Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8dee321-951f-3f4d-ab64-782f327ca7e0.roa
File:                     c8dee321-951f-3f4d-ab64-782f327ca7e0.roa (raw, json)
Hash identifier:          6UI+FQyDZJHr57PEA5+Yu1fgcnUz9mqpCILxdj88BNA=
Subject key identifier:   4D:9E:FD:61:E4:2C:77:00:81:BF:F3:8F:FF:B4:FE:26:3C:A0:FC:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC55BA77A1884D1ABA12E72
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8dee321-951f-3f4d-ab64-782f327ca7e0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        76.126.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:5b:a7:7a:18:84:d1:ab:a1:2e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=29e801bb-9978-4ded-9811-a1c77d7f9859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:8c:71:b9:fa:1e:e9:7f:27:79:d9:7f:03:
                    43:f4:7a:13:45:4b:4f:ef:68:c2:0f:b3:8f:09:d1:
                    e2:5a:01:8b:ad:69:be:7b:bb:82:c4:ce:ec:61:eb:
                    53:80:0b:e4:f1:87:09:46:2b:c3:2a:5d:c3:6f:d2:
                    a0:12:1a:28:1d:4c:d2:19:d4:4a:30:68:19:c4:27:
                    a2:5c:70:01:48:37:db:87:92:8f:df:73:cc:1c:e7:
                    44:18:2a:f4:26:55:fb:c6:00:5e:be:5f:7a:b6:00:
                    ed:43:c2:41:41:55:3a:6e:39:37:62:09:c8:43:d7:
                    73:b4:82:2f:46:68:14:fb:87:b5:14:e5:66:32:ba:
                    e6:39:62:90:76:85:96:4b:79:f2:9c:4f:d8:2b:e0:
                    08:ff:16:34:9e:5c:3e:5b:a7:4f:52:2f:77:55:c4:
                    de:d4:65:e1:d5:85:19:88:99:ac:df:78:51:c6:48:
                    0e:e6:14:c5:fe:28:da:21:b0:bd:f0:17:2b:0f:5e:
                    1e:55:50:e2:c3:21:03:d5:1b:00:08:5f:f6:b9:77:
                    3f:b0:3e:45:87:46:91:ea:75:cb:fa:73:0f:9b:8e:
                    f4:75:f2:f7:d8:4d:e5:08:69:3d:e7:25:e5:29:61:
                    d6:c5:cd:64:b9:26:7c:11:04:60:16:e5:7b:82:13:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9E:FD:61:E4:2C:77:00:81:BF:F3:8F:FF:B4:FE:26:3C:A0:FC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8dee321-951f-3f4d-ab64-782f327ca7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:30:e7:6f:20:1f:45:98:8f:21:69:97:34:1a:95:59:1a:de:
         fc:ce:ad:40:3e:81:59:fb:1c:00:2f:e2:1d:aa:f6:5e:03:c0:
         e9:11:72:06:ef:f4:bb:ec:35:8d:64:32:30:e7:7f:a7:ec:74:
         d2:69:c7:c7:10:10:9f:5c:ad:37:79:08:21:71:09:2d:57:5b:
         a7:11:60:72:69:8d:74:41:c4:d1:f2:5e:39:2b:6a:cc:11:7f:
         6b:5d:4a:84:69:59:40:17:f0:16:28:15:86:32:82:e1:67:d9:
         2f:c9:e5:3b:61:34:4f:3f:93:7d:ad:91:7f:27:a1:a2:d1:f1:
         53:f8:e6:ae:5f:71:36:d8:36:3b:69:ee:4a:5b:b7:de:91:01:
         b8:ba:78:25:6e:79:1a:39:ef:28:06:43:96:6f:88:db:cb:3d:
         a9:51:fb:d3:90:3f:f4:5e:d1:13:96:6b:30:f6:59:da:02:92:
         ab:22:c9:47:96:8a:08:7b:a6:60:c7:c1:ed:9c:30:92:63:05:
         ae:44:f5:ee:74:e4:ec:74:f0:55:ef:7f:d8:d3:7f:75:82:a2:
         d6:41:7a:be:0d:d3:89:6b:a0:1a:7e:77:62:2f:dc:be:3a:18:
         4c:c2:6b:d9:bc:18:7a:2c:d9:0c:b4:fa:f4:aa:5c:8b:8d:b2:
         19:15:38:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxVunehiE0auhLnIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MjllODAxYmItOTk3OC00ZGVkLTk4MTEtYTFjNzdkN2Y5ODU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCMcbn6Hul/J3nZfwND9HoTRUtP72jCD7OP
CdHiWgGLrWm+e7uCxM7sYetTgAvk8YcJRivDKl3Db9KgEhooHUzSGdRKMGgZxCei
XHABSDfbh5KP33PMHOdEGCr0JlX7xgBevl96tgDtQ8JBQVU6bjk3YgnIQ9dztIIv
RmgU+4e1FOVmMrrmOWKQdoWWS3nynE/YK+AI/xY0nlw+W6dPUi93VcTe1GXh1YUZ
iJms33hRxkgO5hTF/ijaIbC98BcrD14eVVDiwyED1RsACF/2uXc/sD5Fh0aR6nXL
+nMPm470dfL32E3lCGk95yXlKWHWxc1kuSZ8EQRgFuV7ghOnxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2e/WHkLHcAgb/zj/+0/iY8oPwmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhkZWUzMjEtOTUxZi0z
ZjRkLWFiNjQtNzgyZjMyN2NhN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATH53MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN4w528gH0WYjyFplzQalVka3vzOrUA+gVn7HAAv4h2q9l4DwOkRcgbv
9LvsNY1kMjDnf6fsdNJpx8cQEJ9crTd5CCFxCS1XW6cRYHJpjXRBxNHyXjkraswR
f2tdSoRpWUAX8BYoFYYyguFn2S/J5TthNE8/k32tkX8noaLR8VP45q5fcTbYNjtp
7kpbt96RAbi6eCVueRo57ygGQ5ZviNvLPalR+9OQP/Re0ROWazD2WdoCkqsiyUeW
igh7pmDHwe2cMJJjBa5E9e505Ox08FXvf9jTf3WCotZBer4N04lroBp+d2Iv3L46
GEzCa9m8GHos2Qy0+vSqXIuNshkVON4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:12:31 2025 by rpki-client