Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa
File:                     0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa (raw, json)
Hash identifier:          pqhOyhR/CECCVwb+WW1xWryAeBAzBEGnnF8doh3qPsA=
Subject key identifier:   88:33:75:C3:FB:B7:7C:46:7E:65:D7:A3:85:81:64:34:0F:95:44:1F
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584A7780A6D4AD1F2B55B7DF9680
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     1403
IP address blocks:        66.158.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a6:d4:ad:1f:2b:55:b7:df:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=78e3e245-3feb-4c8c-a20a-c2435d6277ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:67:8b:52:f1:d0:be:f0:6e:53:43:1d:c5:
                    7b:fa:64:1a:84:89:da:6a:43:07:43:39:44:df:8c:
                    1f:83:67:97:00:ac:85:c0:15:b7:4f:60:b6:da:7c:
                    be:67:48:28:c6:b7:46:ed:e4:cd:52:a9:e9:3a:93:
                    51:ab:31:78:e4:8a:42:a0:c3:07:2f:fc:2d:ee:d6:
                    65:45:6d:3d:27:f8:7f:d0:eb:b7:d5:81:48:da:53:
                    28:89:c9:1b:94:cf:11:d6:55:48:af:39:9b:c6:2e:
                    84:f9:e7:5e:3f:b3:02:4f:7c:82:98:01:3a:4d:8a:
                    82:8d:95:5d:77:22:81:9a:80:23:4a:78:6a:d8:d0:
                    2b:1a:11:1b:81:40:75:a0:b4:a0:10:6a:e9:5f:18:
                    84:2e:0e:91:47:17:0f:39:00:a5:79:e8:e0:51:68:
                    2b:16:c1:74:9b:e0:24:a9:07:e8:4b:a8:0b:62:59:
                    54:68:67:b7:0a:97:8f:84:c7:5c:28:d0:2e:cd:eb:
                    3d:4d:5d:f2:26:cc:63:4b:a3:33:34:a8:53:55:37:
                    f7:6c:90:d4:44:54:45:54:9d:da:25:85:ff:cf:51:
                    b9:3f:85:80:e5:e7:1c:be:4f:c9:f9:c8:d5:e5:4a:
                    9d:bb:8e:e6:cb:85:da:d7:fe:92:6c:18:2b:64:4b:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:75:C3:FB:B7:7C:46:7E:65:D7:A3:85:81:64:34:0F:95:44:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:f9:01:47:16:de:ef:ca:17:f7:57:28:61:78:42:49:26:
         a1:e1:63:27:b1:78:76:af:6e:4f:6d:fc:e2:7e:16:2e:53:d4:
         d5:43:4b:08:6c:74:e4:d5:b7:ab:06:c0:82:1e:5e:7c:b9:c3:
         35:f9:1d:2f:3b:79:b2:39:9b:e1:81:2f:45:b8:d6:79:a1:8a:
         27:a3:97:5a:8b:f8:4d:6d:a7:6e:aa:2d:3f:3b:ff:e0:44:22:
         97:53:d5:1a:ba:d6:ca:ac:cd:3c:78:43:4e:db:57:4f:d3:34:
         66:69:fe:4f:d6:02:d9:ab:b7:2e:a0:bb:84:69:03:04:c5:a3:
         27:65:27:24:ce:91:07:7b:20:24:f6:78:b4:79:c1:78:be:1d:
         ca:a7:62:58:07:2b:4a:3a:03:c4:ae:e6:22:16:0b:15:42:f0:
         1d:85:83:95:db:64:35:6b:6f:24:6e:55:fb:2d:4a:26:d9:7d:
         20:3b:7d:a2:b5:ed:af:8f:f8:57:98:53:62:0b:df:69:e2:ae:
         20:ab:a0:eb:f8:57:f4:09:e2:f9:63:6e:16:56:3f:a7:11:e2:
         e7:bf:18:c6:b7:7e:07:55:77:02:e0:fb:d8:45:c6:53:01:45:
         55:98:74:99:16:19:e8:4d:f7:84:9a:7f:02:c5:02:11:21:2d:
         84:64:a9:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKbUrR8rVbffloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
NzhlM2UyNDUtM2ZlYi00YzhjLWEyMGEtYzI0MzVkNjI3N2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZBni1Lx0L7wblNDHcV7+mQahInaakMHQzlE
34wfg2eXAKyFwBW3T2C22ny+Z0goxrdG7eTNUqnpOpNRqzF45IpCoMMHL/wt7tZl
RW09J/h/0Ou31YFI2lMoickblM8R1lVIrzmbxi6E+edeP7MCT3yCmAE6TYqCjZVd
dyKBmoAjSnhq2NArGhEbgUB1oLSgEGrpXxiELg6RRxcPOQCleejgUWgrFsF0m+Ak
qQfoS6gLYllUaGe3CpePhMdcKNAuzes9TV3yJsxjS6MzNKhTVTf3bJDURFRFVJ3a
JYX/z1G5P4WA5eccvk/J+cjV5Uqdu47my4Xa1/6SbBgrZEtc0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgzdcP7t3xGfmXXo4WBZDQPlUQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMGVmNzIyOGUtYWIyNC0z
YWMzLThmZGYtMTJlNzU2YmI4YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp6UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpk+QFHFt7vyhf3VyhheEJJJqHhYyexeHavbk9t/OJ+Fi5T1NVDSwhs
dOTVt6sGwIIeXny5wzX5HS87ebI5m+GBL0W41nmhiiejl1qL+E1tp26qLT87/+BE
IpdT1Rq61sqszTx4Q07bV0/TNGZp/k/WAtmrty6gu4RpAwTFoydlJyTOkQd7ICT2
eLR5wXi+HcqnYlgHK0o6A8Su5iIWCxVC8B2Fg5XbZDVrbyRuVfstSibZfSA7faK1
7a+P+FeYU2IL32niriCroOv4V/QJ4vljbhZWP6cR4ue/GMa3fgdVdwLg+9hFxlMB
RVWYdJkWGehN94SafwLFAhEhLYRkqUE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:43 2025 by rpki-client