Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e8c1bb-ffba-3c53-af09-324377429591.roa
File:                     16e8c1bb-ffba-3c53-af09-324377429591.roa (raw, json)
Hash identifier:          c8Eei2ojUgk2Xybd/QfRs+pAnR8uuF6jm252lD21rXE=
Subject key identifier:   82:49:1A:10:D1:CD:C4:60:1C:E7:0B:65:E2:67:BE:BD:06:8B:A8:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8A1014C6142B19DE7EE50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e8c1bb-ffba-3c53-af09-324377429591.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        68.52.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:a1:01:4c:61:42:b1:9d:e7:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b29fc59b-033e-4f85-a54a-7d1d0fbf2591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:dd:51:50:56:7e:dd:54:5c:1a:66:45:c3:
                    73:f7:75:db:92:93:a8:4f:27:a9:8a:54:ec:ce:2b:
                    16:e3:a0:f5:16:02:4b:e5:15:c9:66:96:9a:c5:20:
                    27:8a:a6:91:94:f4:e0:d1:5b:79:3b:2d:94:a5:8b:
                    82:81:c1:a5:28:3c:39:cb:72:73:ee:eb:e9:52:b4:
                    1a:87:43:7c:70:aa:17:53:bb:5b:65:ce:e2:18:ed:
                    84:7d:57:b3:f2:77:9a:95:76:00:72:0f:58:2b:31:
                    57:aa:ff:9c:08:0e:d3:a9:6a:9c:8f:d7:98:f5:d5:
                    6f:70:60:bb:1e:b8:36:5d:0e:fd:73:3b:8e:1c:b0:
                    ab:3a:dc:c0:05:39:53:f1:f1:7a:fa:76:07:62:8c:
                    79:ac:7b:6d:82:a2:78:01:a2:6d:80:e0:0b:7f:ee:
                    fa:00:81:8e:eb:92:e8:1d:9f:80:c2:77:9c:f9:46:
                    0b:6e:0e:d2:db:ed:d0:72:c3:f8:78:63:d2:a8:cc:
                    60:54:1f:ba:71:c2:91:06:a4:2d:c4:20:d5:a3:1e:
                    56:ae:88:6a:6c:1b:19:b1:1d:32:e8:08:60:56:3e:
                    eb:fa:17:35:ce:cd:b8:ad:9b:82:d3:1b:a4:fb:ec:
                    ae:82:25:98:99:5f:4d:a4:cb:41:7b:1e:05:4c:1a:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:1A:10:D1:CD:C4:60:1C:E7:0B:65:E2:67:BE:BD:06:8B:A8:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e8c1bb-ffba-3c53-af09-324377429591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:fb:2c:d3:d8:52:b0:ad:ce:54:60:59:8d:42:f7:81:15:a4:
         f4:c3:aa:e5:aa:ea:42:4d:5f:82:58:4a:21:c0:bd:bc:79:eb:
         83:82:fa:76:38:23:17:0d:65:dc:fc:15:ce:7a:31:ba:1f:43:
         3d:58:1f:d5:b2:68:d5:a2:14:11:9d:15:ac:06:ad:40:4b:0f:
         20:26:dd:fb:b8:c2:8b:d6:92:d5:e6:87:99:17:4d:eb:93:b3:
         da:68:b6:38:e4:c0:c6:f9:26:d2:b2:ac:86:4a:e9:fe:74:f9:
         0b:03:ea:43:0c:21:7a:af:26:37:c3:04:10:0e:d6:25:fe:fb:
         60:b1:aa:a8:3f:a6:93:ef:81:be:cd:bb:93:6f:14:ad:fe:2f:
         c3:e8:86:11:55:09:e9:30:b1:d3:9b:be:48:91:df:f8:13:0f:
         b5:17:74:54:05:f8:c3:cf:d9:a4:af:de:97:fe:4b:db:b7:91:
         31:4d:60:42:66:ae:0b:26:f1:84:4b:c0:ad:69:0b:81:1d:38:
         b1:84:1d:0d:4f:0b:1d:27:9f:dc:dd:99:0f:6f:26:bb:60:2f:
         ea:07:b9:04:03:ca:94:fb:86:e4:4e:90:ec:3e:65:62:09:c8:
         23:90:38:3d:05:e8:9d:a0:e3:a2:65:1f:9a:0a:34:6a:ff:35:
         92:8c:69:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKEBTGFCsZ3n7lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YjI5ZmM1OWItMDMzZS00Zjg1LWE1NGEtN2QxZDBmYmYyNTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJHdUVBWft1UXBpmRcNz93XbkpOoTyepilTs
zisW46D1FgJL5RXJZpaaxSAniqaRlPTg0Vt5Oy2UpYuCgcGlKDw5y3Jz7uvpUrQa
h0N8cKoXU7tbZc7iGO2EfVez8nealXYAcg9YKzFXqv+cCA7TqWqcj9eY9dVvcGC7
Hrg2XQ79czuOHLCrOtzABTlT8fF6+nYHYox5rHttgqJ4AaJtgOALf+76AIGO65Lo
HZ+Awnec+UYLbg7S2+3QcsP4eGPSqMxgVB+6ccKRBqQtxCDVox5WrohqbBsZsR0y
6AhgVj7r+hc1zs24rZuC0xuk++yugiWYmV9NpMtBex4FTBpwQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJJGhDRzcRgHOcLZeJnvr0Gi6giMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTZlOGMxYmItZmZiYS0z
YzUzLWFmMDktMzI0Mzc3NDI5NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDRfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALv7LNPYUrCtzlRgWY1C94EVpPTDquWq6kJNX4JYSiHAvbx564OC+nY4
IxcNZdz8Fc56MbofQz1YH9WyaNWiFBGdFawGrUBLDyAm3fu4wovWktXmh5kXTeuT
s9potjjkwMb5JtKyrIZK6f50+QsD6kMMIXqvJjfDBBAO1iX++2Cxqqg/ppPvgb7N
u5NvFK3+L8PohhFVCekwsdObvkiR3/gTD7UXdFQF+MPP2aSv3pf+S9u3kTFNYEJm
rgsm8YRLwK1pC4EdOLGEHQ1PCx0nn9zdmQ9vJrtgL+oHuQQDypT7huROkOw+ZWIJ
yCOQOD0F6J2g46JlH5oKNGr/NZKMacw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:21 2025 by rpki-client