Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa
File:                     6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa (raw, json)
Hash identifier:          qtolZWbO9E8gWfbXQ75rxa9iUIwLpC8dDnIlSCYo2qw=
Subject key identifier:   80:D1:5A:96:59:D1:95:0C:68:02:8E:F1:43:34:D7:20:95:C3:74:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4079CED8B17687F33FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        76.111.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:07:9c:ed:8b:17:68:7f:33:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8b7dad46-6f4f-432c-ac91-e7f12583b8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:c2:c4:79:b4:42:e4:72:3c:ab:9e:a1:23:
                    46:72:b4:ac:f9:c5:13:8c:34:b4:e2:99:f4:d5:b9:
                    74:89:24:26:60:d2:fd:87:41:1a:80:b4:27:ad:d8:
                    2f:9d:f6:6a:84:b9:a5:b5:2f:40:7f:47:03:b2:ae:
                    ce:48:7c:7d:cc:43:bf:ba:ed:3f:ea:eb:47:c8:02:
                    2e:18:d8:eb:bd:52:a6:d8:ec:1a:45:5d:ad:b3:a7:
                    9d:55:30:70:6a:c7:72:44:df:02:18:49:96:88:c1:
                    d6:82:da:32:c8:24:5e:8c:5e:91:96:6d:3e:d1:36:
                    f4:47:f7:79:c2:95:89:17:96:32:ef:b9:57:6b:5f:
                    3b:e8:16:d0:8b:88:d6:fe:2a:05:27:02:75:c4:44:
                    6a:13:5a:c7:57:07:76:d6:25:d8:fd:a2:ff:94:7b:
                    a2:e7:96:97:85:d0:f1:99:73:90:bb:91:ad:71:19:
                    80:ff:63:4b:00:6d:90:00:0b:06:ca:53:29:16:17:
                    50:96:30:ea:80:68:33:9a:5f:4f:ab:e3:8c:a1:27:
                    95:79:2d:15:53:3e:4a:6e:3f:c5:9a:61:40:66:a7:
                    5a:55:e0:ba:16:b7:ee:14:0d:9f:b2:ec:14:95:c4:
                    cc:d6:52:98:73:b4:1b:cf:5a:bc:00:cc:b6:a9:6d:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:5A:96:59:D1:95:0C:68:02:8E:F1:43:34:D7:20:95:C3:74:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.111.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:6e:a2:e6:20:92:e3:b5:39:67:f0:c1:6b:84:a4:41:32:
         1c:3f:b4:1b:1d:6d:b4:db:8a:f0:e1:9a:00:33:c5:33:0d:d9:
         6a:25:f2:fc:d6:f4:3a:a9:be:bd:d7:a6:3a:9e:2d:ba:fe:8c:
         01:79:3f:a0:27:68:bf:e7:b2:19:4b:80:8c:c9:2a:62:19:0e:
         27:0e:61:2b:7b:e9:b1:71:89:38:ed:47:66:9c:a0:c0:75:39:
         d1:6f:00:b4:18:a0:6c:cb:21:9b:50:7f:85:5e:62:a9:42:4c:
         da:3f:b9:52:3d:e0:19:be:5f:40:83:7f:19:1c:d9:68:23:44:
         68:bc:89:81:ed:d9:60:ac:cb:a8:1d:d2:6a:52:ca:fc:fa:97:
         c7:ba:75:cf:6f:fe:d0:b5:91:3a:d5:f3:71:2e:29:40:de:1c:
         4f:df:c0:95:92:9f:7b:be:f6:be:c6:4c:64:90:70:47:4c:d5:
         06:23:d4:28:eb:d3:96:2b:05:77:8f:79:37:35:40:91:ba:55:
         99:84:56:55:27:84:63:dc:5c:f0:a1:a1:35:eb:4d:2a:2f:79:
         86:c9:a1:d0:74:66:9e:86:1a:d1:96:ff:d8:fe:4a:04:d4:5a:
         e1:86:f5:f3:eb:18:6a:ed:23:d7:3f:27:27:59:e7:83:dc:68:
         f6:6b:90:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxAec7YsXaH8z+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
OGI3ZGFkNDYtNmY0Zi00MzJjLWFjOTEtZTdmMTI1ODNiOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX/CxHm0QuRyPKueoSNGcrSs+cUTjDS04pn0
1bl0iSQmYNL9h0EagLQnrdgvnfZqhLmltS9Af0cDsq7OSHx9zEO/uu0/6utHyAIu
GNjrvVKm2OwaRV2ts6edVTBwasdyRN8CGEmWiMHWgtoyyCRejF6Rlm0+0Tb0R/d5
wpWJF5Yy77lXa1876BbQi4jW/ioFJwJ1xERqE1rHVwd21iXY/aL/lHui55aXhdDx
mXOQu5GtcRmA/2NLAG2QAAsGylMpFhdQljDqgGgzml9Pq+OMoSeVeS0VUz5Kbj/F
mmFAZqdaVeC6FrfuFA2fsuwUlcTM1lKYc7Qbz1q8AMy2qW3oqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDRWpZZ0ZUMaAKO8UM01yCVw3SxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmY4NDE5MDAtNDVjMi0z
ZTZlLWEzYzQtNjQzNjBhMjRiM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTG+kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyybqLmIJLjtTln8MFrhKRBMhw/tBsdbbTbivDhmgAzxTMN2Wol8vzW
9Dqpvr3XpjqeLbr+jAF5P6AnaL/nshlLgIzJKmIZDicOYSt76bFxiTjtR2acoMB1
OdFvALQYoGzLIZtQf4VeYqlCTNo/uVI94Bm+X0CDfxkc2WgjRGi8iYHt2WCsy6gd
0mpSyvz6l8e6dc9v/tC1kTrV83EuKUDeHE/fwJWSn3u+9r7GTGSQcEdM1QYj1Cjr
05YrBXePeTc1QJG6VZmEVlUnhGPcXPChoTXrTSoveYbJodB0Zp6GGtGW/9j+SgTU
WuGG9fPrGGrtI9c/JydZ54PcaPZrkAk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:22:04 2025 by rpki-client