Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa
File:                     be06885a-4b98-309e-9449-a3394506a19d.roa (raw, json)
Hash identifier:          RMAbDJdYW98CXQ8RpwFjnVwfHmAd7akD4HogGYDJYmc=
Subject key identifier:   A8:3C:0C:22:C8:72:D1:D4:85:11:63:9B:F5:4E:A9:77:0E:00:62:35
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584A9BCB6E39BDF485CCDA293CE0
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     400610
IP address blocks:        66.219.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6e:39:bd:f4:85:cc:da:29:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=667e1a50-66b0-4c17-bc9b-6385619d32b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:67:0b:16:36:36:6e:00:9f:c3:cd:be:f7:
                    2d:04:f4:6d:fc:a2:8e:97:0e:1d:a1:16:35:75:85:
                    9f:1b:2e:29:07:ed:ad:50:3b:b3:08:5a:6c:75:fb:
                    8e:de:18:85:4f:1a:5f:50:1a:89:65:7e:af:73:58:
                    5b:df:d2:32:83:6b:35:37:35:be:8b:66:48:4d:28:
                    ea:36:06:7c:87:3e:77:f2:9a:be:4d:d6:cb:4e:ce:
                    a0:fe:fa:74:fa:bd:10:75:a6:4f:3f:12:10:4e:52:
                    9e:66:f5:73:44:4c:23:f4:7a:c0:92:4d:8a:55:c0:
                    a7:f8:b8:05:a2:12:d5:2a:10:53:7c:eb:5e:32:b0:
                    36:84:3e:01:a9:74:62:1b:c2:c9:e7:e2:86:62:0f:
                    b2:d2:25:6f:a0:54:31:ef:f4:f1:88:80:55:e0:d0:
                    18:b5:77:bc:27:68:6d:e7:b3:41:90:6f:21:67:3d:
                    07:f7:5c:a7:0d:09:72:2b:19:d8:84:58:0c:da:d5:
                    4e:67:98:45:32:6c:70:3b:e5:63:fd:8c:9d:c4:55:
                    df:a1:ba:ba:e9:fb:3c:2c:5f:f1:c7:3a:d3:44:cd:
                    5c:a0:fc:f8:0f:9e:23:d5:59:b8:26:22:f2:5a:4d:
                    69:ae:b3:cd:88:34:18:ee:b8:e7:9f:22:61:ca:7e:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3C:0C:22:C8:72:D1:D4:85:11:63:9B:F5:4E:A9:77:0E:00:62:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:89:18:67:e0:79:35:34:60:85:69:3e:2c:6a:85:8d:18:
         bb:78:c5:1c:67:2a:3a:4b:be:4e:99:99:87:bc:11:4a:da:e1:
         50:cc:4f:a1:f3:4e:2b:21:aa:cc:38:49:99:fc:09:ec:94:af:
         6c:00:d7:9e:37:08:52:c8:f5:a0:8d:fa:8a:81:e9:25:87:24:
         23:14:6a:9e:f0:bf:9a:37:05:a6:03:4b:70:de:f8:fe:01:b2:
         8d:dc:a8:d4:96:df:74:3b:62:e9:8a:aa:91:06:60:07:ca:ff:
         5c:45:3a:50:fc:e0:8d:e7:cc:a1:38:07:98:4b:38:bd:3b:75:
         da:47:a7:68:e0:13:aa:92:bd:98:0c:21:66:23:64:a7:4c:d5:
         c2:2b:94:fb:71:e4:bc:2c:9a:72:43:00:32:2b:20:2f:9f:85:
         69:41:ec:b6:e2:f7:3b:04:8f:f5:25:69:41:6d:8a:65:1d:ae:
         6b:2a:fd:69:a6:25:3f:1d:bc:91:15:6a:85:d7:1d:da:9b:43:
         90:a0:32:63:9f:08:3a:31:49:d6:a5:56:81:f0:f8:89:98:f7:
         0b:3a:7f:f9:12:ea:3e:c0:66:f4:0e:be:6b:bc:5e:cc:49:e7:
         b8:bd:68:72:03:bc:02:6a:6c:a9:ab:1c:3e:1d:04:8d:d3:36:
         7a:de:1f:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby245vfSFzNopPOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm
MmUzMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk
NjY3ZTFhNTAtNjZiMC00YzE3LWJjOWItNjM4NTYxOWQzMmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynVnCxY2Nm4An8PNvvctBPRt/KKOlw4doRY1
dYWfGy4pB+2tUDuzCFpsdfuO3hiFTxpfUBqJZX6vc1hb39Iyg2s1NzW+i2ZITSjq
NgZ8hz538pq+TdbLTs6g/vp0+r0QdaZPPxIQTlKeZvVzREwj9HrAkk2KVcCn+LgF
ohLVKhBTfOteMrA2hD4BqXRiG8LJ5+KGYg+y0iVvoFQx7/TxiIBV4NAYtXe8J2ht
57NBkG8hZz0H91ynDQlyKxnYhFgM2tVOZ5hFMmxwO+Vj/YydxFXfobq66fs8LF/x
xzrTRM1coPz4D54j1Vm4JiLyWk1prrPNiDQY7rjnnyJhyn67/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKg8DCLIctHUhRFjm/VOqXcOAGI1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1
NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYmUwNjg4NWEtNGI5OC0z
MDllLTk0NDktYTMzOTQ1MDZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5
YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4
ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi
YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnOiRhn4Hk1NGCFaT4saoWNGLt4xRxnKjpLvk6ZmYe8EUra4VDMT6Hz
Tishqsw4SZn8CeyUr2wA1543CFLI9aCN+oqB6SWHJCMUap7wv5o3BaYDS3De+P4B
so3cqNSW33Q7YumKqpEGYAfK/1xFOlD84I3nzKE4B5hLOL07ddpHp2jgE6qSvZgM
IWYjZKdM1cIrlPtx5LwsmnJDADIrIC+fhWlB7Lbi9zsEj/UlaUFtimUdrmsq/Wmm
JT8dvJEVaoXXHdqbQ5CgMmOfCDoxSdalVoHw+ImY9ws6f/kS6j7AZvQOvmu8XsxJ
57i9aHIDvAJqbKmrHD4dBI3TNnreH1Q=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:29 2025 by rpki-client