Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
File:                     5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa (raw, json)
Hash identifier:          sQS/Y1P2Vfx01ptxIN/gJB6slRq92Lhtk2+Ivi3jXFA=
Subject key identifier:   A6:5F:22:49:E6:66:7E:E5:13:09:5B:E2:80:21:B9:E3:36:BD:F7:D6
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849DC8FB15766EDF1EEEA13DA80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        66.22.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b1:57:66:ed:f1:ee:ea:13:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=6a9dce0a-efbf-4c68-a398-2cc11a3732e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:0d:3c:3d:dd:a6:d9:67:02:4d:0c:80:c1:
                    7c:49:b1:db:ef:32:9a:e7:d6:19:b0:35:76:00:9c:
                    13:1b:10:ae:79:67:26:e8:03:97:64:ef:43:f4:19:
                    ec:04:33:d7:a7:cc:0b:e4:8a:89:85:19:4e:84:66:
                    82:03:ad:15:76:60:25:d5:7f:df:a5:4c:51:93:2b:
                    81:42:d1:02:c2:5f:57:02:a6:f0:70:4e:dc:b8:b5:
                    83:25:ff:26:e6:ac:15:90:49:93:40:fb:d5:48:60:
                    b4:7a:21:29:9e:73:50:3f:40:df:3c:de:13:db:f3:
                    90:e7:ba:0f:65:9c:7c:8b:9e:84:dd:57:b1:e6:c3:
                    bf:d6:dd:0a:7b:3c:f0:3e:b5:2d:51:d7:41:1a:b5:
                    ac:97:d9:c1:6a:e9:ac:48:cc:fa:a0:a3:14:97:bd:
                    6a:dd:7c:7c:dd:34:08:08:8f:9a:dd:3a:14:2f:5d:
                    ec:00:f0:c9:f2:c6:ee:b3:78:e7:40:76:f1:de:3b:
                    21:7e:6d:e3:ba:c3:85:74:2e:63:1d:6a:23:89:01:
                    55:b4:c8:91:1a:7e:25:8f:5d:22:bd:70:3f:60:91:
                    41:29:92:2a:a7:d4:25:ae:18:c3:75:0c:96:47:ea:
                    32:eb:0a:b9:7d:08:99:a9:88:3e:d0:20:66:7f:7e:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5F:22:49:E6:66:7E:E5:13:09:5B:E2:80:21:B9:E3:36:BD:F7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:29:22:fb:a1:7e:3e:9b:2b:92:67:79:3f:38:f5:2d:56:
         08:53:c7:23:3e:50:df:5d:f1:c9:7b:52:5f:b9:7e:12:bb:81:
         41:3d:55:d9:59:ae:ec:d1:53:54:1a:cb:c8:12:75:3a:73:5d:
         62:d2:2a:8f:68:6b:cf:e5:98:45:77:89:9a:2f:69:55:0a:6b:
         71:05:6c:eb:94:ea:5f:48:bb:39:37:f7:c6:45:b5:13:4c:ce:
         60:dc:2d:44:80:6e:eb:f0:b0:2e:e8:ec:7f:5c:f7:36:af:18:
         8e:f0:2d:d1:0d:cb:76:53:b5:e2:0d:7c:da:d4:be:08:c7:41:
         89:b4:70:54:fb:98:c2:10:85:db:2e:0e:84:20:ed:a7:04:e3:
         2b:23:55:2e:94:f7:a1:2b:71:5d:69:92:8d:2b:ea:fe:07:41:
         17:42:f9:e2:40:15:b9:49:fd:6c:20:97:63:7a:81:d0:87:12:
         65:ca:20:6d:72:f3:c9:4e:f5:87:ac:37:ed:d4:2e:d2:6a:9c:
         c9:86:c2:60:0b:8f:f8:d6:ef:b2:f6:5d:05:7b:ad:8a:02:5a:
         c5:a0:f9:3b:73:73:da:e1:63:c5:a0:25:05:f1:65:f1:1e:d9:
         43:bc:5e:0e:03:86:81:6d:bb:7f:95:20:9c:23:10:4c:ba:a5:
         44:f2:93:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7FXZu3x7uoT2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
NmE5ZGNlMGEtZWZiZi00YzY4LWEzOTgtMmNjMTFhMzczMmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh60NPD3dptlnAk0MgMF8SbHb7zKa59YZsDV2
AJwTGxCueWcm6AOXZO9D9BnsBDPXp8wL5IqJhRlOhGaCA60VdmAl1X/fpUxRkyuB
QtECwl9XAqbwcE7cuLWDJf8m5qwVkEmTQPvVSGC0eiEpnnNQP0DfPN4T2/OQ57oP
ZZx8i56E3Vex5sO/1t0KezzwPrUtUddBGrWsl9nBaumsSMz6oKMUl71q3Xx83TQI
CI+a3ToUL13sAPDJ8sbus3jnQHbx3jshfm3jusOFdC5jHWojiQFVtMiRGn4lj10i
vXA/YJFBKZIqp9QlrhjDdQyWR+oy6wq5fQiZqYg+0CBmf34yGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZfIknmZn7lEwlb4oAhueM2vffWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvNWE0ZjZjOGItY2EzNS0z
MDU2LTk4YzMtZjg4YjBiMWI2MzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG4KSL7oX4+myuSZ3k/OPUtVghTxyM+UN9d8cl7Ul+5fhK7gUE9VdlZ
ruzRU1Qay8gSdTpzXWLSKo9oa8/lmEV3iZovaVUKa3EFbOuU6l9Iuzk398ZFtRNM
zmDcLUSAbuvwsC7o7H9c9zavGI7wLdENy3ZTteINfNrUvgjHQYm0cFT7mMIQhdsu
DoQg7acE4ysjVS6U96ErcV1pko0r6v4HQRdC+eJAFblJ/Wwgl2N6gdCHEmXKIG1y
88lO9YesN+3ULtJqnMmGwmALj/jW77L2XQV7rYoCWsWg+Ttzc9rhY8WgJQXxZfEe
2UO8Xg4DhoFtu3+VIJwjEEy6pUTyk5Q=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:27 2025 by rpki-client