Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa
File:                     c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa (raw, json)
Hash identifier:          kljSBXSj8EvISClEF5ymlOyeOtX+b7yTG5xrruzv8f4=
Subject key identifier:   61:7E:60:F5:F7:63:1F:06:20:A3:86:0E:62:3A:F1:B1:7A:88:2D:C9
Certificate issuer:       /CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
Certificate serial:       010D0C9F4328584A73509F2F12647FA16EE74FC0
Authority key identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     13765
IP address blocks:        66.196.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9f:2f:12:64:7f:a1:6e:e7:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=04371bd1-39e0-4881-b4b3-6c19987c568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:a5:b7:63:34:62:d3:4c:df:97:70:23:7b:
                    83:3e:a1:d4:80:21:5f:fc:57:c6:5b:52:e4:f6:fb:
                    97:87:85:a6:e1:bd:0e:03:ea:b3:6d:12:4a:ee:71:
                    57:7a:ed:c7:18:ec:41:8f:00:d2:07:50:11:39:fb:
                    ab:22:dd:fa:97:c6:13:61:ba:51:58:ea:f5:1c:27:
                    ca:bf:ee:ba:8d:ea:1c:3d:cd:b4:a7:9e:76:52:46:
                    88:4d:17:7a:cd:a6:18:85:87:cf:a8:9b:a8:de:b9:
                    5d:7c:5e:11:01:ba:65:bd:df:56:9f:37:b7:54:7f:
                    59:24:ba:e7:49:99:7a:97:bc:09:bb:ab:68:6f:ad:
                    3f:09:05:b7:36:4f:42:83:1e:da:33:13:7f:e9:cb:
                    b3:6b:85:50:ac:d3:0e:ed:50:69:ec:f9:a5:85:5f:
                    77:a3:e4:9b:6e:40:db:78:ec:26:16:92:d7:ab:8f:
                    e2:56:f5:2f:36:68:1c:f0:ad:54:79:b8:57:43:8a:
                    8d:2e:d3:69:ba:ff:76:92:7f:e4:41:73:7b:a0:20:
                    00:d1:8b:ed:bf:02:a6:c6:a8:16:f4:0e:f5:6c:82:
                    8f:d9:87:29:11:30:01:14:cd:b5:1c:88:7e:66:51:
                    4f:72:45:f8:bb:ac:b9:ed:60:03:1e:f1:68:c7:18:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7E:60:F5:F7:63:1F:06:20:A3:86:0E:62:3A:F1:B1:7A:88:2D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl

            X509v3 Authority Key Identifier:
                keyid:91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.196.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:78:55:d6:18:30:7c:d1:c0:50:1b:3d:fd:42:47:a0:37:59:
         f8:c6:23:e2:7d:b7:dd:ad:65:86:1d:93:85:9c:1f:be:cf:78:
         73:e4:c0:fc:13:ce:da:b7:42:b3:91:f0:9f:6a:d1:4e:6b:f6:
         b8:61:5e:e5:1d:64:bd:80:c3:2d:61:dd:1a:0d:49:05:74:ad:
         7f:2a:1a:89:f2:b4:bd:f9:36:dd:b6:fa:da:c3:82:bc:bc:37:
         8a:ff:f5:13:2f:fc:11:23:f7:8a:69:3b:39:9d:21:2d:46:1c:
         30:da:07:72:c0:b1:6e:44:1a:a9:23:c1:da:ee:4c:4b:bd:69:
         86:97:db:36:df:a9:49:22:ea:55:30:b9:f4:a9:c0:93:ef:83:
         e3:e8:b3:83:ef:a3:2f:25:6a:44:75:4e:e4:25:3f:63:eb:a6:
         0b:b1:a2:6d:70:5f:e8:9a:f6:a4:75:51:5f:fc:d2:3e:b9:b7:
         0d:9f:44:32:bb:57:d0:ea:bf:c9:71:ba:4d:0c:dd:35:3e:14:
         ce:8f:9d:3d:1c:4d:92:03:65:18:6a:f6:51:3e:8c:d6:48:e7:
         4e:5e:18:b1:69:02:6a:22:27:e4:c6:fe:88:c9:af:cb:c3:0f:
         29:76:ca:f3:57:a4:fb:cd:8b:36:66:0f:f5:26:68:28:4f:49:
         1d:79:e9:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUJ8vEmR/oW7nT8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlYTBjYmYtZWM5NC00OTE5LWI5OWYtNjM2NWU2OWFl
NTJlMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
MDQzNzFiZDEtMzllMC00ODgxLWI0YjMtNmMxOTk4N2M1NjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQKlt2M0YtNM35dwI3uDPqHUgCFf/FfGW1Lk
9vuXh4Wm4b0OA+qzbRJK7nFXeu3HGOxBjwDSB1AROfurIt36l8YTYbpRWOr1HCfK
v+66jeocPc20p552UkaITRd6zaYYhYfPqJuo3rldfF4RAbplvd9Wnze3VH9ZJLrn
SZl6l7wJu6tob60/CQW3Nk9Cgx7aMxN/6cuza4VQrNMO7VBp7PmlhV93o+SbbkDb
eOwmFpLXq4/iVvUvNmgc8K1UebhXQ4qNLtNpuv92kn/kQXN7oCAA0YvtvwKmxqgW
9A71bIKP2YcpETABFM21HIh+ZlFPckX4u6y57WADHvFoxxiXmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGF+YPX3Yx8GIKOGDmI68bF6iC3JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZWVh
MGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1ZTY5YWU1MmUvYzhmYWNiMmEtODg5NC0z
ODY4LWJmMjQtYzQ1NTNjYjdmM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGVlYTBjYmYtZWM5NC00OTE5LWI5
OWYtNjM2NWU2OWFlNTJlLzRlZWEwY2JmLWVjOTQtNDkxOS1iOTlmLTYzNjVlNjlh
ZTUyZS5jcmwwHwYDVR0jBBgwFoAUkbi6kmz39QoHedH5jvzcjT6sDjcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80ZWVhMGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1
ZTY5YWU1MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQsQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJl4VdYYMHzRwFAbPf1CR6A3WfjGI+J9t92tZYYdk4WcH77PeHPkwPwT
ztq3QrOR8J9q0U5r9rhhXuUdZL2Awy1h3RoNSQV0rX8qGonytL35Nt22+trDgry8
N4r/9RMv/BEj94ppOzmdIS1GHDDaB3LAsW5EGqkjwdruTEu9aYaX2zbfqUki6lUw
ufSpwJPvg+Pos4Pvoy8lakR1TuQlP2Prpguxom1wX+ia9qR1UV/80j65tw2fRDK7
V9Dqv8lxuk0M3TU+FM6PnT0cTZIDZRhq9lE+jNZI505eGLFpAmoiJ+TG/ojJr8vD
Dyl2yvNXpPvNizZmD/UmaChPSR156aM=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:33 2025 by rpki-client