Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c/9faa3dc5-1613-300f-9109-5e5f7a85c44d.roa
File:                     9faa3dc5-1613-300f-9109-5e5f7a85c44d.roa (raw, json)
Hash identifier:          zT8hEj1SuMCuhgOOB/+1sSvq63JC9JTRARvIjNeSWNI=
Subject key identifier:   BE:C3:79:93:6C:9B:79:16:44:D1:91:37:A5:3D:5D:1E:A5:19:8F:16
Certificate issuer:       /CN=36c82b88-107c-497c-be5f-55db1ebe002c
Certificate serial:       010D0C9F43285849D42FA5CCC5E88DE04712B5C0
Authority key identifier: 5E:F6:15:52:70:AE:75:5A:A2:A5:F7:9A:49:F8:2E:12:06:15:28:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c/9faa3dc5-1613-300f-9109-5e5f7a85c44d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     206283
IP address blocks:        66.37.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c/36c82b88-107c-497c-be5f-55db1ebe002c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c/36c82b88-107c-497c-be5f-55db1ebe002c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a5:cc:c5:e8:8d:e0:47:12:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c82b88-107c-497c-be5f-55db1ebe002c
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=0096347f-3d3d-4eae-890a-381d30f70ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:2f:5e:e0:c0:ba:c9:f5:3f:83:e8:46:4e:
                    16:53:99:15:d4:08:25:e6:bb:4a:6f:60:a2:a9:39:
                    83:a3:f1:88:ba:85:11:bd:e0:76:83:14:0d:68:bc:
                    26:b3:80:65:24:09:ee:5d:2b:1a:43:a1:ee:a6:76:
                    f3:e1:d0:32:1b:84:bd:8b:87:6c:36:81:18:b2:5d:
                    0d:5a:1c:76:84:df:9c:3f:73:db:e0:b1:17:86:7f:
                    1d:2c:03:e6:dd:b8:b3:39:4a:f3:85:48:b7:64:da:
                    00:e0:7b:f7:3f:28:8e:35:e3:3b:0c:c8:f7:e2:81:
                    87:0d:c5:06:84:6f:d4:1c:18:ff:39:dc:89:e7:43:
                    25:4e:d2:5e:33:e4:51:69:19:5f:42:a7:12:bd:66:
                    84:c6:9a:96:a4:57:fc:f9:16:d9:1e:6c:83:2b:e7:
                    27:82:d3:40:66:13:e5:84:89:9f:2c:05:64:76:3a:
                    ef:80:48:72:60:81:c2:bb:bc:40:03:88:0e:f1:60:
                    06:f7:2c:7b:4f:91:b5:48:9c:30:e0:e0:a7:39:7f:
                    a5:3b:4c:52:c5:c6:3d:49:47:67:ec:37:3c:ac:05:
                    f5:06:c2:51:8e:26:c6:0e:73:c3:93:eb:5d:45:4e:
                    85:b3:a4:06:33:36:04:a4:ee:0b:2a:65:be:06:e1:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:79:93:6C:9B:79:16:44:D1:91:37:A5:3D:5D:1E:A5:19:8F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c/9faa3dc5-1613-300f-9109-5e5f7a85c44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c/36c82b88-107c-497c-be5f-55db1ebe002c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:F6:15:52:70:AE:75:5A:A2:A5:F7:9A:49:F8:2E:12:06:15:28:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c82b88-107c-497c-be5f-55db1ebe002c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ab:21:46:3f:7a:30:dc:58:a3:90:6f:ef:fa:80:28:2c:e9:
