Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0e01958e-a540-34cb-879c-4da74aecf192.roa
File:                     0e01958e-a540-34cb-879c-4da74aecf192.roa (raw, json)
Hash identifier:          Ai2vhnzWomEeiVz4wD0ax7VGhjq6EXERbkeCG62bce0=
Subject key identifier:   CC:3C:A8:C8:B9:52:28:AE:EF:90:20:13:6B:BE:3C:41:1E:00:B8:55
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F4328584A77808189C05D6BE6E7377700
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0e01958e-a540-34cb-879c-4da74aecf192.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        66.97.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:81:89:c0:5d:6b:e6:e7:37:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=a202a573-f3c2-40bd-b20a-166efdadc3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:ad:cb:2a:5a:59:29:a9:64:da:81:a7:b3:
                    ce:63:49:21:80:19:4f:23:31:08:d8:18:48:d0:1a:
                    d3:c1:47:f3:c7:a8:2b:c8:73:9c:5a:d8:25:cd:3e:
                    b8:d2:1c:c1:2b:61:b9:3d:e5:5c:c4:a6:d7:54:1c:
                    24:86:12:4a:9f:0b:c3:92:d5:ad:47:f4:a3:39:72:
                    13:21:82:8d:e6:21:80:42:58:58:df:87:0b:ad:cc:
                    59:b9:57:60:35:48:2d:9f:6f:1b:00:16:ef:d3:59:
                    14:d1:d0:39:5c:57:d3:ba:bd:e7:4c:f9:4a:94:c4:
                    43:f8:b7:4b:02:b3:f0:7a:f7:c8:d1:22:97:51:63:
                    a1:a7:58:dd:50:fc:8c:88:69:25:7f:13:6e:e7:ab:
                    de:09:2c:c3:88:e6:5f:0d:ad:03:ae:0d:f5:c2:36:
                    52:b8:a4:cd:ed:c6:88:87:e3:94:b2:6e:e2:8b:19:
                    af:57:99:a5:4b:1e:bd:6e:7d:7c:6c:69:e0:21:76:
                    5e:41:57:98:2f:44:5b:f8:cf:0a:c8:8f:6b:83:23:
                    ca:9a:3d:c9:29:74:8d:92:8a:b2:83:33:99:5f:52:
                    5d:1c:59:2e:5b:23:59:21:8e:23:f4:96:b1:b8:8d:
                    3c:e2:d2:35:a3:c6:0f:be:6b:2d:13:b0:5b:83:7b:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3C:A8:C8:B9:52:28:AE:EF:90:20:13:6B:BE:3C:41:1E:00:B8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0e01958e-a540-34cb-879c-4da74aecf192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:8b:b3:f1:79:1f:78:23:b4:33:fb:d1:07:dc:fc:c2:73:
         ee:cc:68:e9:c7:8a:d6:47:ea:9c:85:9e:30:e1:c7:f6:ae:01:
         1b:2b:d1:42:87:a9:bf:47:f9:cd:ee:ba:69:c0:13:84:2d:18:
         a5:e9:6a:60:33:dd:4d:54:bc:08:89:db:fa:ef:38:fb:db:d8:
         60:b0:89:d0:78:bd:1f:1d:bc:78:60:3b:63:60:c6:be:3f:a5:
         89:c6:96:d4:a6:5b:be:77:e6:0f:b5:93:e7:85:55:3f:db:b9:
         37:98:78:5f:3f:cd:24:c9:29:53:2d:77:a7:74:1a:91:36:98:
         69:1c:d2:eb:30:37:22:eb:2b:a0:cf:8e:aa:a7:d4:bf:7b:15:
         31:ec:0d:33:14:b2:dd:f7:3b:ff:91:0a:d8:a9:2c:37:8d:34:
         2d:02:5e:e5:ae:fb:be:5d:70:70:c9:00:56:2e:fb:0f:fa:dc:
         60:83:37:59:45:76:19:f9:4d:97:b3:7c:0d:b4:93:ee:d8:c9:
         57:9d:80:fb:8b:83:e5:1c:61:29:fc:1d:8e:44:6c:82:66:70:
         eb:11:bf:16:a4:ea:43:17:1f:b1:f9:b4:65:39:b0:a5:12:d1:
         ae:04:5e:80:c3:56:2f:44:58:51:1a:82:ee:42:a2:a4:35:f7:
         2a:40:bb:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIGJwF1r5uc3dwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk
ZWJiMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
YTIwMmE1NzMtZjNjMi00MGJkLWIyMGEtMTY2ZWZkYWRjM2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WqtyypaWSmpZNqBp7POY0khgBlPIzEI2BhI
0BrTwUfzx6gryHOcWtglzT640hzBK2G5PeVcxKbXVBwkhhJKnwvDktWtR/SjOXIT
IYKN5iGAQlhY34cLrcxZuVdgNUgtn28bABbv01kU0dA5XFfTur3nTPlKlMRD+LdL
ArPwevfI0SKXUWOhp1jdUPyMiGklfxNu56veCSzDiOZfDa0Drg31wjZSuKTN7caI
h+OUsm7iixmvV5mlSx69bn18bGngIXZeQVeYL0Rb+M8KyI9rgyPKmj3JKXSNkoqy
gzOZX1JdHFkuWyNZIY4j9JaxuI084tI1o8YPvmstE7Bbg3tWaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMw8qMi5Uiiu75AgE2u+PEEeALhVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm
MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMGUwMTk1OGUtYTU0MC0z
NGNiLTg3OWMtNGRhNzRhZWNmMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj
NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3
ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl
NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmHtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGdi7PxeR94I7Qz+9EH3PzCc+7MaOnHitZH6pyFnjDhx/auARsr0UKH
qb9H+c3uumnAE4QtGKXpamAz3U1UvAiJ2/rvOPvb2GCwidB4vR8dvHhgO2Ngxr4/
pYnGltSmW7535g+1k+eFVT/buTeYeF8/zSTJKVMtd6d0GpE2mGkc0uswNyLrK6DP
jqqn1L97FTHsDTMUst33O/+RCtipLDeNNC0CXuWu+75dcHDJAFYu+w/63GCDN1lF
dhn5TZezfA20k+7YyVedgPuLg+UcYSn8HY5EbIJmcOsRvxak6kMXH7H5tGU5sKUS
0a4EXoDDVi9EWFEagu5CoqQ19ypAux0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:55 2025 by rpki-client