:79:e7:34:56:84:
                    23:77:36:f3:a3:45:dd:d0:fb:fe:b6:63:1e:11:a4:
                    2e:87:67:4c:37:ef:ca:56:55:e9:57:35:d6:3b:fa:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:4C:28:05:68:5A:01:E2:3D:95:A2:0D:D3:70:81:74:15:00:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:63:d2:95:2d:2f:bf:46:9f:6e:16:cf:88:b1:1a:2c:0c:2c:
         0c:9d:39:40:fd:9f:68:06:1b:f9:ca:61:e7:ea:db:a1:c6:72:
         a9:35:38:ce:2c:75:d7:61:35:44:f5:fc:c0:38:db:93:b9:af:
         db:e0:4b:99:e7:a3:b7:44:91:8c:49:a9:47:db:03:c8:b1:71:
         44:c6:8c:28:75:c8:f7:20:d6:3f:5e:48:5b:ce:c6:ba:9f:eb:
         2a:5f:1b:ec:9c:24:c4:54:3a:30:9e:4a:7a:88:4d:33:c6:c1:
         d8:62:54:16:84:60:17:c7:bf:f4:20:b7:28:a0:7b:95:b1:3a:
         47:1e:eb:f9:b7:00:d5:34:21:d4:9d:36:df:6c:03:26:8f:c6:
         2d:0e:22:d1:2f:2f:f4:58:b9:12:6a:5b:48:71:88:7d:58:43:
         b2:e0:e7:69:7c:4d:fe:16:6a:db:b5:83:10:d4:18:cc:ae:d4:
         6a:bf:52:a1:e7:61:1b:2c:f8:95:fa:55:19:d8:ce:b2:dd:0f:
         52:02:2c:2d:4d:c0:41:77:ad:85:71:bc:fa:44:38:e9:a1:54:
         fd:55:76:7c:16:6b:78:11:74:c8:df:e7:b4:05:29:d0:2b:d8:
         96:a7:c3:e2:d1:5b:37:55:8a:ed:20:bb:4e:ba:07:ee:2e:81:
         30:d7:d2:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw20IE4iV6OTtrcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MGIxOTA4ZmYtNzEyYy00OTYwLWJlZWYtOWVlNGI1ZTYxNTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTHLWBayyS0N0NkN79GFrFhgmQtKYOfU1VfI
NYNBeLrMj15AIXL3thx6VAZz/ZJ/KpJ/eTHTlJu3MLSjOeWMVNc6s0aHsif8E7Yi
mggc8gRSeLr5T0E3dUqahca3fdrNQv+23NociSfobN1TMJ4DNWd6ElJlPqekGJlf
JUd0ikGRCC8WMSWZ643TI2l+K/uqePSREkZlzgd8CPsxKCcjDNyT3tSf7Q8CiFOs
6YpYZ8ISz2/NmlKlUW9AWtCCNNgMQdhTKmlRfzKTzWadZLW/SgK3pvyAbm7D4Il3
eec0VoQjdzbzo0Xd0Pv+tmMeEaQuh2dMN+/KVlXpVzXWO/pBlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmpTCgFaFoB4j2Vog3TcIF0FQAnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTE0OGVmMGUtOGZmNC0z
ZWFiLWFkYjMtOTYxMzExZjFlOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIFcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABj0pUtL79Gn24Wz4ixGiwMLAydOUD9n2gGG/nKYefq26HGcqk1OM4s
dddhNUT1/MA425O5r9vgS5nno7dEkYxJqUfbA8ixcUTGjCh1yPcg1j9eSFvOxrqf
6ypfG+ycJMRUOjCeSnqITTPGwdhiVBaEYBfHv/Qgtyige5WxOkce6/m3ANU0IdSd
Nt9sAyaPxi0OItEvL/RYuRJqW0hxiH1YQ7Lg52l8Tf4Watu1gxDUGMyu1Gq/UqHn
YRss+JX6VRnYzrLdD1ICLC1NwEF3rYVxvPpEOOmhVP1VdnwWa3gRdMjf57QFKdAr
2Janw+LRWzdViu0gu066B+4ugTDX0qw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:05:09 2025 by rpki-client