Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa
File:                     7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa (raw, json)
Hash identifier:          cNOPcdMm9dYzDYCfALObicDpfMPdVjH/0T51XdoH93E=
Subject key identifier:   6C:BD:A7:F1:C1:B1:66:C6:EE:6D:EC:33:B5:6F:30:B1:86:8F:F5:B9
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584AA42B713C3AEA310BB3CA2440
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     22351
IP address blocks:        66.205.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:71:3c:3a:ea:31:0b:b3:ca:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=25314366-157b-4f1a-92d0-3e27b867b9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:bf:8c:3a:d3:be:6a:92:da:0d:da:b7:79:
                    c9:b7:69:2f:0c:2c:21:81:4f:29:74:a1:cf:6c:24:
                    fc:5e:29:d2:3a:13:1c:9b:34:c4:2c:b5:3f:33:9e:
                    05:d2:e1:5a:93:4d:4f:9a:f0:2f:ad:88:8b:3a:0f:
                    5d:72:5b:7a:52:d3:b2:17:ef:22:18:7b:3d:1f:a5:
                    5a:d0:7f:1a:0a:21:a7:d3:8a:0b:4a:5b:75:bf:de:
                    59:d3:4c:91:6c:a6:16:a6:d4:92:06:bb:79:9b:e5:
                    3a:85:d2:88:a3:a0:69:21:d4:32:05:03:72:5d:49:
                    6d:92:d9:dd:53:ae:7a:91:d2:60:5e:22:11:08:c9:
                    21:24:ec:88:57:a6:15:00:ac:80:fc:4c:6a:31:e9:
                    df:da:69:6d:80:9d:8d:c9:93:1d:c8:2a:44:e7:cd:
                    c8:d2:e1:2f:da:b3:1c:fd:a8:25:16:fc:23:06:2f:
                    d3:9e:ff:22:e7:aa:fa:38:f3:a4:f1:97:8d:d0:0b:
                    19:4f:19:23:d5:aa:3b:22:7e:38:36:75:2c:d0:37:
                    76:35:59:2f:b8:ab:8c:f2:32:08:7e:95:a2:69:30:
                    76:6f:0e:8e:4d:ae:a3:26:b2:bf:02:c1:01:5c:78:
                    7f:6a:0d:81:c4:49:7b:07:7d:f4:d6:60:63:ec:42:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BD:A7:F1:C1:B1:66:C6:EE:6D:EC:33:B5:6F:30:B1:86:8F:F5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9b:5a:87:eb:05:ef:5d:c2:ee:0a:f5:e8:b1:3d:85:0d:56:
         5f:aa:b4:a5:a4:c8:eb:ce:7c:c2:f8:cb:98:db:ce:bc:af:5b:
         4f:66:c1:e0:28:57:d7:b5:bb:13:b1:1d:b5:4f:99:0e:e4:bd:
         fe:5c:9a:85:83:f7:0c:c3:09:f8:8a:dd:e9:ec:6d:97:4e:9d:
         74:4f:b5:13:d0:dc:4c:40:49:b9:1d:05:5b:1b:52:c8:25:36:
         f1:bd:16:cb:4f:e3:d8:92:eb:ec:7d:61:06:33:f6:81:7c:5f:
         74:f6:2c:84:b3:17:1e:7d:fb:9d:65:31:c0:36:66:91:df:62:
         80:af:ef:97:18:f6:63:49:b8:ec:8b:1c:1f:92:0a:10:af:49:
         06:c8:07:1c:50:3a:8f:00:2c:e3:ad:74:3b:29:58:60:c5:08:
         3d:55:17:b5:6b:2e:8e:4a:89:c9:ba:25:ed:d8:60:e1:c9:07:
         47:b8:18:ab:40:23:4e:3a:f2:02:73:7b:04:6f:c0:4e:a8:37:
         72:ae:42:fb:f7:a5:85:4a:b0:f8:ad:9f:4e:82:a4:12:89:09:
         72:c2:f2:86:84:9a:40:a0:4e:2b:58:6a:a8:04:78:a3:61:3f:
         b7:44:dd:69:0d:d3:16:3f:36:e1:ea:46:dd:3e:b8:d2:22:83:
         52:37:5f:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3E8OuoxC7PKJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm
YTUzMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MjUzMTQzNjYtMTU3Yi00ZjFhLTkyZDAtM2UyN2I4NjdiOWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY6/jDrTvmqS2g3at3nJt2kvDCwhgU8pdKHP
bCT8XinSOhMcmzTELLU/M54F0uFak01PmvAvrYiLOg9dclt6UtOyF+8iGHs9H6Va
0H8aCiGn04oLSlt1v95Z00yRbKYWptSSBrt5m+U6hdKIo6BpIdQyBQNyXUltktnd
U656kdJgXiIRCMkhJOyIV6YVAKyA/ExqMenf2mltgJ2NyZMdyCpE583I0uEv2rMc
/aglFvwjBi/Tnv8i56r6OPOk8ZeN0AsZTxkj1ao7In44NnUs0Dd2NVkvuKuM8jII
fpWiaTB2bw6OTa6jJrK/AsEBXHh/ag2BxEl7B3301mBj7EJZkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGy9p/HBsWbG7m3sM7VvMLGGj/W5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0
YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvN2YxYzI2ZTQtMWQxNi0z
MzJmLTliMWQtY2U2ZGVhYzUyN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3
NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5
ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm
Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs0MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKybWofrBe9dwu4K9eixPYUNVl+qtKWkyOvOfML4y5jbzryvW09mweAo
V9e1uxOxHbVPmQ7kvf5cmoWD9wzDCfiK3ensbZdOnXRPtRPQ3ExASbkdBVsbUsgl
NvG9FstP49iS6+x9YQYz9oF8X3T2LISzFx59+51lMcA2ZpHfYoCv75cY9mNJuOyL
HB+SChCvSQbIBxxQOo8ALOOtdDspWGDFCD1VF7VrLo5Kicm6Je3YYOHJB0e4GKtA
I0468gJzewRvwE6oN3KuQvv3pYVKsPitn06CpBKJCXLC8oaEmkCgTitYaqgEeKNh
P7dE3WkN0xY/NuHqRt0+uNIig1I3X/A=
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:27 2025 by rpki-client