Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b6010c-325a-38ae-a60c-0507e43fe8f1.roa
File:                     b4b6010c-325a-38ae-a60c-0507e43fe8f1.roa (raw, json)
Hash identifier:          TLYFtm7rUuHG4rsMbzYvWggYpNYOTmNCVjZyfYR4nWA=
Subject key identifier:   C2:9B:6B:F2:6E:06:17:5A:BF:68:B1:0F:DD:23:A8:14:2E:80:3D:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB94F94AA75D95A4C3F5AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b6010c-325a-38ae-a60c-0507e43fe8f1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        69.241.15.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:4f:94:aa:75:d9:5a:4c:3f:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=43b5c504-b86c-49a1-9782-a20daadfb21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:5c:f8:31:87:cc:cc:e2:11:fb:cf:d7:47:
                    f3:53:f8:7c:f5:ea:bd:29:d0:dd:3a:0f:34:54:e4:
                    6d:84:c8:90:9a:ba:8f:bf:21:38:c2:72:64:af:fd:
                    20:05:e5:ed:7b:7d:44:e7:03:74:17:76:1c:4c:0e:
                    24:8f:7c:a8:22:a5:b2:3d:24:6f:6c:2e:80:60:53:
                    37:d5:79:d2:a5:6a:f5:04:9b:44:f5:e8:5b:e1:f3:
                    88:79:38:00:90:c1:f3:1b:e4:cb:d9:57:de:33:77:
                    7b:b9:15:73:17:32:75:0a:e9:bf:e6:f5:e9:f7:e6:
                    f3:7f:e4:b2:d1:31:eb:ca:e7:91:99:88:f0:f1:03:
                    23:9b:3d:11:12:38:26:0a:cd:05:8f:23:d4:0d:61:
                    a0:25:a5:5f:ac:ed:62:6a:77:0d:4a:1b:df:39:46:
                    88:1e:00:10:73:fb:e7:ea:f7:fb:6f:4e:2b:6f:a6:
                    85:13:64:de:77:42:20:09:59:a7:01:73:fc:58:7a:
                    e8:c3:e5:30:a2:0c:e6:e7:a5:fc:c8:0e:db:6e:ba:
                    84:19:71:57:1e:ac:3c:2d:8b:40:b1:c6:ed:24:b9:
                    67:9c:1c:78:3a:38:4f:f6:d1:5e:e4:40:5a:66:50:
                    24:64:17:bf:e4:1f:d9:08:7d:ed:6e:9a:7e:9f:b5:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:6B:F2:6E:06:17:5A:BF:68:B1:0F:DD:23:A8:14:2E:80:3D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b6010c-325a-38ae-a60c-0507e43fe8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.15.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:60:d7:37:db:4d:a9:59:21:d8:48:34:c9:7c:3f:f3:de:63:
         c8:6f:97:32:c7:c4:e7:f6:0e:00:56:a9:20:86:71:6a:37:ff:
         28:25:72:3e:05:bc:94:68:47:55:59:6d:b6:a7:9d:a7:36:fc:
         fd:30:f4:bf:f7:4f:dc:5a:b7:7e:a7:4d:a4:7a:16:87:57:46:
         79:0f:eb:e0:c7:22:60:2b:b0:5d:a1:c0:e7:16:0c:21:41:ba:
         89:67:d5:bc:e4:e5:f5:a0:17:99:7c:52:3f:f4:2f:66:09:12:
         c8:e5:90:47:dd:4e:2b:b1:1d:47:f4:55:fd:32:d3:d1:e3:4a:
         90:07:7b:9e:bb:71:a4:66:33:ae:de:fa:a5:7d:cd:0a:8a:8a:
         0e:30:29:98:6b:f9:11:ef:d0:c3:28:9c:f8:7c:5a:da:1a:fd:
         fe:cf:ee:45:aa:6c:b9:65:df:9a:c7:6e:80:a1:7e:a4:e5:5a:
         0a:7e:3c:16:48:6a:c9:13:79:f4:78:c7:ff:e7:21:87:ab:0b:
         37:d4:65:fc:f1:9b:37:ef:2b:34:30:40:c5:62:8c:40:e3:8f:
         76:81:bc:4b:29:c2:a3:a6:75:cd:6f:2a:84:74:6d:7e:0e:d2:
         4d:fe:85:f3:ee:11:9b:dc:20:8b:0b:c9:23:bc:ce:83:d9:ed:
         bf:8f:bb:78
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs9uU+UqnXZWkw/WsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NDNiNWM1MDQtYjg2Yy00OWExLTk3ODItYTIwZGFhZGZiMjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjZc+DGHzMziEfvP10fzU/h89eq9KdDdOg80
VORthMiQmrqPvyE4wnJkr/0gBeXte31E5wN0F3YcTA4kj3yoIqWyPSRvbC6AYFM3
1XnSpWr1BJtE9ehb4fOIeTgAkMHzG+TL2VfeM3d7uRVzFzJ1Cum/5vXp9+bzf+Sy
0THryueRmYjw8QMjmz0REjgmCs0FjyPUDWGgJaVfrO1iancNShvfOUaIHgAQc/vn
6vf7b04rb6aFE2Ted0IgCVmnAXP8WHrow+Uwogzm56X8yA7bbrqEGXFXHqw8LYtA
scbtJLlnnBx4OjhP9tFe5EBaZlAkZBe/5B/ZCH3tbpp+n7XTcQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMKba/JuBhdav2ixD90jqBQugD2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRiNjAxMGMtMzI1YS0z
OGFlLWE2MGMtMDUwN2U0M2ZlOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHRfEPgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDOYNc3202pWSHYSDTJfD/z3mPIb5cyx8Tn9g4AVqkghnFqN/8oJXI+
BbyUaEdVWW22p52nNvz9MPS/90/cWrd+p02kehaHV0Z5D+vgxyJgK7BdocDnFgwh
QbqJZ9W85OX1oBeZfFI/9C9mCRLI5ZBH3U4rsR1H9FX9MtPR40qQB3ueu3GkZjOu
3vqlfc0KiooOMCmYa/kR79DDKJz4fFraGv3+z+5Fqmy5Zd+ax26AoX6k5VoKfjwW
SGrJE3n0eMf/5yGHqws31GX88Zs37ys0MEDFYoxA4492gbxLKcKjpnXNbyqEdG1+
DtJN/oXz7hGb3CCLC8kjvM6D2e2/j7t4
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:54 2025 by rpki-client