Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/679a28d9-a759-3622-b42e-3af132669e83.roa
File:                     679a28d9-a759-3622-b42e-3af132669e83.roa (raw, json)
Hash identifier:          EkI635TpXFAl/0G+z8FQWsJlhEn5HaHanZm3QWEE6RE=
Subject key identifier:   FC:52:CE:09:F6:C6:D8:85:6E:8B:84:F9:10:91:48:28:13:7A:D2:DE
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328584A279183199F10691AEE92D880
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/679a28d9-a759-3622-b42e-3af132669e83.roa
Signing time:             Wed 11 Jun 2025 09:50:29 +0000
ROA not before:           Wed 11 Jun 2025 09:50:29 +0000
ROA not after:            Tue 09 Sep 2025 09:50:29 +0000
asID:                     998
IP address blocks:        66.187.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:27:91:83:19:9f:10:69:1a:ee:92:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Jun 11 09:50:29 2025 GMT
            Not After : Sep  9 09:50:29 2025 GMT
        Subject: CN=917e7ced-ac1e-4bd2-b8d4-d6aad11c272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:a8:c8:18:36:7d:c6:fe:b3:ae:24:3f:64:
                    89:0a:c9:c2:5c:68:c8:72:c7:3c:c9:98:e1:21:b0:
                    ea:97:3c:15:0d:ec:98:1f:39:58:b2:0a:a1:d2:cb:
                    f2:99:54:57:34:d9:08:83:13:c2:fb:e4:49:fd:96:
                    4b:be:84:7d:aa:3a:d1:33:57:6a:dc:8d:e0:98:fc:
                    cf:4f:81:84:f5:4e:38:35:74:fe:13:26:df:24:f5:
                    5b:b5:7a:84:f7:34:c4:39:52:6f:d1:78:de:39:f2:
                    6b:38:83:a0:c8:c7:43:32:d9:8f:b9:9a:4a:76:d0:
                    cd:32:d8:7f:5b:2f:73:11:87:c9:00:32:3d:9b:1d:
                    ad:e4:00:87:b8:14:c0:e2:a3:f1:89:ba:39:a8:a9:
                    08:8e:24:ad:ba:fd:f0:f5:79:a7:34:e6:46:72:2a:
                    cb:20:2e:f0:3f:ab:15:38:b7:6c:5a:0c:a6:6d:af:
                    16:0c:b4:b9:53:c6:79:0f:55:38:3e:cb:aa:c1:62:
                    8e:bc:dc:6e:04:51:d3:9c:c0:ae:cd:b8:c2:a6:33:
                    da:79:b3:4a:dd:34:4b:5d:c0:81:40:9e:83:2e:4e:
                    32:18:a8:4e:dd:ec:6c:91:c0:59:13:5d:d8:87:fc:
                    50:73:8b:ec:1f:c6:f2:51:56:e2:4b:d0:cd:d8:1f:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:CE:09:F6:C6:D8:85:6E:8B:84:F9:10:91:48:28:13:7A:D2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/679a28d9-a759-3622-b42e-3af132669e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:29:3a:fe:05:94:69:b6:9b:93:30:81:43:33:df:b8:e5:c1:
         68:dd:28:18:85:dc:e8:d4:5d:b3:c8:7b:e0:82:f1:c7:ae:4a:
         dd:ec:fa:92:a0:62:5a:78:3d:b1:a5:e8:c1:47:28:c6:aa:6d:
         17:32:57:e7:f8:3d:42:76:a5:3c:1f:49:a1:68:43:22:37:9d:
         c3:aa:ed:0c:cd:a1:55:29:84:5e:e1:21:81:91:87:df:37:87:
         27:18:89:a8:ff:53:79:8d:ce:19:38:e3:87:87:a6:fc:cd:a6:
         f0:6d:d4:1a:48:9d:10:6b:ab:4f:1f:19:5b:f1:9a:74:08:dd:
         37:03:c8:8b:3f:ad:dd:65:d6:d3:50:3f:e3:f1:f8:c2:b3:92:
         3b:b6:27:12:6e:c6:bd:14:28:1a:76:06:d6:f4:80:04:ec:ca:
         d4:68:d6:d4:32:39:46:b7:35:40:da:9a:0e:4a:b4:7d:56:00:
         99:27:5c:39:49:c3:15:0b:af:8f:c1:1a:89:07:19:cd:b8:20:
         83:b6:36:fa:e5:b8:54:d0:cd:fe:8f:3e:ee:1b:57:99:ad:d2:
         21:db:3f:5d:4c:58:c4:3e:46:96:b4:32:e1:4b:59:37:0d:21:
         a5:07:2e:f8:32:ef:ba:9d:a0:ce:3a:38:1b:57:85:d8:01:cc:
         45:e1:ae:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEonkYMZnxBpGu6S2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2
MTUxMB4XDTI1MDYxMTA5NTAyOVoXDTI1MDkwOTA5NTAyOVowLzEtMCsGA1UEAxMk
OTE3ZTdjZWQtYWMxZS00YmQyLWI4ZDQtZDZhYWQxMWMyNzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+WoyBg2fcb+s64kP2SJCsnCXGjIcsc8yZjh
IbDqlzwVDeyYHzlYsgqh0svymVRXNNkIgxPC++RJ/ZZLvoR9qjrRM1dq3I3gmPzP
T4GE9U44NXT+EybfJPVbtXqE9zTEOVJv0XjeOfJrOIOgyMdDMtmPuZpKdtDNMth/
Wy9zEYfJADI9mx2t5ACHuBTA4qPxibo5qKkIjiStuv3w9XmnNOZGcirLIC7wP6sV
OLdsWgymba8WDLS5U8Z5D1U4PsuqwWKOvNxuBFHTnMCuzbjCpjPaebNK3TRLXcCB
QJ6DLk4yGKhO3exskcBZE13Yh/xQc4vsH8byUVbiS9DN2B9LewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxSzgn2xtiFbouE+RCRSCgTetLeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk
NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvNjc5YTI4ZDktYTc1OS0z
NjIyLWI0MmUtM2FmMTMyNjY5ZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2
NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4
NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2
NDMwODYxNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrvEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIpOv4FlGm2m5MwgUMz37jlwWjdKBiF3OjUXbPIe+CC8ceuSt3s+pKg
Ylp4PbGl6MFHKMaqbRcyV+f4PUJ2pTwfSaFoQyI3ncOq7QzNoVUphF7hIYGRh983
hycYiaj/U3mNzhk444eHpvzNpvBt1BpInRBrq08fGVvxmnQI3TcDyIs/rd1l1tNQ
P+Px+MKzkju2JxJuxr0UKBp2Btb0gATsytRo1tQyOUa3NUDamg5KtH1WAJknXDlJ
wxULr4/BGokHGc24IIO2NvrluFTQzf6PPu4bV5mt0iHbP11MWMQ+Rpa0MuFLWTcN
IaUHLvgy77qdoM46OBtXhdgBzEXhroY=
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:43:10 2025 by rpki-client