Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74da3c1b-ff6e-3a81-b813-6693a7393ead.roa
File:                     74da3c1b-ff6e-3a81-b813-6693a7393ead.roa (raw, json)
Hash identifier:          BzIxl19E/3F5GIuIKvAr3erSf0mifHcTYRqzkX/m1AY=
Subject key identifier:   27:07:73:F9:50:5F:8C:A4:B0:7A:77:34:69:35:BD:D2:78:8D:5C:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBC896CF1A996B37E78640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74da3c1b-ff6e-3a81-b813-6693a7393ead.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        162.151.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:c8:96:cf:1a:99:6b:37:e7:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=182997f5-91c8-4d8b-9284-09ce4e18ed5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:24:d0:30:a5:da:41:6e:31:0a:78:ea:74:
                    b6:68:3a:03:d0:27:33:86:6d:46:b6:b4:9c:f1:03:
                    c4:44:82:a1:38:24:80:89:bb:5b:05:3d:17:38:7e:
                    fa:ed:1d:de:02:cb:5a:39:5e:2c:4f:94:11:f4:11:
                    2d:67:dd:78:4e:60:67:0f:49:5e:0b:87:26:b1:18:
                    91:2a:fc:8e:24:02:60:82:c5:a2:9b:81:c8:ce:4a:
                    0d:d5:e8:68:8c:96:3e:90:2c:ec:d7:f8:e6:76:f2:
                    ff:b7:39:11:ba:e8:23:b1:5c:f7:69:7f:3b:d7:ab:
                    81:9d:23:d8:e1:5d:1b:a4:a6:29:3e:e1:40:ab:52:
                    9a:3b:02:2b:c9:14:0c:bf:c7:e5:8f:ea:64:e5:65:
                    08:a4:8c:4e:5a:a8:02:3d:b1:70:a7:11:12:61:50:
                    58:9d:b4:ff:18:10:f7:fc:ff:a2:f2:5d:38:1b:3f:
                    28:4a:dc:11:c0:49:67:79:fc:90:d3:a3:31:37:fa:
                    e3:e1:80:37:0a:48:c3:f3:2c:78:2f:43:3b:9c:aa:
                    ce:f1:d8:f9:1b:06:5d:5c:51:64:68:16:a2:a0:5f:
                    13:31:90:75:ab:c6:ce:8b:35:19:e5:54:cb:c8:a4:
                    4b:b2:58:4f:e0:81:dd:0d:4b:81:bb:b3:c4:87:5e:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:73:F9:50:5F:8C:A4:B0:7A:77:34:69:35:BD:D2:78:8D:5C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74da3c1b-ff6e-3a81-b813-6693a7393ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:05:92:1c:d0:01:64:80:c9:92:14:70:6d:32:ff:ef:96:
         a3:19:38:a7:a9:26:0e:cb:73:e8:e2:1d:23:7d:4c:4f:64:61:
         48:6b:b5:ca:b0:63:ee:b2:36:13:ba:bc:ed:d0:de:a2:9e:64:
         58:f3:27:29:f2:11:d0:d6:90:66:84:8f:cc:24:53:a5:d3:e5:
         6d:df:67:81:9d:77:df:f8:2e:6c:17:b9:28:57:0a:dc:6c:1f:
         91:96:cf:61:e5:59:aa:46:f4:e4:07:9e:79:a7:77:44:00:c8:
         5c:0c:d5:3c:62:be:d5:69:74:9d:35:eb:36:63:7b:3b:d5:45:
         cc:93:86:52:a9:1e:c5:72:95:8c:fa:53:5c:f4:a0:00:92:41:
         f3:8a:be:b3:9f:76:47:6a:a8:a3:c6:c0:a3:03:e4:31:56:24:
         2b:7d:62:e5:5d:1a:c4:30:a1:f4:02:61:fe:14:95:62:f1:af:
         49:f3:a7:07:df:0c:d2:d3:37:3f:66:10:42:06:55:c2:ae:8d:
         2e:bd:e6:db:b4:e2:2c:92:93:69:05:af:6a:70:17:d3:06:83:
         9e:76:a2:56:4e:ec:b5:7c:3a:9a:e9:b2:e8:dd:89:14:33:1c:
         92:cf:64:a7:2f:af:c7:de:42:3c:09:ed:e4:f4:61:31:fd:e2:
         78:b0:be:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+8iWzxqZazfnhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MTgyOTk3ZjUtOTFjOC00ZDhiLTkyODQtMDljZTRlMThlZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEgk0DCl2kFuMQp46nS2aDoD0Cczhm1GtrSc
8QPERIKhOCSAibtbBT0XOH767R3eAstaOV4sT5QR9BEtZ914TmBnD0leC4cmsRiR
KvyOJAJggsWim4HIzkoN1ehojJY+kCzs1/jmdvL/tzkRuugjsVz3aX8716uBnSPY
4V0bpKYpPuFAq1KaOwIryRQMv8flj+pk5WUIpIxOWqgCPbFwpxESYVBYnbT/GBD3
/P+i8l04Gz8oStwRwElnefyQ06MxN/rj4YA3CkjD8yx4L0M7nKrO8dj5GwZdXFFk
aBaioF8TMZB1q8bOizUZ5VTLyKRLslhP4IHdDUuBu7PEh142QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcHc/lQX4yksHp3NGk1vdJ4jVxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzRkYTNjMWItZmY2ZS0z
YTgxLWI4MTMtNjY5M2E3MzkzZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAopcrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu7BZIc0AFkgMmSFHBtMv/vlqMZOKepJg7Lc+jiHSN9TE9kYUhrtcqw
Y+6yNhO6vO3Q3qKeZFjzJynyEdDWkGaEj8wkU6XT5W3fZ4Gdd9/4LmwXuShXCtxs
H5GWz2HlWapG9OQHnnmnd0QAyFwM1TxivtVpdJ016zZjezvVRcyThlKpHsVylYz6
U1z0oACSQfOKvrOfdkdqqKPGwKMD5DFWJCt9YuVdGsQwofQCYf4UlWLxr0nzpwff
DNLTNz9mEEIGVcKujS695tu04iySk2kFr2pwF9MGg552olZO7LV8OprpsujdiRQz
HJLPZKcvr8feQjwJ7eT0YTH94niwvto=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:34:39 2025 by rpki-client