Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd7fb593-0b0f-37d8-b250-dc5591bcbf48.roa
File:                     fd7fb593-0b0f-37d8-b250-dc5591bcbf48.roa (raw, json)
Hash identifier:          hmi2S8CQl7Opt6bLK9WJUeuvnq1ZvcvijNZ6nDN6xjg=
Subject key identifier:   3B:28:04:B1:98:03:83:DA:AA:C1:36:E2:23:FC:A3:66:E6:DE:33:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD09F1EDCE00E89BA65F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd7fb593-0b0f-37d8-b250-dc5591bcbf48.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33650
IP address blocks:        96.78.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:09:f1:ed:ce:00:e8:9b:a6:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5b7e3431-ba1a-43d3-b4ed-1319493ca4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:1b:e7:df:6b:e1:c7:0d:e9:21:58:9c:60:
                    41:55:84:60:00:96:06:3f:d0:57:b8:c9:42:54:d8:
                    f0:fb:45:69:d0:11:f7:ec:e0:4e:65:eb:0d:bd:d4:
                    ca:8a:8f:02:17:1f:79:7c:11:43:49:59:ec:28:e5:
                    57:02:db:0f:cb:4b:b7:d7:8f:db:cc:e8:e5:8b:41:
                    d3:b1:51:e0:37:a8:66:61:ad:5a:12:dd:0d:87:91:
                    b4:9f:c1:f2:cb:43:75:32:ca:c2:34:5c:18:08:0d:
                    d1:89:37:ed:56:14:ed:73:a9:45:8f:a7:35:e9:cf:
                    f8:99:3d:23:80:e3:74:f9:06:a2:85:0f:60:a8:03:
                    c1:66:9b:c5:11:6c:7b:cf:0e:4e:52:8f:f7:ca:9a:
                    63:9d:76:90:4d:ab:01:31:11:84:fe:43:ed:c7:30:
                    c0:d0:0a:b8:df:d8:9b:23:76:b5:d2:7f:72:f3:bd:
                    7c:c4:c3:a9:56:56:a8:e8:50:a6:f3:41:e1:62:a6:
                    19:be:1f:b5:52:61:b1:7a:43:5e:47:67:c8:2b:3a:
                    1c:8f:d7:a9:8f:0a:11:a5:e3:41:06:f3:5e:76:5d:
                    a5:42:99:8b:a7:df:db:42:9d:00:f8:44:ad:b9:02:
                    03:76:ae:ee:41:df:3c:16:7c:c4:eb:fd:9a:33:1c:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:04:B1:98:03:83:DA:AA:C1:36:E2:23:FC:A3:66:E6:DE:33:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd7fb593-0b0f-37d8-b250-dc5591bcbf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.78.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:04:e3:1f:07:0a:29:32:71:c4:7d:48:e7:99:1b:ef:c6:59:
         9f:98:a5:6f:64:86:59:30:87:13:48:af:14:b5:a7:12:fc:07:
         f4:0d:cd:8d:a7:f1:be:4d:89:31:ef:c5:a6:d6:5f:cd:6d:cb:
         d6:da:11:fc:b5:28:c1:0a:19:ff:85:cb:36:e8:ce:0b:5a:f6:
         9f:d9:20:45:a3:7c:b3:71:cc:97:71:3a:3a:a4:c9:b8:32:56:
         af:00:d3:c7:3d:71:77:c3:9a:02:bc:38:a7:ae:9d:c9:4d:8e:
         84:40:e6:58:13:29:97:4b:fd:9f:c4:dc:40:0c:0a:85:55:84:
         c5:d4:8b:fa:55:72:d0:1d:74:fd:49:e6:1d:8f:52:72:9f:ff:
         b8:ab:f7:a3:6b:d4:cf:f2:f6:01:6e:e3:d3:1b:f9:21:9c:8f:
         e4:08:be:c2:14:88:38:7c:68:65:04:7c:69:c5:35:40:40:a7:
         1a:87:16:00:8a:7b:ff:18:55:89:25:27:27:0c:6a:23:4c:44:
         ec:89:d9:03:2c:2c:8c:94:d8:3d:ce:03:77:d4:30:0c:c1:fa:
         59:a1:cb:e8:af:e4:1e:61:6b:64:43:fe:d8:d3:97:c0:31:90:
         0f:16:62:a7:13:69:6e:bd:38:2e:d5:c6:b3:b1:05:1a:ff:0e:
         ca:63:36:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/Qnx7c4A6JumXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NWI3ZTM0MzEtYmExYS00M2QzLWI0ZWQtMTMxOTQ5M2NhNGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmQb599r4ccN6SFYnGBBVYRgAJYGP9BXuMlC
VNjw+0Vp0BH37OBOZesNvdTKio8CFx95fBFDSVnsKOVXAtsPy0u314/bzOjli0HT
sVHgN6hmYa1aEt0Nh5G0n8Hyy0N1MsrCNFwYCA3RiTftVhTtc6lFj6c16c/4mT0j
gON0+QaihQ9gqAPBZpvFEWx7zw5OUo/3yppjnXaQTasBMRGE/kPtxzDA0Aq439ib
I3a10n9y8718xMOpVlao6FCm80HhYqYZvh+1UmGxekNeR2fIKzocj9epjwoRpeNB
BvNedl2lQpmLp9/bQp0A+EStuQIDdq7uQd88FnzE6/2aMxzufQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsoBLGYA4PaqsE24iP8o2bm3jNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ3ZmI1OTMtMGIwZi0z
N2Q4LWIyNTAtZGM1NTkxYmNiZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYE4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgE4x8HCikyccR9SOeZG+/GWZ+YpW9khlkwhxNIrxS1pxL8B/QNzY2n
8b5NiTHvxabWX81ty9baEfy1KMEKGf+Fyzbozgta9p/ZIEWjfLNxzJdxOjqkybgy
Vq8A08c9cXfDmgK8OKeunclNjoRA5lgTKZdL/Z/E3EAMCoVVhMXUi/pVctAddP1J
5h2PUnKf/7ir96Nr1M/y9gFu49Mb+SGcj+QIvsIUiDh8aGUEfGnFNUBApxqHFgCK
e/8YVYklJycMaiNMROyJ2QMsLIyU2D3OA3fUMAzB+lmhy+iv5B5ha2RD/tjTl8Ax
kA8WYqcTaW69OC7VxrOxBRr/DspjNts=
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:01:17 2025 by rpki-client