Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ae10a2-2265-39d6-b3c3-65008a151826.roa
File:                     25ae10a2-2265-39d6-b3c3-65008a151826.roa (raw, json)
Hash identifier:          FkxZ9vZOahv2Ebceuzdh6z5NGFP+AB5VDm3vT96Qk5I=
Subject key identifier:   E2:D7:AF:09:5D:4B:2D:09:5F:A3:58:7D:9A:6A:16:1F:41:E3:83:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC308F08E959E70D2B84830
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ae10a2-2265-39d6-b3c3-65008a151826.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.189.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:08:f0:8e:95:9e:70:d2:b8:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=95097160-ae25-4dc9-996d-1fc70dbbb2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:29:2b:da:bf:e7:17:2e:d9:a0:8c:e6:7e:
                    09:79:f1:ba:d7:91:6c:60:91:61:ce:f8:7f:d8:10:
                    31:78:67:e6:31:c3:df:2f:d5:ea:f5:33:b0:77:63:
                    cc:76:88:4b:9d:a8:59:3d:29:30:1d:03:06:cc:dc:
                    e0:9c:a7:0f:36:df:40:c2:0b:86:6e:e1:b5:21:35:
                    45:44:c0:53:5c:ef:15:f7:86:2f:ed:5a:74:17:0b:
                    8d:d9:cc:e2:1b:38:b9:d0:73:76:b8:dc:f5:c0:52:
                    89:06:86:60:11:95:9f:01:46:88:01:be:6e:a8:90:
                    af:8e:d2:8a:ea:91:ee:27:90:a4:af:66:5e:86:c0:
                    04:e1:13:01:94:8a:50:2f:fd:76:d2:c8:cf:25:4f:
                    5f:f6:52:b5:b3:a8:b8:29:08:a9:24:fc:a2:56:ee:
                    56:ef:57:fa:88:2c:68:ba:0f:a7:bd:e8:da:5e:19:
                    06:aa:b9:2e:b9:7b:92:2f:56:33:bd:68:24:4d:92:
                    33:9e:d6:ef:46:a7:a2:34:17:71:33:24:2b:83:aa:
                    91:a9:97:73:c5:a7:04:e5:c7:78:31:51:4b:39:2a:
                    f4:01:27:ac:88:af:7e:fc:68:4e:2c:39:96:ab:0d:
                    d0:11:7d:56:ab:d6:8e:28:e5:0e:db:63:c5:ec:1f:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:AF:09:5D:4B:2D:09:5F:A3:58:7D:9A:6A:16:1F:41:E3:83:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ae10a2-2265-39d6-b3c3-65008a151826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.189.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:54:06:5e:f9:f3:a9:a5:b7:3b:36:22:ad:a6:2c:58:35:e7:
         7d:8b:6f:4b:48:61:cf:bd:67:8f:a4:3a:79:9f:a9:8b:8c:ef:
         0a:fa:62:82:48:85:67:db:8b:70:19:69:8d:38:ac:ed:43:e4:
         df:d6:93:ec:58:62:38:83:8b:fe:dc:b5:3b:30:b5:2a:a5:7b:
         7d:12:b6:1f:76:0d:b2:c6:22:3f:ec:2e:5f:76:12:b2:5d:4a:
         92:ba:e2:50:3a:23:ca:81:bf:11:11:d8:a4:e5:7d:72:fc:ff:
         48:de:40:da:2a:43:aa:8e:26:a8:19:42:64:1b:33:a6:a5:b5:
         4c:f4:ee:2d:23:29:84:e4:76:d5:b4:b5:5d:20:d3:38:32:fd:
         88:67:ea:cf:53:24:e3:91:d2:bb:68:f7:9f:bc:79:04:79:0f:
         02:4a:50:40:3c:ee:1f:7e:b0:2f:43:b5:b1:2d:86:bb:dd:05:
         c0:25:59:9b:64:e2:2c:f3:7d:e4:e9:7b:cd:03:11:03:7b:a8:
         5c:57:a4:1e:e7:bc:29:72:a3:fc:13:14:1d:5d:92:13:76:45:
         bd:34:4e:c8:cf:fa:8c:f6:4a:eb:c3:fb:78:d5:5a:d2:0d:08:
         7f:bd:cf:7e:b4:ec:1b:3e:03:9b:74:f8:f9:d5:50:c4:93:84:
         2b:d7:1d:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswwjwjpWecNK4SDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
OTUwOTcxNjAtYWUyNS00ZGM5LTk5NmQtMWZjNzBkYmJiMmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+opK9q/5xcu2aCM5n4JefG615FsYJFhzvh/
2BAxeGfmMcPfL9Xq9TOwd2PMdohLnahZPSkwHQMGzNzgnKcPNt9AwguGbuG1ITVF
RMBTXO8V94Yv7Vp0FwuN2cziGzi50HN2uNz1wFKJBoZgEZWfAUaIAb5uqJCvjtKK
6pHuJ5Ckr2ZehsAE4RMBlIpQL/120sjPJU9f9lK1s6i4KQipJPyiVu5W71f6iCxo
ug+nvejaXhkGqrkuuXuSL1YzvWgkTZIzntbvRqeiNBdxMyQrg6qRqZdzxacE5cd4
MVFLOSr0ASesiK9+/GhOLDmWqw3QEX1Wq9aOKOUO22PF7B8KoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLXrwldSy0JX6NYfZpqFh9B44OtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVhZTEwYTItMjI2NS0z
OWQ2LWIzYzMtNjUwMDhhMTUxODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb0LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZUBl7586mltzs2Iq2mLFg1532Lb0tIYc+9Z4+kOnmfqYuM7wr6YoJI
hWfbi3AZaY04rO1D5N/Wk+xYYjiDi/7ctTswtSqle30Sth92DbLGIj/sLl92ErJd
SpK64lA6I8qBvxER2KTlfXL8/0jeQNoqQ6qOJqgZQmQbM6altUz07i0jKYTkdtW0
tV0g0zgy/Yhn6s9TJOOR0rto95+8eQR5DwJKUEA87h9+sC9DtbEthrvdBcAlWZtk
4izzfeTpe80DEQN7qFxXpB7nvClyo/wTFB1dkhN2Rb00TsjP+oz2SuvD+3jVWtIN
CH+9z3607Bs+A5t0+PnVUMSThCvXHTY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:56:31 2025 by rpki-client