Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/61b19ede-9505-3572-bb7d-6961790e8797.roa
File:                     61b19ede-9505-3572-bb7d-6961790e8797.roa (raw, json)
Hash identifier:          6sl9HFTGGxIAJFHgmcR6gq3A7deB2SJTArt9109SnEU=
Subject key identifier:   F0:FD:26:5D:72:DF:2F:22:CC:09:B8:19:B2:7B:FB:4A:CC:47:45:E5
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F43285849DC72D92F80DD3F91B055CD00
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/61b19ede-9505-3572-bb7d-6961790e8797.roa
Signing time:             Thu 15 May 2025 12:03:04 +0000
ROA not before:           Thu 15 May 2025 12:03:04 +0000
ROA not after:            Wed 13 Aug 2025 12:03:04 +0000
asID:                     22709
IP address blocks:        66.110.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:72:d9:2f:80:dd:3f:91:b0:55:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: May 15 12:03:04 2025 GMT
            Not After : Aug 13 12:03:04 2025 GMT
        Subject: CN=289f144b-521f-49d0-aa49-542e4cec3b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:6b:c3:c6:8b:22:a1:02:08:f7:2e:71:3a:
                    bd:3f:44:ef:9f:69:4a:cc:38:03:8b:46:af:9e:87:
                    b9:fb:83:0c:b1:db:5f:f1:18:6c:ef:7a:bc:1b:ca:
                    3f:1a:99:ed:ba:4b:f5:65:67:5a:0d:b1:0d:21:a0:
                    98:b2:80:91:80:82:06:0e:ce:69:c4:28:4c:cd:d4:
                    45:60:25:0f:16:de:1a:ec:03:68:ce:1b:4a:28:7e:
                    05:70:9c:ab:88:51:30:75:44:cd:67:cf:8c:4e:f5:
                    af:8f:96:45:3f:69:a2:36:81:b8:bf:59:99:a0:0b:
                    a4:56:76:42:9b:af:67:2b:8f:fd:83:27:55:cb:6f:
                    58:78:15:84:c0:93:d8:60:78:d7:97:83:e3:a3:57:
                    6b:64:fa:f9:f9:27:2e:c1:76:6c:fc:00:11:06:19:
                    71:a9:90:b6:0f:20:f1:84:6f:46:d6:09:c3:c7:5b:
                    fb:75:f5:52:41:40:97:f0:3c:48:44:8c:e7:e4:f2:
                    50:87:07:13:f4:4e:2e:19:84:92:7f:f1:67:3b:6e:
                    38:07:dd:b0:fb:53:b1:2c:64:2d:94:fd:ea:ac:86:
                    a1:04:c1:7c:5e:82:18:18:be:6f:ab:de:94:54:d9:
                    85:4b:9b:ad:2d:7a:9b:c3:da:c9:7e:02:6e:59:7e:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:26:5D:72:DF:2F:22:CC:09:B8:19:B2:7B:FB:4A:CC:47:45:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/61b19ede-9505-3572-bb7d-6961790e8797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a7:fb:41:d6:0c:e7:58:39:b0:54:37:95:48:92:f1:41:1e:
         59:90:bb:96:83:89:70:21:31:db:0d:8b:39:1f:46:00:1d:ed:
         4b:51:44:87:37:92:b5:04:6e:b8:c0:b6:14:92:6b:db:88:47:
         b8:6a:d8:ac:bb:37:2c:a4:11:ab:f1:81:a2:5d:68:37:13:29:
         ce:22:9c:e7:f8:a9:cb:1d:a3:6d:06:92:64:0f:3b:30:1b:29:
         81:b8:6a:94:05:21:48:57:91:b2:96:36:31:e2:37:f6:37:f8:
         c9:a6:72:e1:79:13:78:e2:ba:d1:da:44:81:0b:d4:13:88:f6:
         62:85:9b:e5:3f:8f:37:d2:df:21:41:5f:81:37:06:a3:8b:a1:
         f5:d2:12:64:9f:8d:c5:2f:d0:77:37:5c:88:7a:c9:ed:74:08:
         3c:6c:ab:50:95:3e:30:68:6b:70:53:17:11:53:02:29:8f:05:
         ea:27:8e:ba:ed:14:bd:b6:18:6e:c1:be:a8:05:7c:5e:3f:e1:
         68:e9:c8:b7:65:bb:06:96:5d:d7:44:ba:b0:fe:22:8b:f0:b2:
         4c:28:8b:c3:da:80:94:64:25:f7:b2:7c:91:c0:4e:9b:9c:ad:
         53:53:a8:86:c4:7e:84:f4:7b:87:ef:93:6d:97:d9:8c:5f:83:
         52:39:5d:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncctkvgN0/kbBVzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1
ZmE3MB4XDTI1MDUxNTEyMDMwNFoXDTI1MDgxMzEyMDMwNFowLzEtMCsGA1UEAxMk
Mjg5ZjE0NGItNTIxZi00OWQwLWFhNDktNTQyZTRjZWMzYjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA671rw8aLIqECCPcucTq9P0Tvn2lKzDgDi0av
noe5+4MMsdtf8Rhs73q8G8o/Gpntukv1ZWdaDbENIaCYsoCRgIIGDs5pxChMzdRF
YCUPFt4a7ANozhtKKH4FcJyriFEwdUTNZ8+MTvWvj5ZFP2miNoG4v1mZoAukVnZC
m69nK4/9gydVy29YeBWEwJPYYHjXl4Pjo1drZPr5+ScuwXZs/AARBhlxqZC2DyDx
hG9G1gnDx1v7dfVSQUCX8DxIRIzn5PJQhwcT9E4uGYSSf/FnO244B92w+1OxLGQt
lP3qrIahBMF8XoIYGL5vq96UVNmFS5utLXqbw9rJfgJuWX6BUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPD9Jl1y3y8izAm4GbJ7+0rMR0XlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5
YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvNjFiMTllZGUtOTUwNS0z
NTcyLWJiN2QtNjk2MTc5MGU4Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2
MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi
NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw
OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSn+0HWDOdYObBUN5VIkvFBHlmQu5aDiXAhMdsNizkfRgAd7UtRRIc3
krUEbrjAthSSa9uIR7hq2Ky7NyykEavxgaJdaDcTKc4inOf4qcsdo20GkmQPOzAb
KYG4apQFIUhXkbKWNjHiN/Y3+MmmcuF5E3jiutHaRIEL1BOI9mKFm+U/jzfS3yFB
X4E3BqOLofXSEmSfjcUv0Hc3XIh6ye10CDxsq1CVPjBoa3BTFxFTAimPBeonjrrt
FL22GG7BvqgFfF4/4WjpyLdluwaWXddEurD+Iovwskwoi8PagJRkJfeyfJHATpuc
rVNTqIbEfoT0e4fvk22X2Yxfg1I5XXM=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:33 2025 by rpki-client