         77:4d:5c:4a:7a:a5:9b:12:bd:fd:bc:a2:68:ed:48:68:5d:e8:
         7b:08:b5:0a:29:ec:8c:28:b7:1f:e6:8c:ef:7d:c0:62:1c:42:
         cb:bc:77:cf:6d:0a:57:ab:6a:09:7d:26:87:1a:10:9d:ef:2e:
         99:e3:5d:de:51:76:41:05:e3:f8:18:4e:1d:53:7c:25:1d:b7:
         7d:f0:60:9a:cb:64:b6:2f:71:0f:f2:6f:c5:14:c6:c1:69:52:
         d1:f4:c8:ec:b0:30:31:9e:97:98:50:ef:b9:15:f2:73:22:d0:
         e3:d1:71:ce:b2:a6:fd:54:2c:35:f2:18:3d:9e:02:25:2c:ef:
         70:22:ac:1f:a1:29:ef:05:5e:76:65:74:ae:19:b8:0c:05:5d:
         5e:bc:65:ba:e8:75:d2:48:a9:64:8f:25:60:9f:11:4f:ec:71:
         d8:00:dc:b4:6d:dd:bd:ca:5e:66:49:87:12:db:16:01:62:17:
         f0:09:54:b7:03:2f:0e:67:1f:4d:51:77:ad:29:a4:e9:35:41:
         45:ac:e7:98:ab:3c:fa:64:47:8a:4f:8d:9b:03:1f:2c:2b:63:
         88:63:7c:5f:98:8b:45:ae:ac:a2:e9:19:6e:e9:7b:29:2e:e4:
         f8:e3:82:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6XMxeiN4EcStcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZjODJiODgtMTA3Yy00OTdjLWJlNWYtNTVkYjFlYmUw
MDJjMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MDA5NjM0N2YtM2QzZC00ZWFlLTg5MGEtMzgxZDMwZjcwYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv8vXuDAusn1P4PoRk4WU5kV1Agl5rtKb2Ci
qTmDo/GIuoURveB2gxQNaLwms4BlJAnuXSsaQ6Hupnbz4dAyG4S9i4dsNoEYsl0N
Whx2hN+cP3Pb4LEXhn8dLAPm3bizOUrzhUi3ZNoA4Hv3PyiONeM7DMj34oGHDcUG
hG/UHBj/OdyJ50MlTtJeM+RRaRlfQqcSvWaExpqWpFf8+RbZHmyDK+cngtNAZhPl
hImfLAVkdjrvgEhyYIHCu7xAA4gO8WAG9yx7T5G1SJww4OCnOX+lO0xSxcY9SUdn
7Dc8rAX1BsJRjibGDnPDk+tdRU6Fs6QGMzYEpO4LKmW+BuF+iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7DeZNsm3kWRNGRN6U9XR6lGY8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zNmM4
MmI4OC0xMDdjLTQ5N2MtYmU1Zi01NWRiMWViZTAwMmMvOWZhYTNkYzUtMTYxMy0z
MDBmLTkxMDktNWU1ZjdhODVjNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzZjODJiODgtMTA3Yy00OTdjLWJl
NWYtNTVkYjFlYmUwMDJjLzM2YzgyYjg4LTEwN2MtNDk3Yy1iZTVmLTU1ZGIxZWJl
MDAyYy5jcmwwHwYDVR0jBBgwFoAUXvYVUnCudVqipfeaSfguEgYVKEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zNmM4MmI4OC0xMDdjLTQ5N2MtYmU1Zi01NWRi
MWViZTAwMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiVvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEurIUY/ejDcWKOQb+/6gCgs6XdNXEp6pZsSvf28omjtSGhd6HsItQop
7Iwotx/mjO99wGIcQsu8d89tCleragl9JocaEJ3vLpnjXd5RdkEF4/gYTh1TfCUd
t33wYJrLZLYvcQ/yb8UUxsFpUtH0yOywMDGel5hQ77kV8nMi0OPRcc6ypv1ULDXy
GD2eAiUs73AirB+hKe8FXnZldK4ZuAwFXV68ZbroddJIqWSPJWCfEU/scdgA3LRt
3b3KXmZJhxLbFgFiF/AJVLcDLw5nH01Rd60ppOk1QUWs55irPPpkR4pPjZsDHywr
Y4hjfF+Yi0WurKLpGW7peyku5Pjjgi4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:17:00 2025 by rpki-client