Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ed09986-0745-396e-9f6e-a52271ebc63d.roa
File:                     1ed09986-0745-396e-9f6e-a52271ebc63d.roa (raw, json)
Hash identifier:          XHs/txldOdzK13g84AeAShJXJO048jUN/psdu4kcJ8o=
Subject key identifier:   B3:2A:F3:93:92:4A:31:F6:EA:E0:56:31:1D:3A:96:5F:C2:2C:B7:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC22326809CD442A9C4BF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ed09986-0745-396e-9f6e-a52271ebc63d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        67.175.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:23:26:80:9c:d4:42:a9:c4:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8fc27c4a-bda1-4d2d-b63e-18e3578779a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:39:eb:e1:4b:6d:59:c9:59:6f:56:5c:7f:
                    a3:77:f1:98:c0:d6:48:07:f4:1b:0a:30:b1:ae:10:
                    33:a9:7d:0d:5e:c4:0c:f5:41:5a:e3:04:9f:ab:0f:
                    d3:12:37:b5:45:ba:7f:3f:f7:ad:d2:0d:06:43:62:
                    8b:ca:04:c4:18:cf:19:0e:62:c1:f3:43:8a:f3:22:
                    4c:23:59:28:db:e8:96:71:bf:d8:87:f8:cb:2c:32:
                    91:0c:f5:3d:ec:3e:8a:24:d9:ed:e3:7a:4e:f9:ea:
                    16:03:a9:55:be:28:a2:1e:91:f5:2f:9f:94:fd:b8:
                    0c:18:7e:e8:89:cd:5e:cc:17:4c:9c:dd:ba:91:0c:
                    a5:0c:95:2e:4d:df:14:67:8f:4c:27:f5:f6:73:96:
                    bd:40:e7:47:a9:bf:24:09:f3:ab:ed:a0:3c:46:70:
                    6d:2d:3a:d9:0d:60:4d:6e:c4:03:7c:c8:09:33:81:
                    ca:7f:2f:ab:c4:1a:24:c5:65:6d:fa:be:44:60:c6:
                    a0:07:8c:ff:e7:7b:a3:b3:32:08:0e:91:71:77:5b:
                    8f:c7:61:77:ef:e1:bc:32:20:d3:2d:5d:88:7a:3d:
                    4c:a3:79:e7:d3:fc:80:6c:4a:04:41:ba:42:30:ba:
                    92:78:96:25:71:bb:ee:b7:ff:71:ed:81:0e:a7:63:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2A:F3:93:92:4A:31:F6:EA:E0:56:31:1D:3A:96:5F:C2:2C:B7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ed09986-0745-396e-9f6e-a52271ebc63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.175.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:82:31:72:88:5d:e0:fd:73:79:29:64:4f:db:c7:5d:d1:33:
         7b:7e:be:76:5e:03:0b:bf:3e:b8:53:db:96:6b:a1:2e:5b:75:
         5e:fd:cd:48:bc:fc:81:fd:df:26:b1:d9:e2:a5:59:9b:24:8d:
         6e:80:f5:04:2e:0b:bb:93:e5:ce:20:fa:6d:73:1a:25:8b:76:
         74:5f:42:28:6e:ff:94:b1:36:ff:ac:cd:e0:e0:a1:22:97:7e:
         02:17:ae:fc:17:2b:2d:c6:59:b3:f8:c7:43:23:66:d2:c9:5b:
         0f:b6:d4:f4:d3:c5:0c:26:bd:43:c9:db:70:8e:6c:1c:63:e2:
         62:76:36:eb:6e:7b:ac:12:bd:88:a4:5e:40:3c:6f:27:86:c2:
         6c:e4:72:0c:30:1c:4c:9d:9a:85:bb:15:b6:6e:84:98:86:12:
         c7:a9:1a:1b:16:cf:62:50:b7:99:ce:05:94:bb:39:42:01:20:
         e3:cb:59:67:97:1c:5d:32:f5:24:c5:73:93:23:52:3e:5a:70:
         a1:6e:77:3f:96:14:48:1e:e0:5d:a6:42:ca:9e:96:4d:af:36:
         f7:9a:ea:a1:1f:37:20:a8:60:ef:cb:18:7a:7e:2f:c5:7d:e5:
         6e:fa:80:fd:a1:7a:5a:88:1a:4a:cf:c8:dd:31:96:9c:a6:52:
         7c:7a:d4:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswiMmgJzUQqnEvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
OGZjMjdjNGEtYmRhMS00ZDJkLWI2M2UtMThlMzU3ODc3OWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3856+FLbVnJWW9WXH+jd/GYwNZIB/QbCjCx
rhAzqX0NXsQM9UFa4wSfqw/TEje1Rbp/P/et0g0GQ2KLygTEGM8ZDmLB80OK8yJM
I1ko2+iWcb/Yh/jLLDKRDPU97D6KJNnt43pO+eoWA6lVviiiHpH1L5+U/bgMGH7o
ic1ezBdMnN26kQylDJUuTd8UZ49MJ/X2c5a9QOdHqb8kCfOr7aA8RnBtLTrZDWBN
bsQDfMgJM4HKfy+rxBokxWVt+r5EYMagB4z/53ujszIIDpFxd1uPx2F37+G8MiDT
LV2Iej1Mo3nn0/yAbEoEQbpCMLqSeJYlcbvut/9x7YEOp2MDowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMq85OSSjH26uBWMR06ll/CLLfzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWVkMDk5ODYtMDc0NS0z
OTZlLTlmNmUtYTUyMjcxZWJjNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeCMXKIXeD9c3kpZE/bx13RM3t+vnZeAwu/PrhT25ZroS5bdV79zUi8
/IH93yax2eKlWZskjW6A9QQuC7uT5c4g+m1zGiWLdnRfQihu/5SxNv+szeDgoSKX
fgIXrvwXKy3GWbP4x0MjZtLJWw+21PTTxQwmvUPJ23CObBxj4mJ2Nutue6wSvYik
XkA8byeGwmzkcgwwHEydmoW7FbZuhJiGEsepGhsWz2JQt5nOBZS7OUIBIOPLWWeX
HF0y9STFc5MjUj5acKFudz+WFEge4F2mQsqelk2vNvea6qEfNyCoYO/LGHp+L8V9
5W76gP2helqIGkrPyN0xlpymUnx61K8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:58:43 2025 by rpki-client