Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/c36233d7-5966-3536-923c-9a7d1cf31774.roa
File:                     c36233d7-5966-3536-923c-9a7d1cf31774.roa (raw, json)
Hash identifier:          8BWsFzPyDkud1NxQnRfkmNEuKujt8gJY0XFn78Mhaa8=
Subject key identifier:   05:2B:83:B8:7E:E6:8E:BA:EB:50:73:72:53:DF:A6:6F:9D:63:E3:B6
Certificate issuer:       /CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
Certificate serial:       010D0C9F4328584BB45D2F77891F6B00A23A0040
Authority key identifier: EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/c36233d7-5966-3536-923c-9a7d1cf31774.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     398229
IP address blocks:        66.54.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:2f:77:89:1f:6b:00:a2:3a:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=84de81f0-1351-4969-9748-6b7ab892696c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:89:90:74:06:13:38:1b:09:f7:e2:f7:72:
                    cd:5e:a5:d0:76:2f:ce:25:3d:c8:54:13:85:c3:6f:
                    d5:02:d1:85:bb:30:8e:13:dc:4b:d4:d2:ae:d1:4d:
                    7f:ed:91:b0:ef:39:62:38:19:c5:f7:65:12:76:64:
                    bc:17:35:61:5e:04:b6:09:2c:9c:b2:d9:27:40:77:
                    c6:fd:bd:39:ae:0f:9a:97:e9:48:7f:a9:32:ef:29:
                    2d:4c:30:1f:9c:5f:87:3e:94:4d:f1:93:c7:f8:29:
                    d1:18:a9:1c:6f:1f:52:43:d7:3f:ef:87:4f:b1:7e:
                    a9:d2:07:93:52:98:79:60:7f:43:91:26:40:53:bc:
                    d4:4d:ec:5c:e2:cc:9b:43:74:0f:47:2f:1b:ea:b7:
                    30:b5:3d:62:c5:f5:6f:6a:c8:63:bb:31:10:50:68:
                    e9:05:4c:2f:81:50:87:49:22:f9:d5:fb:a6:21:37:
                    07:97:fb:d6:cb:04:36:b1:b3:96:0a:be:a8:59:56:
                    39:0c:f8:db:35:02:5f:c3:6d:3b:86:a8:a5:fa:e6:
                    ae:ef:11:ec:db:08:10:f9:43:76:9f:fe:e6:52:67:
                    d1:da:f0:af:c8:00:f7:3d:e7:78:30:34:9c:b6:31:
                    0f:3a:78:e5:c0:bb:97:62:76:ce:46:11:70:72:e4:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:83:B8:7E:E6:8E:BA:EB:50:73:72:53:DF:A6:6F:9D:63:E3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/c36233d7-5966-3536-923c-9a7d1cf31774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl

            X509v3 Authority Key Identifier:
                keyid:EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:e2:da:0b:8e:6c:5a:fd:95:1a:87:b1:a9:d0:5f:ae:66:
         9e:dc:9e:9a:43:db:07:6c:c9:cc:b1:f6:12:7e:7d:94:37:50:
         74:62:8c:15:44:91:ee:0b:05:cb:07:46:76:b9:99:36:c6:ab:
         03:5c:25:93:65:22:1f:28:80:a3:f2:9b:dc:4a:26:76:80:10:
         68:c7:40:b6:e4:8d:5d:83:66:a6:a4:94:ce:51:c2:2e:63:46:
         95:3c:c9:72:07:fd:16:79:f6:ae:5e:5b:55:56:fe:f8:dd:dc:
         da:1c:c7:a2:55:ce:7f:eb:16:65:ee:28:62:05:c7:21:8d:de:
         50:6d:3c:5a:58:75:12:71:12:41:0f:f3:55:63:52:f9:2a:7b:
         50:32:64:0d:12:11:f2:2c:c0:67:56:46:d3:dc:78:39:07:9d:
         74:4b:99:ab:51:4b:dc:3e:b3:41:99:01:4a:dd:e1:df:20:2b:
         48:57:91:0e:26:0b:65:c7:2c:55:39:14:8d:60:71:3a:5e:b7:
         40:0a:d9:25:3a:e0:fd:67:f4:11:10:2c:18:a1:22:c1:77:a9:
         88:6f:d6:d3:54:59:c0:5c:a0:d1:4f:09:eb:c9:1d:05:f2:05:
         73:af:3f:18:48:2d:49:e5:c6:0c:2e:57:1d:46:78:77:be:be:
         a6:3e:ca:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XS93iR9rAKI6AEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJlZDYxYTEtZTFjZC00MGY0LWFlMDQtYTZhN2EyNDI0
OGViMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
ODRkZTgxZjAtMTM1MS00OTY5LTk3NDgtNmI3YWI4OTI2OTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBuJkHQGEzgbCffi93LNXqXQdi/OJT3IVBOF
w2/VAtGFuzCOE9xL1NKu0U1/7ZGw7zliOBnF92USdmS8FzVhXgS2CSycstknQHfG
/b05rg+al+lIf6ky7yktTDAfnF+HPpRN8ZPH+CnRGKkcbx9SQ9c/74dPsX6p0geT
Uph5YH9DkSZAU7zUTexc4sybQ3QPRy8b6rcwtT1ixfVvashjuzEQUGjpBUwvgVCH
SSL51fumITcHl/vWywQ2sbOWCr6oWVY5DPjbNQJfw207hqil+uau7xHs2wgQ+UN2
n/7mUmfR2vCvyAD3Ped4MDSctjEPOnjlwLuXYnbORhFwcuTkuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUrg7h+5o6661BzclPfpm+dY+O2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMmVk
NjFhMS1lMWNkLTQwZjQtYWUwNC1hNmE3YTI0MjQ4ZWIvYzM2MjMzZDctNTk2Ni0z
NTM2LTkyM2MtOWE3ZDFjZjMxNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzJlZDYxYTEtZTFjZC00MGY0LWFl
MDQtYTZhN2EyNDI0OGViLzMyZWQ2MWExLWUxY2QtNDBmNC1hZTA0LWE2YTdhMjQy
NDhlYi5jcmwwHwYDVR0jBBgwFoAU6s76TpE3y7D/7nnl6oDKXIrs73UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMmVkNjFhMS1lMWNkLTQwZjQtYWUwNC1hNmE3
YTI0MjQ4ZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjZqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/y4toLjmxa/ZUah7Gp0F+uZp7cnppD2wdsycyx9hJ+fZQ3UHRijBVE
ke4LBcsHRna5mTbGqwNcJZNlIh8ogKPym9xKJnaAEGjHQLbkjV2DZqaklM5Rwi5j
RpU8yXIH/RZ59q5eW1VW/vjd3Nocx6JVzn/rFmXuKGIFxyGN3lBtPFpYdRJxEkEP
81VjUvkqe1AyZA0SEfIswGdWRtPceDkHnXRLmatRS9w+s0GZAUrd4d8gK0hXkQ4m
C2XHLFU5FI1gcTpet0AK2SU64P1n9BEQLBihIsF3qYhv1tNUWcBcoNFPCevJHQXy
BXOvPxhILUnlxgwuVx1GeHe+vqY+yrA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:41 2025 by rpki-client