Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa
File:                     3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa (raw, json)
Hash identifier:          hX/icJ8BKsnaB9whYUUKJny7DbTbpSpVCdahzQb/s7E=
Subject key identifier:   90:E8:09:14:38:BB:F0:50:DB:98:95:CF:7B:24:C1:39:87:5E:C8:52
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584A0ECFF337682695068E02CE80
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa
Signing time:             Mon 02 Jun 2025 13:01:03 +0000
ROA not before:           Mon 02 Jun 2025 13:01:03 +0000
ROA not after:            Sun 31 Aug 2025 13:01:03 +0000
asID:                     22351
IP address blocks:        66.205.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:cf:f3:37:68:26:95:06:8e:02:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Jun  2 13:01:03 2025 GMT
            Not After : Aug 31 13:01:03 2025 GMT
        Subject: CN=8d9cb983-f0ea-41f1-a81b-bc5b522235c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:31:52:0f:97:c2:cc:65:55:dc:61:0f:06:
                    6b:4a:82:d9:f0:93:63:fb:d7:17:91:c9:1d:57:29:
                    09:0b:f6:c6:cd:cf:2f:c7:ff:95:35:8c:53:e4:b0:
                    80:c2:06:a5:0d:b4:98:bf:0c:ca:25:e4:10:0b:68:
                    0b:47:99:93:88:64:bd:ad:c3:6f:55:7c:e9:77:7d:
                    b8:9f:2d:d5:9a:c3:af:c6:ed:8f:f9:79:85:83:88:
                    c6:c7:31:e2:64:e7:25:90:3f:f4:f4:32:b8:aa:70:
                    1b:4a:a7:4a:65:02:dd:27:bf:08:01:b3:e7:f5:eb:
                    2c:cb:06:51:b8:5a:1d:d8:75:88:40:c1:e4:84:bc:
                    43:5e:42:b4:d7:00:8f:cc:2e:3c:ac:20:96:c3:d8:
                    5b:29:b3:09:c8:b8:fc:4c:1d:5d:e4:61:bc:c3:48:
                    47:71:f3:da:ef:fe:51:65:34:e8:2e:4d:ca:b5:76:
                    e8:57:4d:c5:37:45:31:c2:61:1d:a1:d5:0b:a4:52:
                    b9:c1:f2:6f:15:91:2c:1d:81:65:4a:b3:07:4b:2e:
                    c8:ba:46:42:c1:9e:c3:dd:71:85:2e:3b:28:be:ca:
                    4d:53:38:2f:fd:a7:47:d8:31:bb:84:28:63:de:b9:
                    75:c4:92:1b:66:f7:fc:34:34:64:c3:ae:16:a1:eb:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E8:09:14:38:BB:F0:50:DB:98:95:CF:7B:24:C1:39:87:5E:C8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/3d3a072a-21de-3e5a-8e2f-8213e48903b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:14:33:28:43:9e:ab:80:12:60:9c:b3:ec:4e:e7:bd:5f:
         6b:44:8b:42:0c:06:53:31:f2:91:ae:08:94:45:90:45:e9:fc:
         41:25:71:15:60:57:1a:0e:0c:5d:68:d1:9b:c1:bf:a3:50:e0:
         ee:93:26:38:42:70:d2:5f:8f:9b:29:05:47:06:f7:12:48:09:
         65:30:71:57:31:28:8d:d1:ee:05:52:c1:4a:30:16:dc:df:66:
         3d:5b:74:1d:e4:dc:2f:c5:bb:ba:fb:e2:ce:b9:77:5e:25:78:
         68:5d:e5:80:25:62:e1:e9:e5:5a:43:f3:38:09:23:64:60:2b:
         66:93:aa:bc:41:de:b7:74:b7:58:55:95:d2:55:1f:d2:45:d7:
         76:55:ba:62:93:4b:50:65:1e:bb:86:0c:d7:6e:b9:3d:4e:3f:
         95:35:68:13:01:cd:53:15:da:02:3d:9d:b0:da:8b:e9:55:2c:
         48:9b:56:9e:54:39:02:da:49:21:ca:5f:0d:74:1d:b0:59:97:
         ca:e5:52:d1:87:b5:1e:4e:fd:12:12:be:3d:f8:75:ec:e3:8f:
         aa:6f:2a:87:a4:09:97:fe:c4:a7:6b:15:18:36:20:19:1f:3d:
         18:18:7d:b8:4d:15:02:5b:90:d6:40:62:df:99:e1:ed:95:ca:
         35:0e:d4:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoOz/M3aCaVBo4CzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm
YTUzMB4XDTI1MDYwMjEzMDEwM1oXDTI1MDgzMTEzMDEwM1owLzEtMCsGA1UEAxMk
OGQ5Y2I5ODMtZjBlYS00MWYxLWE4MWItYmM1YjUyMjIzNWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1IxUg+XwsxlVdxhDwZrSoLZ8JNj+9cXkckd
VykJC/bGzc8vx/+VNYxT5LCAwgalDbSYvwzKJeQQC2gLR5mTiGS9rcNvVXzpd324
ny3VmsOvxu2P+XmFg4jGxzHiZOclkD/09DK4qnAbSqdKZQLdJ78IAbPn9essywZR
uFod2HWIQMHkhLxDXkK01wCPzC48rCCWw9hbKbMJyLj8TB1d5GG8w0hHcfPa7/5R
ZTToLk3KtXboV03FN0UxwmEdodULpFK5wfJvFZEsHYFlSrMHSy7IukZCwZ7D3XGF
LjsovspNUzgv/adH2DG7hChj3rl1xJIbZvf8NDRkw64Woesz3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDoCRQ4u/BQ25iVz3skwTmHXshSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0
YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvM2QzYTA3MmEtMjFkZS0z
ZTVhLThlMmYtODIxM2U0ODkwM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3
NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5
ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm
Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQs0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPuFDMoQ56rgBJgnLPsTue9X2tEi0IMBlMx8pGuCJRFkEXp/EElcRVg
VxoODF1o0ZvBv6NQ4O6TJjhCcNJfj5spBUcG9xJICWUwcVcxKI3R7gVSwUowFtzf
Zj1bdB3k3C/Fu7r74s65d14leGhd5YAlYuHp5VpD8zgJI2RgK2aTqrxB3rd0t1hV
ldJVH9JF13ZVumKTS1BlHruGDNduuT1OP5U1aBMBzVMV2gI9nbDai+lVLEibVp5U
OQLaSSHKXw10HbBZl8rlUtGHtR5O/RISvj34dezjj6pvKoekCZf+xKdrFRg2IBkf
PRgYfbhNFQJbkNZAYt+Z4e2VyjUO1P8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:15 2025 by rpki-client