Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b68d689a-03b1-350a-b9ae-65c6d1a13f8a.roa
File:                     b68d689a-03b1-350a-b9ae-65c6d1a13f8a.roa (raw, json)
Hash identifier:          8mBmsCfTnUf0udXc2bMxhKvW064AMeA/f/NHwHzVFqw=
Subject key identifier:   F3:28:FB:8A:49:D1:2C:A6:53:F4:F1:06:BA:30:B7:EE:C1:5F:9E:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA51118B942F98940CB4500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b68d689a-03b1-350a-b9ae-65c6d1a13f8a.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        173.9.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:11:18:b9:42:f9:89:40:cb:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=abe18f44-a24e-406a-aa0c-06510a741c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:f7:05:cd:70:23:21:01:74:2b:db:83:83:
                    87:60:76:04:ae:4f:05:7f:69:82:41:29:bb:32:0f:
                    5c:15:cd:09:c4:0e:cc:98:34:27:e4:b3:14:19:76:
                    bb:d2:b9:46:94:aa:b8:d6:f5:1b:b5:d8:f1:1a:a2:
                    41:ee:4f:91:87:a0:17:a6:da:aa:d1:07:1d:19:bf:
                    61:c1:5f:4b:e1:86:19:ae:89:80:ad:50:eb:cc:78:
                    b0:c0:be:70:9e:4b:0d:71:1b:c2:43:1b:a3:e1:54:
                    eb:fe:ad:3f:91:51:a5:57:16:77:71:31:7d:a7:33:
                    b2:d4:e4:88:f3:cc:9b:e0:52:56:45:3e:3f:f5:ff:
                    d4:fa:8f:f3:9d:84:65:ca:c2:95:14:2a:83:2c:4c:
                    60:c6:af:58:ca:51:0f:f7:f5:ab:5d:60:00:74:e8:
                    9e:3b:30:ae:0f:80:bc:6c:8c:9b:6e:34:fe:72:a5:
                    a4:66:06:bc:29:fe:2d:ed:f1:8d:70:90:74:2e:0d:
                    fb:d0:56:03:50:94:7c:97:43:75:bc:51:d2:99:76:
                    43:7e:1f:b7:93:bd:cd:ab:5c:21:ae:5b:08:19:94:
                    55:61:94:a3:c9:b5:01:13:f6:89:90:6e:f2:b9:29:
                    2c:71:ac:29:0e:80:73:d7:30:92:ab:98:03:c5:65:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:28:FB:8A:49:D1:2C:A6:53:F4:F1:06:BA:30:B7:EE:C1:5F:9E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b68d689a-03b1-350a-b9ae-65c6d1a13f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.9.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:13:3e:71:75:15:7e:32:f5:af:2a:1f:6f:43:5f:5d:c6:
         11:02:4a:54:6e:5d:20:b4:a5:a8:b2:f9:ac:7d:c7:6e:c4:79:
         86:22:8b:ea:f5:ac:42:bf:10:aa:0c:a8:73:e7:07:55:90:bf:
         6e:27:44:ad:94:3c:d1:29:60:72:2c:b7:5f:4d:16:fe:67:44:
         84:1f:b1:1c:35:a1:d6:6f:2f:6f:43:85:88:ba:af:58:4c:6b:
         a3:b4:f6:70:52:c6:62:e8:23:b2:44:c1:23:9e:97:f1:39:d4:
         33:73:63:47:35:e3:a8:6f:30:55:80:7d:fc:f5:a5:a5:2d:54:
         6d:27:ae:01:76:39:dd:b1:03:bb:e2:ce:7b:76:22:5f:9f:85:
         db:3a:cb:0b:82:6e:bf:c8:98:90:6c:3b:9b:36:cc:a8:d0:23:
         eb:be:c8:53:9e:8d:8a:bd:74:02:e9:6f:d2:62:2f:ca:15:1f:
         3d:7d:38:92:35:c5:5a:d0:b4:81:ed:f5:92:17:b4:9e:c0:1f:
         7c:87:cb:b9:38:76:cd:06:e1:46:47:ba:ee:3d:29:cb:b8:20:
         7d:05:58:da:59:3a:12:3e:28:40:67:e6:01:e0:83:7f:f4:cf:
         61:1d:36:dd:6a:27:d8:bf:7b:50:36:fa:fd:8c:46:69:f6:db:
         79:48:bd:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pREYuUL5iUDLRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YWJlMThmNDQtYTI0ZS00MDZhLWFhMGMtMDY1MTBhNzQxYzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi633Bc1wIyEBdCvbg4OHYHYErk8Ff2mCQSm7
Mg9cFc0JxA7MmDQn5LMUGXa70rlGlKq41vUbtdjxGqJB7k+Rh6AXptqq0QcdGb9h
wV9L4YYZromArVDrzHiwwL5wnksNcRvCQxuj4VTr/q0/kVGlVxZ3cTF9pzOy1OSI
88yb4FJWRT4/9f/U+o/znYRlysKVFCqDLExgxq9YylEP9/WrXWAAdOieOzCuD4C8
bIybbjT+cqWkZga8Kf4t7fGNcJB0Lg370FYDUJR8l0N1vFHSmXZDfh+3k73Nq1wh
rlsIGZRVYZSjybUBE/aJkG7yuSkscawpDoBz1zCSq5gDxWWXdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMo+4pJ0SymU/TxBrowt+7BX55wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY4ZDY4OWEtMDNiMS0z
NTBhLWI5YWUtNjVjNmQxYTEzZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrQkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtbEz5xdRV+MvWvKh9vQ19dxhECSlRuXSC0paiy+ax9x27EeYYii+r1
rEK/EKoMqHPnB1WQv24nRK2UPNEpYHIst19NFv5nRIQfsRw1odZvL29DhYi6r1hM
a6O09nBSxmLoI7JEwSOel/E51DNzY0c146hvMFWAffz1paUtVG0nrgF2Od2xA7vi
znt2Il+fhds6ywuCbr/ImJBsO5s2zKjQI+u+yFOejYq9dALpb9JiL8oVHz19OJI1
xVrQtIHt9ZIXtJ7AH3yHy7k4ds0G4UZHuu49Kcu4IH0FWNpZOhI+KEBn5gHgg3/0
z2EdNt1qJ9i/e1A2+v2MRmn223lIvW4=
-----END CERTIFICATE-----
Generated at Sat May 10 07:42:24 2025 by rpki-client