Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4811a941-2bd0-3690-8d46-b6c4f6b991af.roa
File:                     4811a941-2bd0-3690-8d46-b6c4f6b991af.roa (raw, json)
Hash identifier:          FBAZZBCck3FzGCfJwYe55aZi+o9MBqKe6Mh7c4IVJHA=
Subject key identifier:   72:2D:7F:67:50:07:42:82:E4:81:F2:86:3A:C8:12:61:02:71:80:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB72FC1817E4D3321FB4820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4811a941-2bd0-3690-8d46-b6c4f6b991af.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.22.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:2f:c1:81:7e:4d:33:21:fb:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=efa4b4c8-c1b2-4d4b-8d93-68b949a489c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:fc:e2:e8:c6:bf:66:a6:02:7a:3d:42:0b:
                    45:d5:a6:dc:40:cf:5f:83:cb:e3:b8:2e:27:8b:07:
                    8b:ba:5c:ba:06:c1:fb:cb:95:a0:2d:a6:04:e0:d4:
                    ff:22:4b:3f:c3:5f:87:5c:86:09:f0:16:d7:f7:55:
                    83:52:ca:7a:c4:51:62:a7:36:67:9f:66:f8:5a:77:
                    92:de:04:11:08:4e:41:56:5b:6d:3d:f0:6e:7f:cf:
                    02:84:b7:5d:35:39:55:11:c7:0a:48:98:4d:df:c8:
                    dc:5f:6e:01:d2:2d:ce:6f:07:ca:60:43:00:f9:19:
                    9d:a7:df:af:15:6b:b2:8d:35:36:4a:e2:df:11:2e:
                    61:5c:af:99:e4:66:01:97:30:2b:cb:9d:3c:cf:c9:
                    d9:26:09:fc:73:a9:05:21:fc:49:8f:d1:60:34:6c:
                    bc:7c:88:80:bd:ce:b0:67:16:60:de:b0:45:e0:c3:
                    98:a6:02:0d:ba:ef:18:b9:8f:ec:31:72:4e:69:40:
                    61:27:f4:9c:69:16:04:d2:0f:98:b0:24:bd:99:69:
                    cb:c7:f8:c1:fb:22:ed:2c:90:fc:58:43:1f:c2:56:
                    57:0a:e1:22:46:75:5f:8b:ae:4f:9c:3c:18:97:c4:
                    70:36:35:89:93:df:21:b7:59:7b:2c:c4:79:3f:ec:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2D:7F:67:50:07:42:82:E4:81:F2:86:3A:C8:12:61:02:71:80:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4811a941-2bd0-3690-8d46-b6c4f6b991af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.22.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:4e:7d:8e:81:c9:4e:4d:88:63:aa:f8:0f:70:21:34:d9:
         4f:70:32:bb:65:4f:c7:32:7c:34:7b:5f:e8:ef:16:bb:97:53:
         b3:0b:aa:74:70:5b:c1:3d:63:ae:f1:5b:eb:c6:cc:e3:da:c0:
         45:47:0c:ba:66:54:68:ed:01:40:36:a0:de:9b:a1:5f:44:ba:
         6c:b0:65:03:2b:76:ae:ef:17:07:7e:57:a1:d4:5f:bc:c9:1f:
         fe:6f:6d:56:ba:c8:fa:68:59:c3:f8:0b:b7:ae:5a:db:b5:c5:
         3c:1d:8e:df:a1:68:49:aa:28:90:52:11:64:41:b2:80:cc:ad:
         0a:eb:ee:8e:30:17:c5:e5:71:97:20:dd:b6:a9:c8:ea:c8:69:
         48:db:1a:a2:cd:2b:64:14:86:36:62:43:0e:ca:8f:7b:8f:89:
         e3:1f:64:4b:81:c1:c8:25:39:d4:fc:08:19:65:2f:b5:ca:de:
         92:d1:b4:5a:67:43:7a:e8:49:55:6e:57:39:2d:ee:d3:83:82:
         24:f9:f5:d7:fa:d0:66:41:be:b6:b1:31:8c:02:df:2b:d1:19:
         40:b9:a5:bf:c4:17:72:e9:12:3f:12:e0:74:04:42:63:dd:d6:
         a5:4f:ac:f5:39:86:b0:3c:dc:ce:db:44:55:44:7c:53:20:43:
         5a:c7:1a:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ty/BgX5NMyH7SCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
ZWZhNGI0YzgtYzFiMi00ZDRiLThkOTMtNjhiOTQ5YTQ4OWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06H84ujGv2amAno9QgtF1abcQM9fg8vjuC4n
iweLuly6BsH7y5WgLaYE4NT/Iks/w1+HXIYJ8BbX91WDUsp6xFFipzZnn2b4WneS
3gQRCE5BVlttPfBuf88ChLddNTlVEccKSJhN38jcX24B0i3ObwfKYEMA+Rmdp9+v
FWuyjTU2SuLfES5hXK+Z5GYBlzAry508z8nZJgn8c6kFIfxJj9FgNGy8fIiAvc6w
ZxZg3rBF4MOYpgINuu8YuY/sMXJOaUBhJ/ScaRYE0g+YsCS9mWnLx/jB+yLtLJD8
WEMfwlZXCuEiRnVfi65PnDwYl8RwNjWJk98ht1l7LMR5P+zuXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHItf2dQB0KC5IHyhjrIEmECcYBIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDgxMWE5NDEtMmJkMC0z
NjkwLThkNDYtYjZjNGY2Yjk5MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHOTn2OgclOTYhjqvgPcCE02U9wMrtlT8cyfDR7X+jvFruXU7MLqnRw
W8E9Y67xW+vGzOPawEVHDLpmVGjtAUA2oN6boV9EumywZQMrdq7vFwd+V6HUX7zJ
H/5vbVa6yPpoWcP4C7euWtu1xTwdjt+haEmqKJBSEWRBsoDMrQrr7o4wF8XlcZcg
3bapyOrIaUjbGqLNK2QUhjZiQw7Kj3uPieMfZEuBwcglOdT8CBllL7XK3pLRtFpn
Q3roSVVuVzkt7tODgiT59df60GZBvraxMYwC3yvRGUC5pb/EF3LpEj8S4HQEQmPd
1qVPrPU5hrA83M7bRFVEfFMgQ1rHGus=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:40 2025 by rpki-client