Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6913b468-f878-3c00-b9fd-5899074651d8.roa
File:                     6913b468-f878-3c00-b9fd-5899074651d8.roa (raw, json)
Hash identifier:          dC30u9PJdoIArHefA3lG6QJIoFeMtvXtu6jZ0S/PTe4=
Subject key identifier:   8C:F2:07:96:6D:3F:89:21:CD:EE:57:77:DF:CD:06:A1:8C:CF:A7:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8AAAA653D60F2F0805400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6913b468-f878-3c00-b9fd-5899074651d8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        68.57.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:aa:aa:65:3d:60:f2:f0:80:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=59d021ef-fd44-40fa-946e-a85c32553e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:b5:15:21:3b:0a:11:de:05:f8:fe:27:61:
                    c5:fa:db:a8:79:66:23:fe:ca:45:0c:d2:be:d3:08:
                    2c:88:ed:f9:a1:f4:57:28:4d:7e:ab:6b:1f:1e:f1:
                    49:ca:8f:a0:41:46:2b:f8:c1:37:92:43:84:f1:4a:
                    8a:bc:30:55:03:8b:cc:b1:b8:4e:a5:e5:5d:b4:14:
                    6f:9e:a7:e7:2e:90:8c:95:25:83:67:4e:72:74:72:
                    e0:cc:fe:a0:2f:d4:f9:e6:5c:82:4c:7a:f0:6a:d6:
                    11:7c:4e:98:de:7e:90:92:60:a6:c2:b7:60:ed:4e:
                    cb:cb:e7:ca:09:b7:d8:85:44:91:48:64:01:fc:b5:
                    88:e7:1a:92:bd:c5:8f:f9:ec:4a:4b:67:01:3c:97:
                    af:3f:56:fa:c1:f2:28:a1:bc:c6:f4:6b:1f:50:3d:
                    ee:78:1a:a5:af:90:04:b2:3d:ef:30:53:3a:0a:81:
                    38:69:18:f2:16:47:06:77:46:cc:d0:40:62:13:7a:
                    d2:6a:97:b0:3c:71:1f:10:d2:e0:4c:b0:62:dc:23:
                    ae:f4:15:12:4e:0a:99:09:09:ea:6a:11:4b:8b:19:
                    7d:5d:00:f2:66:ef:2d:d9:90:d0:6e:08:14:2d:67:
                    0a:77:ef:00:63:eb:b6:aa:3c:fc:78:bb:89:26:a0:
                    c7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F2:07:96:6D:3F:89:21:CD:EE:57:77:DF:CD:06:A1:8C:CF:A7:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6913b468-f878-3c00-b9fd-5899074651d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.57.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:2a:f5:71:31:28:7a:6c:d0:fc:71:57:07:64:bc:01:79:8e:
         c7:54:96:b0:91:5f:25:de:3a:9b:05:c0:d1:6c:e7:5c:85:12:
         e4:e7:63:52:f5:ea:93:ce:76:90:1d:c0:18:e2:9a:02:86:39:
         e5:9d:79:81:2c:f2:72:85:90:80:2f:99:cf:c0:10:82:6b:74:
         bd:d3:56:92:e1:33:ae:a5:f6:bc:9d:4d:e5:88:fd:78:e8:02:
         a2:df:d4:09:c7:15:fb:72:eb:4b:14:e7:90:6e:aa:89:b6:10:
         5a:89:14:c7:82:a6:d4:31:31:8d:7c:ce:5c:cf:1b:57:04:80:
         dd:7f:19:af:81:40:1b:f5:9e:2b:6b:2b:47:ff:64:1c:68:7d:
         de:72:fe:d8:74:1f:f7:bf:91:73:ba:93:d0:28:d3:b5:70:b7:
         fb:a3:fd:05:9d:6d:14:6c:a4:38:f5:29:ac:a0:4c:b8:ed:8e:
         7a:7d:5c:09:2b:e5:f9:83:c1:a5:79:39:63:0e:5e:1e:2f:ef:
         c9:9e:e4:aa:a8:08:ba:c2:53:0b:ea:25:e3:ff:fc:92:ae:87:
         1d:46:d9:4d:7e:3a:31:70:ee:99:49:c4:a6:4a:41:f1:67:b7:
         3b:2f:40:2c:f9:fc:37:c2:43:e0:66:10:eb:c0:d0:15:08:62:
         83:9c:2e:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKqqZT1g8vCAVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NTlkMDIxZWYtZmQ0NC00MGZhLTk0NmUtYTg1YzMyNTUzZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIS1FSE7ChHeBfj+J2HF+tuoeWYj/spFDNK+
0wgsiO35ofRXKE1+q2sfHvFJyo+gQUYr+ME3kkOE8UqKvDBVA4vMsbhOpeVdtBRv
nqfnLpCMlSWDZ05ydHLgzP6gL9T55lyCTHrwatYRfE6Y3n6QkmCmwrdg7U7Ly+fK
CbfYhUSRSGQB/LWI5xqSvcWP+exKS2cBPJevP1b6wfIoobzG9GsfUD3ueBqlr5AE
sj3vMFM6CoE4aRjyFkcGd0bM0EBiE3rSapewPHEfENLgTLBi3COu9BUSTgqZCQnq
ahFLixl9XQDyZu8t2ZDQbggULWcKd+8AY+u2qjz8eLuJJqDHvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzyB5ZtP4khze5Xd9/NBqGMz6d7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjkxM2I0NjgtZjg3OC0z
YzAwLWI5ZmQtNTg5OTA3NDY1MWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDlEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANkq9XExKHps0PxxVwdkvAF5jsdUlrCRXyXeOpsFwNFs51yFEuTnY1L1
6pPOdpAdwBjimgKGOeWdeYEs8nKFkIAvmc/AEIJrdL3TVpLhM66l9rydTeWI/Xjo
AqLf1AnHFfty60sU55Buqom2EFqJFMeCptQxMY18zlzPG1cEgN1/Ga+BQBv1nitr
K0f/ZBxofd5y/th0H/e/kXO6k9Ao07Vwt/uj/QWdbRRspDj1KaygTLjtjnp9XAkr
5fmDwaV5OWMOXh4v78me5KqoCLrCUwvqJeP//JKuhx1G2U1+OjFw7plJxKZKQfFn
tzsvQCz5/DfCQ+BmEOvA0BUIYoOcLsY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:00:02 2025 by rpki-client