Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34281c75-3031-312c-9837-d7581bf41152.roa
File:                     34281c75-3031-312c-9837-d7581bf41152.roa (raw, json)
Hash identifier:          Tcvk1vwzajkbkznRQOwaGkhmMgj4UceHj16aAMrPUPI=
Subject key identifier:   16:BE:40:2A:A4:5D:0F:6E:98:72:90:F8:F4:36:AA:2F:39:5D:AB:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431F2FF0086F9128BAAB100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34281c75-3031-312c-9837-d7581bf41152.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.40.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:f2:ff:00:86:f9:12:8b:aa:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=69487722-45a0-4771-b5e7-8cf1fad7c122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:ea:23:fe:dc:26:ce:06:78:2f:ff:39:d2:
                    bc:b7:4e:56:58:0d:b9:c3:e3:36:14:da:05:ed:46:
                    15:d6:ee:00:d3:fb:b8:05:b9:6e:41:32:05:d2:28:
                    f3:70:ed:8a:62:a0:5d:e6:87:3f:1c:2b:ea:88:8b:
                    55:52:71:0a:bb:d6:ce:ed:ae:01:92:f8:d1:3b:29:
                    fc:7e:20:5b:c8:76:91:9a:a3:e4:a8:e1:e6:09:34:
                    9f:2a:34:11:3c:75:9f:bf:82:23:08:4e:96:94:c9:
                    4f:d3:e8:2b:31:bb:d4:8a:ae:c5:c1:7f:d5:79:e9:
                    c0:e9:e7:94:08:90:57:2a:4e:84:74:13:0a:58:aa:
                    29:fc:17:86:fd:79:a0:9b:ff:b4:d6:47:43:1e:63:
                    59:5a:cf:ba:da:d8:86:41:1f:eb:85:88:44:40:26:
                    a0:f0:c2:c3:4f:8e:55:80:ce:19:1e:68:d6:ee:f1:
                    ba:44:0f:88:2a:63:b0:32:ee:d0:be:b6:a7:44:7f:
                    60:c9:c3:6a:d5:93:51:a3:ea:ff:72:a7:e0:77:81:
                    8f:00:6c:a3:02:4d:94:1f:26:5b:a7:d0:0d:cc:28:
                    ad:fa:00:9a:a3:c2:04:1f:07:a7:c2:7c:70:7a:53:
                    33:d8:16:f6:7a:e1:0b:25:eb:8d:c9:84:d1:cd:f8:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:40:2A:A4:5D:0F:6E:98:72:90:F8:F4:36:AA:2F:39:5D:AB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34281c75-3031-312c-9837-d7581bf41152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:b1:dc:b9:44:27:ec:50:3a:f7:d3:d5:b9:e2:46:ba:8e:
         4d:5c:78:b5:8b:fc:a8:63:e6:47:37:ab:d9:b4:74:1a:2b:27:
         c6:fd:f3:2a:e4:d8:c9:36:a6:77:27:a6:28:dd:f0:07:d3:c5:
         64:92:d6:e0:2c:87:90:fd:6a:b4:e6:a3:6a:c5:9d:62:d3:44:
         3d:11:92:be:b3:2d:b4:36:c5:ae:94:3f:91:49:eb:c1:59:55:
         6c:84:74:a3:4e:98:06:08:c5:13:17:d2:c6:47:c1:be:d8:0e:
         fc:05:10:31:53:1a:e8:01:c3:6d:2d:83:83:a5:04:c1:01:1f:
         77:5c:ce:e2:29:5c:fd:e3:f5:b7:e8:9b:33:a9:0d:fd:7c:e5:
         80:47:6f:33:fe:bc:a2:e5:3a:04:c6:52:5a:60:25:38:67:3c:
         bd:e6:07:eb:be:a1:14:63:24:b5:82:fd:19:87:42:6a:e9:f7:
         92:e9:f6:6d:0c:78:d8:c0:80:1d:5d:e3:2a:d8:86:be:a0:4c:
         30:6b:0e:e4:84:6f:e8:1a:08:d3:f6:f1:e0:4e:f0:c9:5e:f7:
         60:fd:ec:6c:33:f9:25:54:2c:39:a3:8a:27:2a:8d:c6:44:8f:
         9f:4a:cb:d8:f9:d2:7c:5b:9a:55:02:dd:f1:b2:ba:2e:56:ff:
         47:61:ee:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfL/AIb5EouqsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Njk0ODc3MjItNDVhMC00NzcxLWI1ZTctOGNmMWZhZDdjMTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuXqI/7cJs4GeC//OdK8t05WWA25w+M2FNoF
7UYV1u4A0/u4BbluQTIF0ijzcO2KYqBd5oc/HCvqiItVUnEKu9bO7a4BkvjROyn8
fiBbyHaRmqPkqOHmCTSfKjQRPHWfv4IjCE6WlMlP0+grMbvUiq7FwX/VeenA6eeU
CJBXKk6EdBMKWKop/BeG/Xmgm/+01kdDHmNZWs+62tiGQR/rhYhEQCag8MLDT45V
gM4ZHmjW7vG6RA+IKmOwMu7QvranRH9gycNq1ZNRo+r/cqfgd4GPAGyjAk2UHyZb
p9ANzCit+gCao8IEHwenwnxwelMz2Bb2euELJeuNyYTRzfhAewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBa+QCqkXQ9umHKQ+PQ2qi85XauSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQyODFjNzUtMzAzMS0z
MTJjLTk4MzctZDc1ODFiZjQxMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRChkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm9sdy5RCfsUDr309W54ka6jk1ceLWL/Khj5kc3q9m0dBorJ8b98yrk
2Mk2pncnpijd8AfTxWSS1uAsh5D9arTmo2rFnWLTRD0Rkr6zLbQ2xa6UP5FJ68FZ
VWyEdKNOmAYIxRMX0sZHwb7YDvwFEDFTGugBw20tg4OlBMEBH3dczuIpXP3j9bfo
mzOpDf185YBHbzP+vKLlOgTGUlpgJThnPL3mB+u+oRRjJLWC/RmHQmrp95Lp9m0M
eNjAgB1d4yrYhr6gTDBrDuSEb+gaCNP28eBO8Mle92D97Gwz+SVULDmjiicqjcZE
j59Ky9j50nxbmlUC3fGyui5W/0dh7pg=
-----END CERTIFICATE-----
Generated at Mon May 12 19:22:18 2025 by rpki-client