Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/7cb22d50-b00f-3993-b5f8-77155cb1ceda.roa
File:                     7cb22d50-b00f-3993-b5f8-77155cb1ceda.roa (raw, json)
Hash identifier:          C4UHEjRbV20MN8+9qiKSCRAsG5DrumIxua2cD/d1/8U=
Subject key identifier:   6E:C2:00:D2:90:B8:83:DD:9B:50:81:8C:A0:44:C9:3E:B0:68:AA:AB
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584AB91BB45CAEDAD7258CDDAD00
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/7cb22d50-b00f-3993-b5f8-77155cb1ceda.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     398572
IP address blocks:        66.54.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b4:5c:ae:da:d7:25:8c:dd:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=e57231f6-6204-4be0-b6ab-937bc77f95b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:1e:cf:40:7a:bb:96:06:69:d0:7d:f8:a1:
                    7c:fe:fc:75:54:da:a0:f8:5b:eb:8f:a4:97:ee:a9:
                    ed:49:b1:2c:62:b7:8d:aa:57:62:5d:85:fe:60:cf:
                    b0:ee:60:56:7d:07:28:c7:af:20:da:4b:4d:10:11:
                    7e:7f:4c:3d:54:31:f5:02:c0:d8:c6:f0:b3:97:2f:
                    7c:65:24:84:01:a2:cf:2f:40:2d:2f:d9:ca:63:b1:
                    5a:5d:6a:96:cf:16:1e:0f:3c:96:9c:d6:c5:4f:dd:
                    e5:75:b7:31:bb:be:7e:74:85:dc:2b:6b:46:b3:19:
                    ca:3c:7b:09:78:d0:ec:0f:ba:e3:54:3f:e9:30:e2:
                    37:21:27:fb:13:e2:19:2c:b2:e4:aa:ed:a1:66:ab:
                    e5:a4:3a:22:07:c8:b6:be:1a:c8:e1:7d:73:93:6f:
                    8e:28:e9:5c:e4:3a:08:ac:b4:9b:e3:11:05:3a:3d:
                    d3:a9:39:a3:2a:46:87:2f:9b:4f:a0:78:49:20:bf:
                    84:82:2d:6a:b7:f7:d8:56:6a:c2:5e:6a:a8:5e:f9:
                    14:4f:c7:d0:7e:e9:a9:d0:e0:4b:a9:52:4f:9c:a1:
                    ca:e9:35:b9:bc:bd:f8:36:b9:63:e3:9b:95:61:7f:
                    f6:1d:a2:28:27:02:d1:a0:eb:cb:c8:c9:8e:70:bc:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C2:00:D2:90:B8:83:DD:9B:50:81:8C:A0:44:C9:3E:B0:68:AA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/7cb22d50-b00f-3993-b5f8-77155cb1ceda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:fa:cb:f6:b1:4a:16:5f:b7:ee:89:db:54:61:dc:39:f1:
         c0:fc:6e:6d:85:b1:54:c3:d7:58:48:96:10:b3:b6:6d:dc:ac:
         87:9d:36:51:83:77:d9:d3:5b:ec:5a:5d:28:f8:08:4d:60:ea:
         fd:9b:7e:70:4b:43:0e:73:ad:88:9d:96:1f:9f:65:f4:99:d2:
         20:0d:0d:a8:cb:d9:aa:bf:96:9c:59:96:32:af:cf:f3:6b:e6:
         18:78:fb:f1:32:3c:d7:b8:2f:cb:dc:10:f1:a3:45:47:7f:a8:
         82:e6:1a:35:86:2e:2f:df:be:59:52:8a:ea:01:53:61:98:20:
         37:c8:53:6f:91:5f:25:24:e4:94:a4:88:e8:d3:be:c7:3c:aa:
         91:0f:56:aa:1d:ff:c3:81:98:e1:16:ba:e8:24:d9:a9:9b:71:
         34:bf:d4:9e:9c:50:b8:da:95:c7:5a:d0:31:f3:c2:e3:4b:75:
         95:65:eb:dd:f4:f8:75:4d:f7:fe:f5:ae:7e:46:b9:88:ed:22:
         96:8e:d9:bd:c0:58:e5:16:4b:50:86:98:72:83:66:81:6e:18:
         47:ce:bc:39:b5:e3:d4:5c:c7:aa:42:7d:79:00:bc:d2:3b:d9:
         8b:3e:b3:e6:16:2d:ef:7e:92:ab:18:b2:82:d4:44:4d:ad:e3:
         25:7a:59:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7RcrtrXJYzdrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz
MDdkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZTU3MjMxZjYtNjIwNC00YmUwLWI2YWItOTM3YmM3N2Y5NWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XQez0B6u5YGadB9+KF8/vx1VNqg+Fvrj6SX
7qntSbEsYreNqldiXYX+YM+w7mBWfQcox68g2ktNEBF+f0w9VDH1AsDYxvCzly98
ZSSEAaLPL0AtL9nKY7FaXWqWzxYeDzyWnNbFT93ldbcxu75+dIXcK2tGsxnKPHsJ
eNDsD7rjVD/pMOI3ISf7E+IZLLLkqu2hZqvlpDoiB8i2vhrI4X1zk2+OKOlc5DoI
rLSb4xEFOj3TqTmjKkaHL5tPoHhJIL+Egi1qt/fYVmrCXmqoXvkUT8fQfump0OBL
qVJPnKHK6TW5vL34Nrlj45uVYX/2HaIoJwLRoOvLyMmOcLwgkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7CANKQuIPdm1CBjKBEyT6waKqrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl
MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvN2NiMjJkNTAtYjAwZi0z
OTkzLWI1ZjgtNzcxNTVjYjFjZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3
NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl
MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw
YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjZnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAL+sv2sUoWX7fuidtUYdw58cD8bm2FsVTD11hIlhCztm3crIedNlGD
d9nTW+xaXSj4CE1g6v2bfnBLQw5zrYidlh+fZfSZ0iANDajL2aq/lpxZljKvz/Nr
5hh4+/EyPNe4L8vcEPGjRUd/qILmGjWGLi/fvllSiuoBU2GYIDfIU2+RXyUk5JSk
iOjTvsc8qpEPVqod/8OBmOEWuugk2ambcTS/1J6cULjalcda0DHzwuNLdZVl6930
+HVN9/71rn5GuYjtIpaO2b3AWOUWS1CGmHKDZoFuGEfOvDm149Rcx6pCfXkAvNI7
2Ys+s+YWLe9+kqsYsoLURE2t4yV6WV4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:23 2025 by rpki-client