Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa
File:                     624ff661-6f73-31bb-813f-b64dbeff8dea.roa (raw, json)
Hash identifier:          FfAKsfWftnRyvwM5P0WdioWhB+Zzjjk1FqfcxghpL8w=
Subject key identifier:   95:67:EB:5D:1D:CB:D6:9F:59:5F:6A:F4:F3:15:41:E5:54:D2:01:AE
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F43285849D1650ED4807F0BA5D9E967C0
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     611
IP address blocks:        67.210.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0e:d4:80:7f:0b:a5:d9:e9:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=265e32f2-daae-4f66-8b55-fa8acefc0cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:b1:22:b4:ec:da:87:78:64:8f:fb:99:a1:
                    25:40:73:93:ee:b4:d2:10:e7:a8:68:64:e0:e8:5a:
                    31:8a:b3:a7:e2:29:31:35:5e:53:d0:1f:d0:df:f5:
                    34:b0:92:74:02:e8:ce:5a:fa:6c:9e:82:4c:a3:e4:
                    55:2f:2b:06:7b:90:28:94:93:3e:06:b4:06:a1:28:
                    12:08:d2:2d:bd:ce:7b:cd:df:5d:e5:6b:5c:ca:62:
                    f3:3a:0c:0c:0c:93:d0:67:bb:68:b1:ef:e5:38:02:
                    fc:be:50:bf:cf:82:a3:ab:fe:7e:3e:3a:49:c5:4b:
                    7b:b3:8f:e9:05:d1:3a:4b:49:9f:80:c5:c4:41:bc:
                    0f:58:7c:0e:41:32:5e:81:fd:31:66:35:08:09:1d:
                    5f:97:52:c3:5a:37:0c:f2:6a:89:14:46:90:80:cf:
                    fd:10:d4:81:61:ab:aa:67:62:41:57:c4:55:bb:6f:
                    7f:c1:8f:25:34:53:aa:dc:50:e3:16:af:94:b5:1c:
                    86:fe:3c:9f:0f:7e:3b:2a:01:16:43:90:5f:7c:ed:
                    50:49:c7:a4:25:48:b3:c4:76:7c:cd:2c:fb:b2:d5:
                    fd:3e:c3:7a:c7:db:ea:e3:68:e9:45:e0:e5:42:ec:
                    27:97:67:ea:5f:ec:8f:5b:6e:f0:8e:d6:dd:1a:7e:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:67:EB:5D:1D:CB:D6:9F:59:5F:6A:F4:F3:15:41:E5:54:D2:01:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:c6:73:ce:b2:9c:5c:ad:86:4a:f4:61:21:5d:2c:23:35:
         91:af:36:0c:40:0c:23:80:f4:09:fb:53:90:23:fc:cf:a6:4c:
         1c:67:78:1d:6a:8c:83:cf:a2:ab:a4:a4:91:8d:29:1b:b9:a0:
         f6:37:f7:53:4b:8e:f9:fc:cf:11:7a:02:f1:81:83:92:44:61:
         40:1c:ba:f9:cf:7a:8f:b0:d4:49:a3:78:ee:a1:f1:db:45:9c:
         c3:04:ec:06:97:a0:fc:0e:ca:3c:ca:9b:22:3b:5d:fd:f4:d8:
         fa:5c:2f:98:1c:a4:40:ad:e7:b6:da:b6:a5:e9:1c:79:02:de:
         1c:0a:6c:c9:4d:17:78:77:11:75:ce:f9:2b:b3:e6:ee:1d:66:
         40:4b:92:ea:cc:a4:37:c5:e8:31:06:93:89:b4:4b:70:e8:d9:
         5c:26:7a:45:3a:09:43:30:01:17:07:b1:c1:7d:72:fa:ca:d9:
         da:b7:c1:08:89:db:ed:7b:a0:ab:94:d3:3b:01:09:75:aa:7a:
         4d:c0:f6:8b:66:40:60:19:f4:c2:c4:7d:0d:b1:32:4e:29:ef:
         4f:75:c6:95:3d:3b:01:61:bd:c4:ba:06:d5:80:fc:d4:80:68:
         2a:30:f9:c3:b5:30:b4:b3:86:1f:e2:2d:22:18:03:50:bd:63:
         b1:8c:ae:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ7UgH8LpdnpZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODY2YjJkZjQtMGYwYS00Yjg0LTllYjctYzE4NTI1OGY1
Mjk0MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MjY1ZTMyZjItZGFhZS00ZjY2LThiNTUtZmE4YWNlZmMwY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V2xIrTs2od4ZI/7maElQHOT7rTSEOeoaGTg
6FoxirOn4ikxNV5T0B/Q3/U0sJJ0AujOWvpsnoJMo+RVLysGe5AolJM+BrQGoSgS
CNItvc57zd9d5WtcymLzOgwMDJPQZ7tose/lOAL8vlC/z4Kjq/5+PjpJxUt7s4/p
BdE6S0mfgMXEQbwPWHwOQTJegf0xZjUICR1fl1LDWjcM8mqJFEaQgM/9ENSBYauq
Z2JBV8RVu29/wY8lNFOq3FDjFq+UtRyG/jyfD347KgEWQ5BffO1QScekJUizxHZ8
zSz7stX9PsN6x9vq42jpReDlQuwnl2fqX+yPW27wjtbdGn6rHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVn610dy9afWV9q9PMVQeVU0gGuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NjZi
MmRmNC0wZjBhLTRiODQtOWViNy1jMTg1MjU4ZjUyOTQvNjI0ZmY2NjEtNmY3My0z
MWJiLTgxM2YtYjY0ZGJlZmY4ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODY2YjJkZjQtMGYwYS00Yjg0LTll
YjctYzE4NTI1OGY1Mjk0Lzg2NmIyZGY0LTBmMGEtNGI4NC05ZWI3LWMxODUyNThm
NTI5NC5jcmwwHwYDVR0jBBgwFoAUlXZb8dwS0UD6rVvU62UXQha+WnswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84NjZiMmRmNC0wZjBhLTRiODQtOWViNy1jMTg1
MjU4ZjUyOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5bxnPOspxcrYZK9GEhXSwjNZGvNgxADCOA9An7U5Aj/M+mTBxneB1q
jIPPoqukpJGNKRu5oPY391NLjvn8zxF6AvGBg5JEYUAcuvnPeo+w1EmjeO6h8dtF
nMME7AaXoPwOyjzKmyI7Xf302PpcL5gcpECt57batqXpHHkC3hwKbMlNF3h3EXXO
+Suz5u4dZkBLkurMpDfF6DEGk4m0S3Do2VwmekU6CUMwARcHscF9cvrK2dq3wQiJ
2+17oKuU0zsBCXWqek3A9otmQGAZ9MLEfQ2xMk4p7091xpU9OwFhvcS6BtWA/NSA
aCow+cO1MLSzhh/iLSIYA1C9Y7GMrjc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:32:05 2025 by rpki-client