Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff50b42e-65e0-32c0-b632-d643d23323db.roa
File:                     ff50b42e-65e0-32c0-b632-d643d23323db.roa (raw, json)
Hash identifier:          oWCOXs0ac6B7LMpsZUkMB+zQcTa+ubm1YtSdfY4NynM=
Subject key identifier:   DE:81:B7:23:F5:B8:FB:41:FE:6E:40:72:A9:A8:31:35:04:A0:A7:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3C92F347C2C816408E350
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff50b42e-65e0-32c0-b632-d643d23323db.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        68.80.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:c9:2f:34:7c:2c:81:64:08:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=40162f1f-c871-4d52-8363-56868285c264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:e2:e9:63:24:03:60:40:5f:93:02:a4:cd:
                    1c:28:b2:ba:da:08:8f:37:8a:a4:d1:21:1a:68:8a:
                    05:52:84:70:8e:cb:c6:24:38:83:83:a3:32:81:3d:
                    a0:58:3a:e3:00:10:95:67:23:bf:df:cb:f4:ce:45:
                    ef:e7:03:0b:34:5d:b7:cf:20:1f:a8:a6:20:64:0a:
                    28:20:0e:95:91:43:85:98:1f:1e:08:c3:4b:8a:6a:
                    1c:fa:1c:40:32:8a:27:0e:58:9c:6b:af:ba:89:6c:
                    64:1d:ec:ca:b8:81:90:cf:6d:82:44:91:4a:d5:3d:
                    e3:f6:79:a5:8b:6a:63:57:b7:05:c0:fc:ae:4c:cd:
                    09:c4:06:e4:96:ad:5b:e8:23:df:68:8a:13:cb:6e:
                    2b:b5:7f:bf:71:47:f4:90:5b:73:5c:f0:74:bf:45:
                    3f:ae:44:77:cd:c6:db:48:7b:c9:30:13:a3:81:20:
                    c1:ec:85:84:fd:18:e2:82:f0:22:a6:6d:63:ee:33:
                    c6:34:5c:b8:9d:89:3c:b5:f1:f7:5a:b6:6c:26:86:
                    eb:27:27:69:f2:73:42:0d:19:a7:21:df:e8:18:68:
                    05:2c:0b:db:3c:b1:7d:b2:cd:f5:9c:3b:39:d1:71:
                    48:5f:33:1f:cd:50:fc:5e:7c:85:97:6e:ac:ec:75:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:B7:23:F5:B8:FB:41:FE:6E:40:72:A9:A8:31:35:04:A0:A7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff50b42e-65e0-32c0-b632-d643d23323db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.80.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:b6:16:19:38:8f:d5:a7:a2:00:e3:ef:eb:89:11:fa:45:
         35:9a:0a:3a:93:c9:a9:05:c8:d0:19:03:c6:b2:54:76:f5:a7:
         3e:8c:f3:12:90:ae:58:61:0a:0f:72:63:b5:0a:b3:35:e6:e6:
         47:50:8f:fd:64:73:f8:97:fa:4a:da:81:fc:88:d3:f0:8a:16:
         fd:4c:57:2f:05:e3:b0:ff:6d:cf:e7:e1:8d:ae:ae:e3:47:87:
         4c:28:7a:50:38:97:a6:66:8c:91:bf:41:05:fb:6b:98:1f:6e:
         25:7d:7d:dd:77:22:59:a5:b2:46:7b:65:46:ff:72:19:02:7b:
         7d:2b:01:a7:93:ed:d5:b5:f8:8b:23:cd:7f:ce:6b:ad:5c:f6:
         01:e0:7e:df:ff:ae:67:fb:47:45:27:6e:0f:89:a2:2d:ef:b7:
         ea:05:20:47:2d:7a:32:8c:4f:45:53:83:5d:2b:fe:41:1e:4f:
         eb:74:f9:f3:1b:7e:a7:36:5d:6f:7f:5f:d6:cf:a6:15:a8:50:
         aa:b9:8a:4a:53:3c:d4:11:43:0f:5f:ed:84:71:b1:cb:e6:f3:
         9c:04:54:fd:49:1d:2b:7e:3f:38:02:f7:e7:33:7a:72:ca:4c:
         a4:9d:3d:5b:dc:1e:31:3f:24:8d:e2:e4:aa:ab:92:cc:d7:bd:
         a4:fa:a5:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw8kvNHwsgWQI41AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
NDAxNjJmMWYtYzg3MS00ZDUyLTgzNjMtNTY4NjgyODVjMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM/i6WMkA2BAX5MCpM0cKLK62giPN4qk0SEa
aIoFUoRwjsvGJDiDg6MygT2gWDrjABCVZyO/38v0zkXv5wMLNF23zyAfqKYgZAoo
IA6VkUOFmB8eCMNLimoc+hxAMoonDlica6+6iWxkHezKuIGQz22CRJFK1T3j9nml
i2pjV7cFwPyuTM0JxAbklq1b6CPfaIoTy24rtX+/cUf0kFtzXPB0v0U/rkR3zcbb
SHvJMBOjgSDB7IWE/RjigvAipm1j7jPGNFy4nYk8tfH3WrZsJobrJydp8nNCDRmn
Id/oGGgFLAvbPLF9ss31nDs50XFIXzMfzVD8XnyFl26s7HWaVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6BtyP1uPtB/m5AcqmoMTUEoKesMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmY1MGI0MmUtNjVlMC0z
MmMwLWI2MzItZDY0M2QyMzMyM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFCWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB79thYZOI/Vp6IA4+/riRH6RTWaCjqTyakFyNAZA8ayVHb1pz6M8xKQ
rlhhCg9yY7UKszXm5kdQj/1kc/iX+kragfyI0/CKFv1MVy8F47D/bc/n4Y2uruNH
h0woelA4l6ZmjJG/QQX7a5gfbiV9fd13IlmlskZ7ZUb/chkCe30rAaeT7dW1+Isj
zX/Oa61c9gHgft//rmf7R0Unbg+Joi3vt+oFIEctejKMT0VTg10r/kEeT+t0+fMb
fqc2XW9/X9bPphWoUKq5ikpTPNQRQw9f7YRxscvm85wEVP1JHSt+PzgC9+czenLK
TKSdPVvcHjE/JI3i5KqrkszXvaT6pfc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:21:47 2025 by rpki-client