Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d64864b-34c9-37fd-91f9-d870077190a7.roa
File:                     6d64864b-34c9-37fd-91f9-d870077190a7.roa (raw, json)
Hash identifier:          29BWn96XaGYmPuabM/tMqYhxp5gAg2j1VSJGV4BOzEk=
Subject key identifier:   54:DA:A1:98:64:EB:D1:90:BA:10:20:9E:E8:3B:EE:D8:7B:30:94:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC33D36E9B328623D6D7A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d64864b-34c9-37fd-91f9-d870077190a7.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        76.133.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:3d:36:e9:b3:28:62:3d:6d:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=889cea5f-05bf-4ee6-b9bc-bcffd2c183a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:2a:31:a3:8d:d5:0f:c5:30:e0:81:d4:6f:
                    7d:51:23:2b:05:37:8e:98:b0:3a:6f:d7:94:97:28:
                    d7:cc:ce:1b:c5:ca:24:02:ab:1b:88:1e:b6:d7:55:
                    46:92:d4:7c:fe:99:85:07:65:cf:24:19:b3:c4:b8:
                    27:af:58:60:cc:6f:93:3a:81:6d:02:4f:2e:6a:92:
                    ec:40:fc:19:97:20:a5:c6:54:5e:e4:a5:1e:da:95:
                    f9:24:87:52:c8:5d:52:38:03:03:7c:d7:cb:c2:8f:
                    39:6e:c7:69:d6:f1:db:b0:a8:2c:2a:5e:78:e3:be:
                    7e:d4:fa:7c:8c:84:32:07:e0:cb:35:f4:93:35:e6:
                    22:5f:6b:2b:5a:4b:8c:05:54:c2:ba:ce:5f:72:d6:
                    af:33:83:53:a7:47:1c:6c:83:d6:86:19:ea:11:5c:
                    b2:20:e3:87:9b:77:6c:c9:74:66:2f:0b:33:c4:eb:
                    b0:d5:66:09:d9:4c:c6:b2:84:c6:03:96:45:1f:9d:
                    b4:19:5d:f5:17:85:48:76:8e:8f:5d:34:e7:77:88:
                    ae:22:a8:39:60:9f:bf:b8:7f:f7:4d:21:7a:45:96:
                    e6:49:c8:45:3a:e2:37:02:1e:df:95:ef:f7:00:2e:
                    eb:bd:b4:47:78:f0:d3:f7:08:92:83:45:4b:a0:75:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DA:A1:98:64:EB:D1:90:BA:10:20:9E:E8:3B:EE:D8:7B:30:94:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d64864b-34c9-37fd-91f9-d870077190a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:f2:90:dc:1a:65:2d:20:3a:f2:81:81:c7:3a:66:f9:a3:
         59:15:81:f9:e4:d7:c1:e1:9b:44:66:c5:6b:0f:27:02:28:2f:
         bb:61:4d:3e:b6:5b:33:67:38:b1:2a:dd:67:ff:51:c4:99:a8:
         48:0f:d2:7b:b6:40:6b:36:ef:04:62:e5:c3:e0:6c:92:6a:6a:
         1b:8e:ea:29:d5:d4:38:85:fc:4a:95:7b:07:f3:4f:1f:43:c6:
         54:c7:e5:c3:c6:f6:23:5c:54:05:df:10:b0:91:22:99:eb:81:
         fd:69:c4:75:5d:22:ef:41:95:65:0b:3a:54:d1:6d:cc:97:d1:
         df:22:63:65:d2:e6:ce:6f:d5:5c:98:14:94:c9:9d:5e:62:84:
         f9:cd:af:d3:2a:69:66:df:65:25:24:8d:20:c1:44:31:39:f6:
         a0:db:59:63:25:70:be:b8:9e:20:15:29:a5:97:45:b5:2f:c0:
         8b:9e:0d:64:c7:5d:b9:2e:de:1a:f8:a5:96:1d:34:f9:a9:dc:
         a9:ea:df:16:db:8d:77:58:46:33:40:4b:2e:c5:f9:03:a1:e1:
         4d:96:93:fb:ea:76:50:7d:d4:52:d1:8b:3b:00:00:24:41:be:
         be:ef:66:f0:95:2c:7e:92:ca:64:a4:47:fc:18:93:9a:eb:36:
         25:eb:9e:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswz026bMoYj1teoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ODg5Y2VhNWYtMDViZi00ZWU2LWI5YmMtYmNmZmQyYzE4M2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9QqMaON1Q/FMOCB1G99USMrBTeOmLA6b9eU
lyjXzM4bxcokAqsbiB6211VGktR8/pmFB2XPJBmzxLgnr1hgzG+TOoFtAk8uapLs
QPwZlyClxlRe5KUe2pX5JIdSyF1SOAMDfNfLwo85bsdp1vHbsKgsKl54475+1Pp8
jIQyB+DLNfSTNeYiX2srWkuMBVTCus5fctavM4NTp0ccbIPWhhnqEVyyIOOHm3ds
yXRmLwszxOuw1WYJ2UzGsoTGA5ZFH520GV31F4VIdo6PXTTnd4iuIqg5YJ+/uH/3
TSF6RZbmSchFOuI3Ah7fle/3AC7rvbRHePDT9wiSg0VLoHXbnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTaoZhk69GQuhAgnug77th7MJTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmQ2NDg2NGItMzRjOS0z
N2ZkLTkxZjktZDg3MDA3NzE5MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIVaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVt8pDcGmUtIDrygYHHOmb5o1kVgfnk18Hhm0RmxWsPJwIoL7thTT62
WzNnOLEq3Wf/UcSZqEgP0nu2QGs27wRi5cPgbJJqahuO6inV1DiF/EqVewfzTx9D
xlTH5cPG9iNcVAXfELCRIpnrgf1pxHVdIu9BlWULOlTRbcyX0d8iY2XS5s5v1VyY
FJTJnV5ihPnNr9MqaWbfZSUkjSDBRDE59qDbWWMlcL64niAVKaWXRbUvwIueDWTH
Xbku3hr4pZYdNPmp3Knq3xbbjXdYRjNASy7F+QOh4U2Wk/vqdlB91FLRizsAACRB
vr7vZvCVLH6SymSkR/wYk5rrNiXrnuI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:31 2025 by rpki-client