Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7726ee3c-6484-3881-ae41-e87568345550.roa
File:                     7726ee3c-6484-3881-ae41-e87568345550.roa (raw, json)
Hash identifier:          GV6sHORKG7eLpod2/mkto+lSmXd6tl63cYgvBoxnCXQ=
Subject key identifier:   13:C8:9D:40:F5:FD:81:C5:55:86:1D:4C:0B:B0:99:3F:66:F5:98:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031EEA3C3C6449362DC5000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7726ee3c-6484-3881-ae41-e87568345550.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.20.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:ee:a3:c3:c6:44:93:62:dc:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=e93419cb-4d77-4902-85fe-5b8fb2beece7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:74:e0:e9:c0:a6:90:01:2c:82:46:70:24:
                    f6:a2:60:19:0e:24:a5:28:61:aa:a8:85:ec:9b:a9:
                    40:a1:fe:95:0a:f9:90:a0:ce:8c:3e:c6:c7:b2:d2:
                    12:cd:1b:35:32:28:b5:0d:01:13:8d:77:e6:5e:c6:
                    08:29:69:a1:c5:23:07:4a:1d:10:98:0a:13:7c:0c:
                    dc:78:bf:4b:83:a7:60:54:c1:e1:ae:5c:ca:bf:05:
                    18:4f:d2:33:ca:ee:6b:d5:a5:a2:0d:ff:53:ed:85:
                    98:70:d7:63:01:b4:ba:85:2d:85:f5:c9:22:67:2f:
                    67:0f:ca:39:27:a7:51:97:b0:84:d9:b8:51:6f:c1:
                    bd:13:7c:5d:94:ff:26:91:8f:5c:26:90:2b:f3:9d:
                    86:fa:b4:d2:1d:28:80:53:8c:db:e7:f9:5e:dc:ad:
                    b6:46:53:11:5e:0b:a2:0a:d7:87:f6:07:55:7b:93:
                    d2:c6:09:87:c1:0b:7d:b8:8f:1c:13:1a:dc:e0:27:
                    53:b7:85:21:df:ee:37:83:89:c9:35:50:e3:71:12:
                    e7:64:f5:9c:e9:d7:8e:37:9c:6d:a8:09:07:4d:c6:
                    be:b7:1e:98:c8:22:95:1b:4c:db:de:bf:ed:91:fa:
                    63:a8:ce:c4:81:bf:e5:37:bf:e0:14:55:90:ec:86:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C8:9D:40:F5:FD:81:C5:55:86:1D:4C:0B:B0:99:3F:66:F5:98:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7726ee3c-6484-3881-ae41-e87568345550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.20.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:19:08:2f:e2:32:35:89:06:34:a1:99:7a:33:97:61:7e:f8:
         2e:b5:33:ec:c6:01:e6:d9:8b:e7:fb:00:28:d7:e0:4d:2c:43:
         6b:52:e4:22:ed:e6:1d:9b:c7:b0:37:ec:71:85:c1:5c:dc:fa:
         e0:6d:15:87:11:d8:2e:cd:2e:29:71:ef:7e:16:51:df:6a:6b:
         ce:75:05:2d:0f:19:53:87:d3:b6:d4:fd:8a:8d:85:dd:5b:64:
         a3:a1:75:a6:ca:bb:dc:0d:ef:96:5e:91:8e:6e:e3:d1:02:84:
         59:45:0b:b3:79:94:3d:8a:18:16:ee:13:60:a2:d8:81:64:3b:
         78:b2:08:ab:7b:03:bb:61:2e:79:f4:73:8c:01:ed:a2:e3:51:
         7c:b0:4c:ac:0c:12:8c:9b:9b:eb:37:aa:6b:0f:11:0b:47:95:
         86:73:24:5c:5b:84:fc:45:ae:b5:04:a9:f3:08:91:0b:ed:eb:
         44:01:b5:7f:db:21:19:93:72:ce:ce:13:58:bc:9a:0d:00:e8:
         59:9c:05:b8:2b:85:a7:ec:a5:41:51:fa:d9:f7:6d:6e:42:a3:
         5f:9f:55:48:f3:29:21:6e:7b:ab:cd:6d:94:8e:bb:99:5f:09:
         d5:6f:46:d7:eb:72:4c:3e:8c:8a:68:c0:00:85:0c:d1:ee:db:
         f4:74:87:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMe6jw8ZEk2LcUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
ZTkzNDE5Y2ItNGQ3Ny00OTAyLTg1ZmUtNWI4ZmIyYmVlY2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDJ04OnAppABLIJGcCT2omAZDiSlKGGqqIXs
m6lAof6VCvmQoM6MPsbHstISzRs1Mii1DQETjXfmXsYIKWmhxSMHSh0QmAoTfAzc
eL9Lg6dgVMHhrlzKvwUYT9Izyu5r1aWiDf9T7YWYcNdjAbS6hS2F9ckiZy9nD8o5
J6dRl7CE2bhRb8G9E3xdlP8mkY9cJpAr852G+rTSHSiAU4zb5/le3K22RlMRXgui
CteH9gdVe5PSxgmHwQt9uI8cExrc4CdTt4Uh3+43g4nJNVDjcRLnZPWc6deON5xt
qAkHTca+tx6YyCKVG0zb3r/tkfpjqM7Egb/lN7/gFFWQ7IadWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPInUD1/YHFVYYdTAuwmT9m9ZjIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzcyNmVlM2MtNjQ4NC0z
ODgxLWFlNDEtZTg3NTY4MzQ1NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUZCC/iMjWJBjShmXozl2F++C61M+zGAebZi+f7ACjX4E0sQ2tS5CLt
5h2bx7A37HGFwVzc+uBtFYcR2C7NLilx734WUd9qa851BS0PGVOH07bU/YqNhd1b
ZKOhdabKu9wN75ZekY5u49EChFlFC7N5lD2KGBbuE2Ci2IFkO3iyCKt7A7thLnn0
c4wB7aLjUXywTKwMEoybm+s3qmsPEQtHlYZzJFxbhPxFrrUEqfMIkQvt60QBtX/b
IRmTcs7OE1i8mg0A6FmcBbgrhafspUFR+tn3bW5Co1+fVUjzKSFue6vNbZSOu5lf
CdVvRtfrckw+jIpowACFDNHu2/R0h0Y=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:05:21 2025 by rpki-client