Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a6975f2-b329-3545-a67b-79a818080649.roa
File:                     5a6975f2-b329-3545-a67b-79a818080649.roa (raw, json)
Hash identifier:          /LwmoUy75Tk+caLuGRt3dtp6wICvsEOMuyvhiFBCaEo=
Subject key identifier:   82:6E:89:E9:7E:91:77:3D:BF:FA:39:26:0B:15:72:6E:06:D8:66:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB3EC0E428779482600060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a6975f2-b329-3545-a67b-79a818080649.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.47.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:3e:c0:e4:28:77:94:82:60:00:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=95572788-6044-46a5-866c-104d329a5057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:08:ea:c6:cb:af:93:82:a3:92:20:9c:a9:
                    88:89:1f:c2:05:a8:f8:c9:27:9b:01:33:67:d5:13:
                    56:cb:db:26:ce:a8:8b:44:86:fb:6d:ce:90:68:f9:
                    9e:fb:21:5d:7d:bf:59:15:2b:ed:0a:67:96:34:84:
                    b6:b2:fb:39:0c:18:6d:7a:8b:5a:f2:96:55:5b:1d:
                    dd:ec:df:56:75:a2:8e:8c:57:92:6c:43:56:65:8e:
                    94:a5:57:77:91:6b:04:e2:c5:8f:43:5b:e1:66:30:
                    fb:f0:46:1a:cb:d8:71:ba:a4:6d:35:97:6d:28:7f:
                    0b:c3:cc:49:c8:49:8b:2c:b4:64:0c:2c:b9:82:2d:
                    45:e7:03:aa:c1:a9:6e:fa:4c:7d:fd:4b:c1:8e:f5:
                    8b:a0:91:c0:e1:0d:29:b5:15:81:ea:27:c9:fe:cb:
                    93:ad:61:c8:18:24:0c:c6:1f:c8:63:3a:50:82:86:
                    aa:d2:2b:1a:64:cf:22:7b:35:43:9e:9a:e0:26:ed:
                    d2:8e:f7:48:c8:79:ca:1e:0b:81:3c:95:79:b1:b4:
                    03:12:19:1c:ef:b1:ab:a8:2e:6e:b1:72:b7:e0:51:
                    5f:56:44:51:38:54:4c:76:cc:8d:13:83:1d:95:59:
                    a6:3c:95:69:a7:50:4c:10:26:a5:da:8e:34:f8:7e:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6E:89:E9:7E:91:77:3D:BF:FA:39:26:0B:15:72:6E:06:D8:66:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a6975f2-b329-3545-a67b-79a818080649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:21:06:5a:59:49:c0:9a:61:88:cc:9f:86:e5:34:fc:fc:
         6e:42:fb:c2:b6:17:f2:64:ec:64:fc:53:c8:82:16:6f:b8:42:
         1d:aa:e5:5b:7b:d3:03:d7:fe:2d:7e:06:5f:ef:4f:35:ae:ab:
         ac:f0:0d:f5:b6:c8:1f:b2:d9:1e:aa:21:15:e9:b9:c7:b9:1e:
         7b:3d:d0:8f:d2:a4:86:23:3f:b5:b3:e0:77:d9:4c:1a:40:cb:
         92:b0:79:06:1a:e9:06:8b:45:88:73:38:9b:12:ce:71:32:f8:
         5a:fa:f5:b3:8e:e7:b2:ac:7c:03:97:0a:d9:9a:4e:23:52:65:
         16:66:14:ad:f9:00:5a:fe:88:db:a5:40:b0:e9:10:01:93:81:
         d2:f4:89:ad:68:86:c0:38:ae:7d:a4:5a:2b:49:f5:1b:41:49:
         90:46:f9:71:c1:b0:9a:6d:f7:50:0b:95:79:d0:91:c2:37:78:
         a6:56:e9:85:9d:b1:f0:46:5b:e6:8e:a3:48:0e:38:77:1d:06:
         99:7e:c8:44:b8:1e:61:8f:a5:b9:b9:f8:a0:ce:46:21:92:a1:
         e1:cc:82:5a:c5:b5:57:3c:f8:45:1d:6a:ab:4e:60:e2:03:d6:
         b6:3b:d3:c4:b9:d0:70:6d:83:e4:a7:64:7f:3b:d2:01:87:1d:
         27:6c:06:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+z7A5Ch3lIJgAGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
OTU1NzI3ODgtNjA0NC00NmE1LTg2NmMtMTA0ZDMyOWE1MDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwI6sbLr5OCo5IgnKmIiR/CBaj4ySebATNn
1RNWy9smzqiLRIb7bc6QaPme+yFdfb9ZFSvtCmeWNIS2svs5DBhteota8pZVWx3d
7N9WdaKOjFeSbENWZY6UpVd3kWsE4sWPQ1vhZjD78EYay9hxuqRtNZdtKH8Lw8xJ
yEmLLLRkDCy5gi1F5wOqwalu+kx9/UvBjvWLoJHA4Q0ptRWB6ifJ/suTrWHIGCQM
xh/IYzpQgoaq0isaZM8iezVDnprgJu3SjvdIyHnKHguBPJV5sbQDEhkc77GrqC5u
sXK34FFfVkRROFRMdsyNE4MdlVmmPJVpp1BMECal2o40+H5SYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJuiel+kXc9v/o5JgsVcm4G2GaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE2OTc1ZjItYjMyOS0z
NTQ1LWE2N2ItNzlhODE4MDgwNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC+8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAalIQZaWUnAmmGIzJ+G5TT8/G5C+8K2F/Jk7GT8U8iCFm+4Qh2q5Vt7
0wPX/i1+Bl/vTzWuq6zwDfW2yB+y2R6qIRXpuce5Hns90I/SpIYjP7Wz4HfZTBpA
y5KweQYa6QaLRYhzOJsSznEy+Fr69bOO57KsfAOXCtmaTiNSZRZmFK35AFr+iNul
QLDpEAGTgdL0ia1ohsA4rn2kWitJ9RtBSZBG+XHBsJpt91ALlXnQkcI3eKZW6YWd
sfBGW+aOo0gOOHcdBpl+yES4HmGPpbm5+KDORiGSoeHMglrFtVc8+EUdaqtOYOID
1rY708S50HBtg+SnZH870gGHHSdsBsU=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:31:55 2025 by rpki-client