Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38aaf3a0-ca93-32bb-b9d0-c4f7079951e9.roa
File:                     38aaf3a0-ca93-32bb-b9d0-c4f7079951e9.roa (raw, json)
Hash identifier:          wLBypBWi/j3ai4x5K5jbh4eVk+JSDnlOn0Ildjq9aa8=
Subject key identifier:   9C:81:B3:02:09:FF:68:BA:AF:99:4B:13:F9:5E:BC:0D:88:7F:50:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBB7F27621DA3DF168F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38aaf3a0-ca93-32bb-b9d0-c4f7079951e9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        96.78.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:b7:f2:76:21:da:3d:f1:68:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9d15c732-f46f-4590-b4cd-4ded655413fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:b8:6d:71:6b:7b:88:f2:a4:9a:6a:62:bb:
                    60:34:28:b4:fd:9e:0d:5b:0d:0e:5b:6b:dd:54:f1:
                    b7:fb:73:4f:66:4a:96:0e:41:da:3f:05:a3:27:bd:
                    c4:41:16:6b:cf:fe:0e:d6:9d:ff:5a:c8:7b:8c:f2:
                    b8:fe:f4:49:92:1a:b8:99:66:3c:bb:eb:72:af:4b:
                    e3:ef:ef:38:f8:16:57:41:1e:b4:80:ea:8b:f3:0c:
                    35:4e:38:2c:c4:39:fd:ac:3d:4a:8f:b7:a0:f2:a9:
                    43:d1:a4:d1:2a:6e:5d:1e:2a:ae:90:17:27:1a:af:
                    5f:50:e1:c5:52:72:84:9f:76:fd:56:51:08:ef:5b:
                    00:08:24:28:04:10:a2:de:89:9e:f4:c9:50:80:8d:
                    6a:03:4d:99:2c:d9:3b:db:5b:7e:1d:5b:f3:85:dc:
                    88:fe:2a:5a:26:d6:42:2b:9b:86:c1:3e:39:29:bc:
                    18:7e:c3:71:e8:58:32:aa:a5:55:72:c6:ef:35:b3:
                    26:5c:78:69:33:ad:c0:d6:2c:d5:6f:47:c7:2d:fd:
                    9e:f5:be:ce:02:cd:7f:08:20:a2:c4:51:a1:c2:17:
                    0c:0a:c9:95:53:4a:24:e7:cc:be:d0:8d:0f:54:bb:
                    33:be:41:72:23:65:cc:8f:d6:81:de:09:cb:18:37:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:B3:02:09:FF:68:BA:AF:99:4B:13:F9:5E:BC:0D:88:7F:50:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38aaf3a0-ca93-32bb-b9d0-c4f7079951e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.78.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:08:5a:38:32:d4:49:00:3e:d8:72:e5:e0:29:a0:15:43:5c:
         44:7a:a5:24:d5:fb:af:c6:02:59:8d:01:2b:8b:db:ae:8b:8c:
         e4:f3:6f:96:4f:97:12:68:49:ea:2e:be:80:7d:10:d2:72:5b:
         5d:a9:2e:9b:99:a3:37:b2:8c:18:aa:2a:6f:e5:a6:06:7f:77:
         7c:fd:b5:41:3a:ec:5b:a7:17:5c:6c:f2:ff:d7:0d:03:ab:e1:
         c2:f3:9e:f2:61:2b:a2:5b:d3:d9:5b:6e:bf:7d:eb:3a:56:f6:
         46:7b:0c:43:ee:db:2a:28:49:2a:54:71:67:b5:16:65:70:48:
         e3:54:8e:42:4f:3c:a5:8b:f0:c0:3e:c1:3c:29:ad:b1:6d:db:
         14:7b:44:19:5f:8c:dc:7e:02:3a:5f:61:c8:9c:2e:24:e3:6d:
         4f:05:95:67:f5:5d:68:15:4e:db:86:f9:d9:2d:fd:c7:5b:a4:
         f1:04:8d:dc:80:9d:ee:93:65:bd:b0:99:61:8f:45:68:0f:e4:
         da:8e:f1:77:b9:4a:d8:c5:6d:27:1a:b6:1f:85:99:e2:51:2b:
         92:a7:6d:5f:3b:05:6c:57:42:e8:a2:75:6e:d6:51:b1:e6:01:
         eb:fe:ee:d0:20:ed:78:3c:28:0f:e8:05:cd:c3:11:2c:a0:88:
         93:f5:a1:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+7fydiHaPfFo9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
OWQxNWM3MzItZjQ2Zi00NTkwLWI0Y2QtNGRlZDY1NTQxM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNS4bXFre4jypJpqYrtgNCi0/Z4NWw0OW2vd
VPG3+3NPZkqWDkHaPwWjJ73EQRZrz/4O1p3/Wsh7jPK4/vRJkhq4mWY8u+tyr0vj
7+84+BZXQR60gOqL8ww1TjgsxDn9rD1Kj7eg8qlD0aTRKm5dHiqukBcnGq9fUOHF
UnKEn3b9VlEI71sACCQoBBCi3ome9MlQgI1qA02ZLNk721t+HVvzhdyI/ipaJtZC
K5uGwT45KbwYfsNx6FgyqqVVcsbvNbMmXHhpM63A1izVb0fHLf2e9b7OAs1/CCCi
xFGhwhcMCsmVU0ok58y+0I0PVLszvkFyI2XMj9aB3gnLGDc9awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyBswIJ/2i6r5lLE/levA2If1AkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhhYWYzYTAtY2E5My0z
MmJiLWI5ZDAtYzRmNzA3OTk1MWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYE6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgIWjgy1EkAPthy5eApoBVDXER6pSTV+6/GAlmNASuL266LjOTzb5ZP
lxJoSeouvoB9ENJyW12pLpuZozeyjBiqKm/lpgZ/d3z9tUE67FunF1xs8v/XDQOr
4cLznvJhK6Jb09lbbr996zpW9kZ7DEPu2yooSSpUcWe1FmVwSONUjkJPPKWL8MA+
wTwprbFt2xR7RBlfjNx+AjpfYcicLiTjbU8FlWf1XWgVTtuG+dkt/cdbpPEEjdyA
ne6TZb2wmWGPRWgP5NqO8Xe5StjFbScath+FmeJRK5KnbV87BWxXQuiidW7WUbHm
Aev+7tAg7Xg8KA/oBc3DESygiJP1ocM=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:06:36 2025 by rpki-client