Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
File:                     43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json)
Hash identifier:          09jYn1UTDNELTxMLuQIKnCU+W8NJL2vyW5nLxWHcmps=
Subject key identifier:   30:A1:59:55:1F:D1:DC:B0:84:FC:21:94:DD:5A:3D:6E:64:2B:2A:FD
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285849BC74A4C95367427EC9F085A0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     10865
IP address blocks:        66.129.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a4:c9:53:67:42:7e:c9:f0:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=97cc18ae-18c1-474e-9d34-2d02c5848da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:71:58:fd:3c:c4:d9:f2:02:bb:f2:af:42:
                    11:a1:c4:e1:10:a0:fb:1e:d5:bb:c5:a4:94:d5:d5:
                    e0:3c:70:5f:e9:b4:45:7a:9c:8b:00:4a:b4:d5:c8:
                    db:90:a8:54:0b:62:60:e8:02:e0:94:14:48:32:7a:
                    b5:db:7d:98:84:5c:4d:5c:41:ae:f3:e0:1f:b0:6a:
                    21:5c:3c:b6:7b:ee:7d:1a:34:e4:31:00:eb:35:d1:
                    62:dd:9f:cd:33:4e:ad:8e:65:fb:af:cf:2c:87:07:
                    cd:ca:e5:b3:bd:ab:8e:26:94:d2:06:e2:9e:f5:81:
                    14:ca:dc:5a:a4:42:b3:aa:78:ba:4d:36:8e:83:10:
                    3c:10:25:ab:dd:ec:ca:3e:9a:f2:52:95:c4:50:1e:
                    66:68:ce:67:c7:3e:30:ad:be:60:09:7c:f4:1c:6e:
                    bc:93:db:49:d2:82:0b:82:a8:65:f8:b4:45:7e:c2:
                    38:f1:7a:b3:31:9c:60:2d:d6:40:ee:77:f4:bd:18:
                    b2:ed:ab:52:bd:fc:67:dc:c0:c4:de:63:16:da:f7:
                    ba:70:3c:78:af:57:2a:83:16:66:e2:81:b1:84:ba:
                    8f:e6:1d:95:2f:10:83:e0:38:c5:e4:61:c2:8a:cb:
                    48:69:d4:87:24:a3:50:a6:da:ee:d6:65:58:8a:f4:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A1:59:55:1F:D1:DC:B0:84:FC:21:94:DD:5A:3D:6E:64:2B:2A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:55:99:1b:1b:bc:29:a9:19:42:dd:4b:8f:f0:63:56:73:e1:
         49:59:13:38:3f:50:fa:2e:e4:05:5a:4a:60:29:e6:05:be:48:
         d9:ef:4a:ba:7b:e3:f3:98:c2:96:c2:24:60:8c:c1:11:c6:b9:
         67:74:25:81:52:08:ca:4e:46:81:a6:a1:35:f6:85:62:16:84:
         9f:c2:e7:91:49:4f:d1:14:31:1d:f1:b7:2a:53:81:ad:71:32:
         00:e1:42:b8:e6:b4:93:0f:5e:ac:6b:29:41:04:d8:98:56:99:
         4e:9c:e5:16:93:4f:79:90:f5:84:32:90:ba:3f:73:4d:2e:1d:
         1c:87:f8:98:a4:63:fe:a7:4b:5b:fb:04:01:b9:ba:ae:7a:52:
         fb:42:a8:f7:b9:2d:19:a9:73:9a:c1:17:37:23:b6:b0:e4:d2:
         71:78:4c:05:e3:2e:a3:51:45:cf:d7:70:58:e2:dc:2e:da:7a:
         1f:cf:56:bf:b7:a8:88:54:9d:3d:ec:2f:94:0c:e6:4f:26:5a:
         ed:b9:c6:2a:bc:c3:b9:ab:a8:fc:29:f0:74:e4:ca:0e:75:91:
         ab:09:55:45:18:9c:8a:77:3f:e7:8f:e5:a5:a5:93:38:cd:18:
         be:61:ad:62:00:c9:ae:c9:41:30:c3:14:fb:08:69:f0:40:e4:
         c6:dc:5d:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKTJU2dCfsnwhaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk
OTdjYzE4YWUtMThjMS00NzRlLTlkMzQtMmQwMmM1ODQ4ZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1NxWP08xNnyArvyr0IRocThEKD7HtW7xaSU
1dXgPHBf6bRFepyLAEq01cjbkKhUC2Jg6ALglBRIMnq1232YhFxNXEGu8+AfsGoh
XDy2e+59GjTkMQDrNdFi3Z/NM06tjmX7r88shwfNyuWzvauOJpTSBuKe9YEUytxa
pEKzqni6TTaOgxA8ECWr3ezKPpryUpXEUB5maM5nxz4wrb5gCXz0HG68k9tJ0oIL
gqhl+LRFfsI48XqzMZxgLdZA7nf0vRiy7atSvfxn3MDE3mMW2ve6cDx4r1cqgxZm
4oGxhLqP5h2VLxCD4DjF5GHCistIadSHJKNQptru1mVYivRaLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDChWVUf0dywhPwhlN1aPW5kKyr9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNDNhZjQzMWUtN2IwMy0z
ZWM2LWJlMzItNmY5MDJmYzU1YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQoGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlVmRsbvCmpGULdS4/wY1Zz4UlZEzg/UPou5AVaSmAp5gW+SNnvSrp7
4/OYwpbCJGCMwRHGuWd0JYFSCMpORoGmoTX2hWIWhJ/C55FJT9EUMR3xtypTga1x
MgDhQrjmtJMPXqxrKUEE2JhWmU6c5RaTT3mQ9YQykLo/c00uHRyH+JikY/6nS1v7
BAG5uq56UvtCqPe5LRmpc5rBFzcjtrDk0nF4TAXjLqNRRc/XcFji3C7aeh/PVr+3
qIhUnT3sL5QM5k8mWu25xiq8w7mrqPwp8HTkyg51kasJVUUYnIp3P+eP5aWlkzjN
GL5hrWIAya7JQTDDFPsIafBA5MbcXfk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:00:47 2025 by rpki-client