Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60b98927-5eae-359e-8db8-1e570a681ccf.roa
File:                     60b98927-5eae-359e-8db8-1e570a681ccf.roa (raw, json)
Hash identifier:          snfbBrGp13a8abfSHecCvfsMOVERcvWWNcMW58uDJWI=
Subject key identifier:   0C:6F:D1:50:DA:D8:BD:CD:C3:B0:DF:10:D8:22:A7:F3:1C:D2:B2:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7FCD8009D7BFFDACCD100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60b98927-5eae-359e-8db8-1e570a681ccf.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        68.47.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:fc:d8:00:9d:7b:ff:da:cc:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=981af32d-df37-4dc4-8d16-adf6410c6271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:ac:77:ad:59:63:6e:f7:74:60:4a:69:a8:
                    ff:ca:0c:41:8e:8d:22:41:ac:a6:44:01:d7:da:76:
                    cb:2e:ec:d0:21:a4:aa:4b:4c:66:a7:09:42:84:b4:
                    b2:58:8a:23:56:d5:2c:0f:69:54:30:42:cd:d1:a2:
                    3b:d6:be:a2:cb:66:ce:09:36:e0:4b:55:a0:90:a9:
                    32:c0:c8:eb:11:f4:e9:25:82:f8:83:84:d2:31:00:
                    ee:80:61:ba:64:de:9f:ec:e9:70:1a:ab:50:ca:b4:
                    27:41:16:12:04:a0:97:ed:8c:8a:52:ce:04:10:d7:
                    27:0b:93:36:1f:30:de:b5:12:db:f2:fd:6e:86:bd:
                    c4:44:97:dd:a5:bc:07:56:32:fe:22:2c:48:90:88:
                    21:f2:34:63:38:d0:07:12:99:14:0e:fd:f5:27:f9:
                    42:48:51:cb:97:6f:f3:4d:c2:94:39:7e:82:6a:47:
                    cb:28:de:46:f3:03:39:2c:d8:4e:a1:81:6d:06:40:
                    41:a8:dc:3a:89:9f:5b:77:df:8a:f2:ca:cd:3c:41:
                    02:4b:21:64:ad:58:13:bd:64:14:29:14:77:c3:5e:
                    46:6d:15:63:60:52:ac:7c:88:4f:33:08:d6:27:23:
                    f1:f8:99:5f:95:3b:c3:48:a1:e8:59:b9:76:0b:af:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6F:D1:50:DA:D8:BD:CD:C3:B0:DF:10:D8:22:A7:F3:1C:D2:B2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60b98927-5eae-359e-8db8-1e570a681ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:03:3c:f7:f9:7a:42:58:d9:43:33:a1:4c:85:4b:c6:8a:30:
         9d:d5:da:ff:96:f5:ec:9c:11:82:24:a1:15:30:b3:c3:87:98:
         b2:ae:ac:b9:b3:e1:83:52:ec:42:dd:bd:56:3f:3f:7e:9a:1f:
         b2:10:97:3d:c3:ca:d9:11:52:6b:cb:92:a1:8c:de:ec:a0:bc:
         96:7c:cf:08:70:8d:95:a6:78:89:e7:84:39:b0:15:06:ff:e8:
         8a:e9:e1:e6:c4:55:c0:cc:58:1c:d6:6e:52:ee:dd:d2:19:dd:
         67:48:5c:f7:ee:45:6f:31:31:65:a6:aa:1f:b1:c5:55:f7:da:
         89:05:84:77:94:96:fe:1c:3f:31:c4:ed:cc:20:92:a5:f1:d2:
         0d:6e:61:54:cf:25:30:d2:00:7e:75:c7:07:21:04:ff:f8:58:
         ca:1d:10:fc:f9:45:fd:8a:0f:27:63:21:b3:3b:c6:99:40:44:
         03:ce:f3:98:d5:69:44:00:a2:ae:23:0f:92:e4:a5:84:37:90:
         cd:15:af:c6:5d:a3:c9:c1:2b:4d:c4:7a:5c:d9:21:00:cc:2b:
         b0:72:c0:8e:7d:8b:c7:48:41:d1:ee:dc:cb:16:7d:c7:90:5f:
         40:f1:37:af:07:5d:98:58:11:96:18:64:9b:04:37:2e:aa:c5:
         3b:30:ea:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/zYAJ17/9rM0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
OTgxYWYzMmQtZGYzNy00ZGM0LThkMTYtYWRmNjQxMGM2MjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55+sd61ZY273dGBKaaj/ygxBjo0iQaymRAHX
2nbLLuzQIaSqS0xmpwlChLSyWIojVtUsD2lUMELN0aI71r6iy2bOCTbgS1WgkKky
wMjrEfTpJYL4g4TSMQDugGG6ZN6f7OlwGqtQyrQnQRYSBKCX7YyKUs4EENcnC5M2
HzDetRLb8v1uhr3ERJfdpbwHVjL+IixIkIgh8jRjONAHEpkUDv31J/lCSFHLl2/z
TcKUOX6CakfLKN5G8wM5LNhOoYFtBkBBqNw6iZ9bd9+K8srNPEECSyFkrVgTvWQU
KRR3w15GbRVjYFKsfIhPMwjWJyPx+JlflTvDSKHoWbl2C68bawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxv0VDa2L3Nw7DfENgip/Mc0rJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBiOTg5MjctNWVhZS0z
NTllLThkYjgtMWU1NzBhNjgxY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUDPPf5ekJY2UMzoUyFS8aKMJ3V2v+W9eycEYIkoRUws8OHmLKurLmz
4YNS7ELdvVY/P36aH7IQlz3DytkRUmvLkqGM3uygvJZ8zwhwjZWmeInnhDmwFQb/
6Irp4ebEVcDMWBzWblLu3dIZ3WdIXPfuRW8xMWWmqh+xxVX32okFhHeUlv4cPzHE
7cwgkqXx0g1uYVTPJTDSAH51xwchBP/4WModEPz5Rf2KDydjIbM7xplARAPO85jV
aUQAoq4jD5LkpYQ3kM0Vr8Zdo8nBK03EelzZIQDMK7BywI59i8dIQdHu3MsWfceQ
X0DxN68HXZhYEZYYZJsENy6qxTsw6is=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:43 2025 by rpki-client