Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/312ca83c-7d3b-3c34-bf07-98ffb303eafc.roa
File:                     312ca83c-7d3b-3c34-bf07-98ffb303eafc.roa (raw, json)
Hash identifier:          FOqAq5+SsZKJiH/Tm7a5Ile9V41V53eDBlBf8L3uUHo=
Subject key identifier:   DF:D0:A5:0F:DC:DB:1D:4F:14:D9:2D:5F:BE:89:92:0C:05:C6:A3:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0809DC4A9A9C490A664E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/312ca83c-7d3b-3c34-bf07-98ffb303eafc.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.168.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:09:dc:4a:9a:9c:49:0a:66:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=28eb36ba-aacd-439e-87a1-905180e347d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:4e:e6:54:8d:35:70:7b:2d:e1:5e:be:9c:
                    22:ad:03:25:3c:d3:ef:45:d2:ef:c8:0a:df:04:67:
                    20:42:a6:28:b2:50:94:7a:f1:c1:06:7f:ab:d4:20:
                    97:6f:db:d9:dd:3e:d3:e9:9f:f6:29:8e:4d:3b:59:
                    0c:b2:a5:5c:b7:53:5c:06:f1:da:1c:ff:1a:98:35:
                    aa:9d:e9:48:bf:f4:ca:a0:c5:70:3f:5e:7f:f4:20:
                    17:82:9b:c1:69:9d:b5:ea:fb:78:97:3a:54:85:37:
                    1e:be:a3:61:51:cb:ce:f1:3b:9d:5c:63:f0:96:8c:
                    4d:d6:2d:b9:e8:a9:fc:55:b2:c0:3c:c3:c7:c5:1f:
                    01:a7:5c:5a:c5:a0:5f:2c:0b:73:67:a1:a9:f9:f4:
                    1a:b1:31:98:bf:ee:c9:31:0c:81:3a:6e:ab:cc:ba:
                    b3:02:d2:69:3e:c2:ed:29:a5:13:66:c4:35:dc:b5:
                    f9:5a:51:09:42:e8:7a:6f:9b:d0:e2:ef:8e:1e:7a:
                    d4:28:6a:12:70:25:eb:bf:cf:e4:1b:1c:d4:23:7e:
                    52:65:e9:88:14:17:34:cd:0a:ee:76:9d:a9:53:96:
                    d3:8d:18:92:b9:66:1d:89:64:c7:7c:d4:0a:e1:86:
                    ae:76:f5:d5:ba:09:86:8d:d9:ea:84:70:77:b5:71:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:A5:0F:DC:DB:1D:4F:14:D9:2D:5F:BE:89:92:0C:05:C6:A3:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/312ca83c-7d3b-3c34-bf07-98ffb303eafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:0d:54:31:48:fb:72:80:8a:74:ed:e3:69:cb:b9:11:f5:
         ab:24:50:b4:a3:5f:a2:c1:83:b4:bd:7d:b9:11:76:f0:d1:aa:
         4a:b7:9b:dc:4c:95:37:d5:7b:1b:a4:47:7d:38:5f:70:d6:49:
         93:9e:4d:b6:f8:cc:7d:13:01:6f:92:8b:dc:7b:4f:a7:8b:ab:
         83:51:2e:a9:90:1f:83:70:c4:8d:a8:a4:2d:52:a6:19:ad:4a:
         46:21:a8:1c:51:65:e0:52:57:89:87:25:4e:2f:a8:fe:80:69:
         92:b4:5c:91:18:c3:62:2f:0c:d5:e0:77:1d:0d:c4:85:86:62:
         f7:14:3b:5a:5a:3e:af:32:5e:04:c5:5b:ca:8c:54:d9:4e:17:
         18:b9:4d:44:0d:ec:07:78:90:cb:b2:4c:23:73:d8:86:8b:fc:
         6a:89:53:b7:52:a8:3e:c8:9b:3d:0f:2f:3b:58:1e:34:29:fa:
         db:e4:2e:c6:af:49:b6:cd:a1:73:83:59:a4:87:10:5c:47:af:
         c1:68:ef:51:76:c7:5d:4f:7d:1e:e1:6b:37:47:9f:9c:ab:0e:
         2c:55:cc:25:42:4a:2e:9b:1f:75:f3:3a:ab:c6:82:fd:b0:ba:
         3d:41:e9:cc:0b:d7:ab:93:3c:21:07:70:87:d3:d6:3d:97:0f:
         99:33:19:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCAncSpqcSQpmToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MjhlYjM2YmEtYWFjZC00MzllLTg3YTEtOTA1MTgwZTM0N2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZO5lSNNXB7LeFevpwirQMlPNPvRdLvyArf
BGcgQqYoslCUevHBBn+r1CCXb9vZ3T7T6Z/2KY5NO1kMsqVct1NcBvHaHP8amDWq
nelIv/TKoMVwP15/9CAXgpvBaZ216vt4lzpUhTcevqNhUcvO8TudXGPwloxN1i25
6Kn8VbLAPMPHxR8Bp1xaxaBfLAtzZ6Gp+fQasTGYv+7JMQyBOm6rzLqzAtJpPsLt
KaUTZsQ13LX5WlEJQuh6b5vQ4u+OHnrUKGoScCXrv8/kGxzUI35SZemIFBc0zQru
dp2pU5bTjRiSuWYdiWTHfNQK4YaudvXVugmGjdnqhHB3tXGVvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/QpQ/c2x1PFNktX76JkgwFxqOUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzEyY2E4M2MtN2QzYi0z
YzM0LWJmMDctOThmZmIzMDNlYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSah8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzPDVQxSPtygIp07eNpy7kR9askULSjX6LBg7S9fbkRdvDRqkq3m9xM
lTfVexukR304X3DWSZOeTbb4zH0TAW+Si9x7T6eLq4NRLqmQH4NwxI2opC1Sphmt
SkYhqBxRZeBSV4mHJU4vqP6AaZK0XJEYw2IvDNXgdx0NxIWGYvcUO1paPq8yXgTF
W8qMVNlOFxi5TUQN7Ad4kMuyTCNz2IaL/GqJU7dSqD7Imz0PLztYHjQp+tvkLsav
SbbNoXODWaSHEFxHr8Fo71F2x11PfR7hazdHn5yrDixVzCVCSi6bH3XzOqvGgv2w
uj1B6cwL16uTPCEHcIfT1j2XD5kzGew=
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:32:44 2025 by rpki-client