Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
File:                     f4a74179-bca2-3eed-8890-6681deae4ca9.roa (raw, json)
Hash identifier:          Cv9KgiCwGqoXxxy9LIx0YPM+Jzx0r4WVXY5mscqoaxE=
Subject key identifier:   D5:9A:08:7A:DA:EF:E8:E6:51:6D:C9:66:E9:53:E5:58:F5:68:1A:CC
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849D164FFC51D585EA050DB3700
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        66.198.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:ff:c5:1d:58:5e:a0:50:db:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=189e5548-7166-4ea6-8f08-c3d6f645f9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:87:86:45:48:21:a9:e3:79:66:78:3f:61:
                    e3:4c:9a:a5:43:89:48:29:71:d4:61:29:eb:ac:84:
                    e7:06:6c:a5:14:db:23:60:a7:9b:51:07:e8:ea:e3:
                    a6:87:03:af:09:18:0e:d2:cd:34:94:60:03:df:30:
                    ce:1b:fa:37:42:b4:b1:62:77:b8:30:51:b0:1a:2c:
                    f8:9b:e0:23:5a:94:05:59:e8:96:d5:24:35:99:79:
                    c2:96:d1:e9:89:90:9d:e3:a0:1a:cc:e7:a9:66:9f:
                    b2:c5:1e:db:dc:b6:9c:ef:d9:7b:04:c4:7d:fa:3c:
                    5d:23:14:52:f7:f1:f0:3e:54:f0:74:8e:f1:fc:d5:
                    bc:a6:9b:12:33:1c:5a:63:65:76:55:6f:f8:bf:e0:
                    6a:9d:52:bb:1f:a0:e0:bd:57:81:95:01:5b:d6:91:
                    d4:73:cc:71:49:c2:16:fc:8d:e0:d6:df:21:1c:ec:
                    b1:32:0b:4f:eb:d5:88:26:1a:29:eb:ad:7f:4a:ee:
                    d0:31:5a:9b:f6:d2:94:4b:36:aa:83:4b:55:e2:f6:
                    a3:78:f8:ff:2b:fb:0f:9b:ef:ee:dc:d1:e7:1d:3e:
                    6c:9b:25:6a:f8:b9:a8:ca:55:d8:7e:e6:be:93:e4:
                    8e:8a:34:73:af:c1:de:b8:58:ae:c7:5a:f4:8c:1b:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9A:08:7A:DA:EF:E8:E6:51:6D:C9:66:E9:53:E5:58:F5:68:1A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/f4a74179-bca2-3eed-8890-6681deae4ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:57:17:a4:60:b7:e6:3c:3c:cd:5e:bc:9a:d6:e4:e3:8d:
         a6:b3:91:ce:22:8f:7d:63:ae:ab:16:1c:9d:30:5a:99:c3:d3:
         fa:26:01:8c:2f:52:47:ec:90:44:4c:fd:1a:48:6e:7b:73:d3:
         ad:90:c7:df:9b:29:b8:1a:4a:1a:bd:e1:f1:be:4c:11:b8:b2:
         f1:a8:ea:ad:ed:8c:fd:8e:2d:47:d1:95:cd:99:fd:69:9b:05:
         50:d4:5f:04:03:d1:2e:e2:d6:7b:43:b0:29:9f:72:3e:3a:96:
         57:79:a0:7d:aa:eb:a5:41:df:dd:ac:97:91:87:f7:70:b2:40:
         ef:d1:d0:00:ed:55:f3:50:40:ac:c0:57:69:9f:0d:26:77:21:
         7e:79:fd:47:d6:a6:1e:fb:f5:e9:55:15:71:2a:0b:37:a3:8e:
         26:cd:9f:e5:b5:ed:99:55:a5:e2:8e:85:b8:bf:a7:ba:88:48:
         83:42:48:60:6f:40:e9:3f:90:3e:14:ca:07:b1:9f:83:a3:0e:
         81:33:cd:30:f8:75:00:5a:12:6e:b0:b9:e7:77:4c:31:86:c2:
         d3:53:04:b7:64:e2:65:f1:7e:72:11:9d:47:03:40:d6:9d:1a:
         a1:22:15:11:f1:c5:d4:43:3f:e0:4d:e7:d3:47:2b:27:80:93:
         46:d5:19:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZP/FHVheoFDbNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MTg5ZTU1NDgtNzE2Ni00ZWE2LThmMDgtYzNkNmY2NDVmOWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgreHhkVIIanjeWZ4P2HjTJqlQ4lIKXHUYSnr
rITnBmylFNsjYKebUQfo6uOmhwOvCRgO0s00lGAD3zDOG/o3QrSxYne4MFGwGiz4
m+AjWpQFWeiW1SQ1mXnCltHpiZCd46AazOepZp+yxR7b3Lac79l7BMR9+jxdIxRS
9/HwPlTwdI7x/NW8ppsSMxxaY2V2VW/4v+BqnVK7H6DgvVeBlQFb1pHUc8xxScIW
/I3g1t8hHOyxMgtP69WIJhop661/Su7QMVqb9tKUSzaqg0tV4vajePj/K/sPm+/u
3NHnHT5smyVq+LmoylXYfua+k+SOijRzr8HeuFiux1r0jBs2FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWaCHra7+jmUW3JZulT5Vj1aBrMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZjRhNzQxNzktYmNhMi0z
ZWVkLTg4OTAtNjY4MWRlYWU0Y2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/wVxekYLfmPDzNXrya1uTjjaazkc4ij31jrqsWHJ0wWpnD0/omAYwv
UkfskERM/RpIbntz062Qx9+bKbgaShq94fG+TBG4svGo6q3tjP2OLUfRlc2Z/Wmb
BVDUXwQD0S7i1ntDsCmfcj46lld5oH2q66VB392sl5GH93CyQO/R0ADtVfNQQKzA
V2mfDSZ3IX55/UfWph779elVFXEqCzejjibNn+W17ZlVpeKOhbi/p7qISINCSGBv
QOk/kD4Uygexn4OjDoEzzTD4dQBaEm6wued3TDGGwtNTBLdk4mXxfnIRnUcDQNad
GqEiFRHxxdRDP+BN59NHKyeAk0bVGc0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:55:28 2025 by rpki-client