Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9690120-5a63-30a4-8deb-035a81f0e049.roa
File:                     f9690120-5a63-30a4-8deb-035a81f0e049.roa (raw, json)
Hash identifier:          yUVRkPkxIslkqovIaoAZnvX1KWzxWXNn94Qvnw8exoo=
Subject key identifier:   1B:86:2D:93:E2:AC:DE:1B:E6:A0:16:32:E2:0D:8F:17:15:3F:15:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBA478B60FF6998532BE30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9690120-5a63-30a4-8deb-035a81f0e049.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22258
IP address blocks:        75.64.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:a4:78:b6:0f:f6:99:85:32:be:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=3cb810fc-c213-4f6c-8438-37d8a9b1102c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:f7:75:73:db:ac:54:01:a2:48:b5:50:2f:
                    d6:f5:f3:ad:66:3d:62:5f:c9:00:01:05:c2:cd:18:
                    3f:9f:9d:e1:aa:6a:cc:0b:c9:d6:5c:5d:bd:48:68:
                    e4:82:ce:6e:3a:b8:61:23:9f:3b:3d:bb:97:25:fe:
                    b4:3a:73:da:08:0b:f3:b3:19:91:71:f1:ac:10:71:
                    dd:ec:24:b1:b9:8d:91:f3:a2:c9:95:00:12:67:84:
                    0d:8a:2d:d6:4c:37:e0:f9:5d:7c:0a:59:f5:60:58:
                    37:7e:b8:1d:4d:0f:24:93:83:cf:5f:ea:50:1d:eb:
                    f0:33:48:af:9b:c6:c6:1a:f8:14:88:ea:cf:29:d1:
                    70:cd:27:76:8d:6b:ff:8b:34:74:71:45:8a:26:cb:
                    26:ad:42:c7:4d:69:d7:dc:35:c4:a4:01:6e:59:f4:
                    16:25:ba:c6:6b:3f:2d:77:c4:b9:aa:fc:2d:e3:a5:
                    a0:46:d8:a4:a9:a2:c4:96:04:67:72:43:f5:93:ec:
                    a3:ea:23:a2:33:91:f5:26:1a:b1:33:40:ff:0e:b9:
                    fa:8f:e9:96:ce:de:64:ea:7b:da:ec:b8:cd:e5:ad:
                    9b:5e:e6:c8:fa:0c:44:ef:42:61:78:82:95:98:f7:
                    c4:69:7d:7c:cd:b2:42:03:08:90:09:e6:2c:8c:03:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:2D:93:E2:AC:DE:1B:E6:A0:16:32:E2:0D:8F:17:15:3F:15:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9690120-5a63-30a4-8deb-035a81f0e049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:6c:e3:97:34:91:16:b4:c3:b1:38:dc:dd:52:cd:df:73:
         55:c6:80:80:86:b5:ac:47:e1:26:67:79:f0:8e:82:bf:3b:85:
         95:3b:fa:ab:47:a1:05:d0:53:06:ae:cc:af:aa:a7:32:9e:ac:
         72:53:60:5e:83:78:86:62:a2:9d:dd:22:5f:4a:e2:98:44:72:
         97:34:06:32:1b:78:34:fb:21:3f:7e:04:59:d0:c8:6d:93:ea:
         83:db:a5:5d:ff:84:14:2e:65:5c:41:8f:8a:e6:33:cc:39:a2:
         f4:02:73:7f:b7:f5:76:7d:fe:09:80:77:e9:39:63:4d:be:96:
         f2:a9:f6:b2:91:53:49:91:80:fc:e4:1b:22:d6:8d:b8:35:2e:
         c5:88:2c:0f:1c:1e:37:8a:3b:fc:8e:b0:fd:4d:12:40:f2:87:
         a7:4d:dc:f1:24:05:56:80:36:eb:18:87:75:68:15:07:9e:68:
         dd:57:4c:15:b1:3a:18:6c:07:d9:b7:0f:42:bb:76:d4:51:d0:
         43:f6:fd:e8:5b:48:1d:08:d6:a1:2b:6a:83:8c:2a:47:46:87:
         16:1a:52:ac:11:da:84:ff:62:27:00:0e:a8:ea:d0:72:fe:cd:
         36:89:f4:68:a0:03:c0:10:97:99:47:00:90:5f:3d:e2:86:c3:
         ed:da:8e:11
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpc+6R4tg/2mYUyvjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
M2NiODEwZmMtYzIxMy00ZjZjLTg0MzgtMzdkOGE5YjExMDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCH3dXPbrFQBoki1UC/W9fOtZj1iX8kAAQXC
zRg/n53hqmrMC8nWXF29SGjkgs5uOrhhI587PbuXJf60OnPaCAvzsxmRcfGsEHHd
7CSxuY2R86LJlQASZ4QNii3WTDfg+V18Cln1YFg3frgdTQ8kk4PPX+pQHevwM0iv
m8bGGvgUiOrPKdFwzSd2jWv/izR0cUWKJssmrULHTWnX3DXEpAFuWfQWJbrGaz8t
d8S5qvwt46WgRtikqaLElgRnckP1k+yj6iOiM5H1JhqxM0D/Drn6j+mWzt5k6nva
7LjN5a2bXubI+gxE70JheIKVmPfEaX18zbJCAwiQCeYsjAPu9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBuGLZPirN4b5qAWMuINjxcVPxXiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk2OTAxMjAtNWE2My0z
MGE0LThkZWItMDM1YTgxZjBlMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBS0AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA5ts45c0kRa0w7E43N1Szd9zVcaAgIa1rEfhJmd58I6CvzuFlTv6q0eh
BdBTBq7Mr6qnMp6sclNgXoN4hmKind0iX0rimERylzQGMht4NPshP34EWdDIbZPq
g9ulXf+EFC5lXEGPiuYzzDmi9AJzf7f1dn3+CYB36TljTb6W8qn2spFTSZGA/OQb
ItaNuDUuxYgsDxweN4o7/I6w/U0SQPKHp03c8SQFVoA26xiHdWgVB55o3VdMFbE6
GGwH2bcPQrt21FHQQ/b96FtIHQjWoStqg4wqR0aHFhpSrBHahP9iJwAOqOrQcv7N
Non0aKADwBCXmUcAkF894obD7dqOEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:07:21 2025 by rpki-client