Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d61ea9-8037-371d-8d14-2861bcddbbef.roa
File:                     f9d61ea9-8037-371d-8d14-2861bcddbbef.roa (raw, json)
Hash identifier:          UiXOF6ZSnMqE6gGl3ll1SOdzEJaO4DRctLvEWWigR4g=
Subject key identifier:   0A:E4:4D:94:DC:1C:54:74:3D:E9:BF:C2:C5:68:24:8B:77:3C:28:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031797C8ED89113720CA670
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d61ea9-8037-371d-8d14-2861bcddbbef.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.97.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:79:7c:8e:d8:91:13:72:0c:a6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f97d483e-a02e-47f0-ad00-44f1ff5b75f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:93:70:d3:df:4c:11:df:ef:97:7d:dd:bc:
                    34:de:7b:85:b6:7e:ae:26:0f:b7:ce:b1:ac:4b:cb:
                    8c:23:f2:2b:86:78:a9:37:86:ff:f0:63:fc:a1:f3:
                    04:41:44:39:3b:a1:66:0d:dd:e2:61:80:d9:2d:83:
                    4b:b7:c5:d1:fc:47:71:db:26:ae:27:9e:81:5e:5e:
                    7f:f7:81:70:29:eb:ee:76:c0:ce:68:a8:b9:69:b8:
                    4c:58:79:6a:84:3a:f7:81:52:9a:27:41:b5:df:b5:
                    34:af:51:13:3d:1f:44:04:f3:6f:02:04:83:0e:8a:
                    cd:d6:3d:27:85:57:f0:0f:f5:81:97:25:6b:3b:00:
                    43:1b:7b:31:f0:c3:ee:3b:32:09:df:b6:4a:51:b1:
                    ed:f9:90:4e:ed:80:e6:15:fd:0c:37:30:7b:71:7d:
                    a8:58:81:00:67:f8:21:3c:f8:55:38:59:34:26:7b:
                    f8:c4:d3:74:d9:40:44:c1:43:2a:40:e2:2d:df:ce:
                    08:49:11:4c:f6:d2:fc:6f:d7:52:a0:b7:06:f0:ab:
                    a7:d1:4c:1d:a3:4f:f6:dd:81:0e:8c:ec:de:b8:83:
                    58:4c:87:db:69:e3:50:4b:a9:d5:cf:ee:c6:79:43:
                    d5:e0:1c:64:df:1d:b3:69:cb:24:e5:10:ff:f6:7e:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:4D:94:DC:1C:54:74:3D:E9:BF:C2:C5:68:24:8B:77:3C:28:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d61ea9-8037-371d-8d14-2861bcddbbef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:91:b0:aa:3d:13:02:3e:34:01:3c:03:59:36:c2:1c:5b:
         aa:82:14:92:ef:53:81:ac:59:f8:e3:63:11:7b:97:3d:80:83:
         03:7b:13:3b:17:de:8b:60:ab:6b:2f:77:70:e7:6c:b7:5c:c6:
         e2:45:96:63:cc:dc:9b:38:37:12:ae:b5:40:a1:c0:73:0a:b7:
         c3:f3:9e:a7:d9:f0:e8:6c:25:2d:14:5f:d5:9d:c7:9f:77:e2:
         57:0f:97:4a:ff:c8:39:a6:6b:0a:92:b5:8f:1e:fb:7e:94:4e:
         68:0d:e4:98:e6:e2:09:f1:41:49:32:d3:e4:8b:0b:82:0f:c8:
         70:91:6c:80:70:99:0b:e0:6f:00:09:28:0f:d3:a6:51:40:06:
         92:cb:75:1b:22:e6:ae:0e:49:5d:3b:df:0a:ab:07:75:e4:3a:
         12:09:30:39:2d:34:0c:9f:46:96:d9:a7:e6:20:22:38:9d:7b:
         02:bd:9f:a3:03:46:b8:61:d7:90:f0:4c:e1:ff:19:1c:11:4c:
         73:06:4e:4a:e7:da:41:67:ff:91:15:cd:52:8c:cc:ea:08:59:
         a5:d6:02:a1:dd:45:26:49:16:46:5b:b4:b9:4d:9a:b2:d0:7b:
         df:21:b0:29:fc:4d:ee:5e:1d:f9:1c:c2:19:0a:9d:a9:8f:bb:
         6e:cf:22:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMXl8jtiRE3IMpnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
Zjk3ZDQ4M2UtYTAyZS00N2YwLWFkMDAtNDRmMWZmNWI3NWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhneTcNPfTBHf75d93bw03nuFtn6uJg+3zrGs
S8uMI/IrhnipN4b/8GP8ofMEQUQ5O6FmDd3iYYDZLYNLt8XR/Edx2yauJ56BXl5/
94FwKevudsDOaKi5abhMWHlqhDr3gVKaJ0G137U0r1ETPR9EBPNvAgSDDorN1j0n
hVfwD/WBlyVrOwBDG3sx8MPuOzIJ37ZKUbHt+ZBO7YDmFf0MNzB7cX2oWIEAZ/gh
PPhVOFk0Jnv4xNN02UBEwUMqQOIt384ISRFM9tL8b9dSoLcG8Kun0Uwdo0/23YEO
jOzeuINYTIfbaeNQS6nVz+7GeUPV4Bxk3x2zacsk5RD/9n4QdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArkTZTcHFR0Pem/wsVoJIt3PCgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjlkNjFlYTktODAzNy0z
NzFkLThkMTQtMjg2MWJjZGRiYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaqkbCqPRMCPjQBPANZNsIcW6qCFJLvU4GsWfjjYxF7lz2AgwN7EzsX
3otgq2svd3DnbLdcxuJFlmPM3Js4NxKutUChwHMKt8PznqfZ8OhsJS0UX9Wdx593
4lcPl0r/yDmmawqStY8e+36UTmgN5Jjm4gnxQUky0+SLC4IPyHCRbIBwmQvgbwAJ
KA/TplFABpLLdRsi5q4OSV073wqrB3XkOhIJMDktNAyfRpbZp+YgIjidewK9n6MD
Rrhh15DwTOH/GRwRTHMGTkrn2kFn/5EVzVKMzOoIWaXWAqHdRSZJFkZbtLlNmrLQ
e98hsCn8Te5eHfkcwhkKnamPu27PIqY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:24:49 2025 by rpki-client