Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa
File:                     d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa (raw, json)
Hash identifier:          C1/U8A4sZ3sHudZo5kHKv42Pe/2fVPFW9fgR+baTmUo=
Subject key identifier:   33:73:18:99:6F:77:06:3D:1E:FF:CC:D1:CD:84:7E:EC:E1:4D:19:FC
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849D16500EAE3DE897F65CBB8F0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     10796
IP address blocks:        66.198.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:00:ea:e3:de:89:7f:65:cb:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=38b3683c-b683-4a51-9da0-01930ad178be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:67:74:91:51:15:0c:7f:11:cd:1a:91:67:
                    45:ff:3a:c5:56:46:65:a3:49:48:2f:55:f7:0e:bd:
                    c1:3f:cc:82:59:76:da:d3:94:00:b8:cf:1a:e3:d4:
                    71:49:42:84:79:03:fc:5e:01:0f:a7:11:7a:e1:83:
                    44:ca:5b:90:03:8c:bd:d7:b8:cd:aa:70:8f:a5:05:
                    35:bb:b8:1f:e0:42:4d:2e:72:0a:dc:ec:bf:40:94:
                    c6:fa:9a:7d:13:4e:59:ef:e5:3e:ab:f4:91:b7:15:
                    81:b7:1c:76:af:de:61:ab:86:07:e0:51:be:56:dd:
                    e7:e8:fb:33:b0:f1:3a:df:de:05:c2:04:cd:75:af:
                    7f:bb:c3:6d:ba:3c:16:3c:6f:6a:a0:cb:02:ce:46:
                    4c:bd:45:e0:c6:f1:ea:1c:ed:42:ca:4e:0b:1c:5d:
                    bf:3f:63:8e:38:51:ed:6c:a5:97:84:56:87:6e:4a:
                    5d:8c:94:da:7f:78:b4:15:73:8e:51:55:20:41:9b:
                    20:fe:ec:29:06:75:ca:ea:ef:d0:15:a3:cd:01:f5:
                    7e:0d:3a:99:8e:6f:55:b8:4e:20:a2:57:6c:dc:c5:
                    dc:75:5c:d4:92:a0:9a:a6:12:8c:42:c7:db:da:27:
                    98:7e:fd:e4:c6:5f:44:31:fe:37:3f:01:72:72:d8:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:73:18:99:6F:77:06:3D:1E:FF:CC:D1:CD:84:7E:EC:E1:4D:19:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:be:08:f2:ea:80:40:32:bc:09:75:13:a7:e7:35:4a:e1:08:
         a7:c6:6f:f0:dc:a1:e3:83:48:03:14:48:20:2d:66:c3:54:fe:
         bc:15:d7:a7:41:c0:63:77:7b:52:5f:20:dc:3d:71:2a:e2:72:
         7c:a9:c6:e8:e6:4a:8a:01:f3:c5:5f:64:a7:c2:23:2b:90:8f:
         5c:14:a5:a3:ea:17:88:29:85:20:c6:17:9c:03:71:da:13:ef:
         82:54:a3:83:0f:ff:62:1d:da:cb:ae:97:bb:91:a5:c9:fb:93:
         ad:42:7a:4a:dc:74:02:c2:5a:11:1d:38:2f:02:1b:08:b3:80:
         9b:cd:86:47:56:66:9c:6c:4e:d5:14:fe:51:5c:0f:e2:ba:99:
         87:c8:fa:72:a8:66:27:57:99:a6:8b:41:81:9b:8e:16:9d:0b:
         19:bd:51:a5:0b:63:8b:df:dd:5c:0b:dd:0c:55:35:a6:5b:5c:
         48:82:68:40:2a:86:e8:98:7e:0d:cd:c2:60:c3:a2:47:fc:2d:
         b0:a1:6f:fc:e8:03:c8:e7:2f:5a:5c:e1:d4:0c:76:fd:db:39:
         73:e5:59:89:2e:58:63:dc:6b:3f:4b:cb:bd:3f:ff:89:98:a3:
         3d:d1:b3:26:60:5b:a3:11:93:fb:39:75:00:c1:e2:ff:f0:52:
         05:25:60:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQDq496Jf2XLuPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MzhiMzY4M2MtYjY4My00YTUxLTlkYTAtMDE5MzBhZDE3OGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyRndJFRFQx/Ec0akWdF/zrFVkZlo0lIL1X3
Dr3BP8yCWXba05QAuM8a49RxSUKEeQP8XgEPpxF64YNEyluQA4y917jNqnCPpQU1
u7gf4EJNLnIK3Oy/QJTG+pp9E05Z7+U+q/SRtxWBtxx2r95hq4YH4FG+Vt3n6Psz
sPE6394FwgTNda9/u8NtujwWPG9qoMsCzkZMvUXgxvHqHO1Cyk4LHF2/P2OOOFHt
bKWXhFaHbkpdjJTaf3i0FXOOUVUgQZsg/uwpBnXK6u/QFaPNAfV+DTqZjm9VuE4g
olds3MXcdVzUkqCaphKMQsfb2ieYfv3kxl9EMf43PwFyctjJsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNzGJlvdwY9Hv/M0c2EfuzhTRn8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZDMzOTlkYmQtZjhkNC0z
YmI3LTk3OTEtNGM4OGIzYzk3YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADG+CPLqgEAyvAl1E6fnNUrhCKfGb/DcoeODSAMUSCAtZsNU/rwV16dB
wGN3e1JfINw9cSricnypxujmSooB88VfZKfCIyuQj1wUpaPqF4gphSDGF5wDcdoT
74JUo4MP/2Id2suul7uRpcn7k61CekrcdALCWhEdOC8CGwizgJvNhkdWZpxsTtUU
/lFcD+K6mYfI+nKoZidXmaaLQYGbjhadCxm9UaULY4vf3VwL3QxVNaZbXEiCaEAq
huiYfg3NwmDDokf8LbChb/zoA8jnL1pc4dQMdv3bOXPlWYkuWGPcaz9Ly70//4mY
oz3RsyZgW6MRk/s5dQDB4v/wUgUlYOU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:50:24 2025 by rpki-client