Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4c6c27e-6dc7-3ec7-96b1-56e3d09dfa15.roa
File:                     c4c6c27e-6dc7-3ec7-96b1-56e3d09dfa15.roa (raw, json)
Hash identifier:          pIkuEozY20E7GDsK5FEM5NlgzZY3xrzXTenXAHGd2TE=
Subject key identifier:   4E:B3:D2:00:05:F7:40:6F:3F:57:8C:35:48:C8:2B:6D:67:D7:47:6B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BBF454BD401187FD9708A0980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4c6c27e-6dc7-3ec7-96b1-56e3d09dfa15.roa
Signing time:             Thu 21 Aug 2025 08:07:11 +0000
ROA not before:           Thu 21 Aug 2025 08:07:11 +0000
ROA not after:            Wed 19 Nov 2025 09:07:11 +0000
asID:                     3257
IP address blocks:        66.93.70.0/24 maxlen: 24
                          66.93.83.0/24 maxlen: 24
                          66.253.46.0/24 maxlen: 24
                          69.17.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:45:4b:d4:01:18:7f:d9:70:8a:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 08:07:11 2025 GMT
            Not After : Nov 19 09:07:11 2025 GMT
        Subject: CN=3e1ea527-1cc3-4db2-8727-e737c49787ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:a5:dc:80:86:8a:cd:66:eb:ae:a2:0e:a3:
                    2a:92:07:f0:1c:7d:50:80:de:51:90:74:14:b3:e5:
                    3d:d8:00:05:fa:80:40:f7:f3:80:54:7f:0b:03:04:
                    d1:4c:a3:dd:3a:ed:85:b0:cd:a8:75:ef:54:9d:48:
                    77:c7:ea:e3:dd:cf:a3:01:9b:80:93:ab:ee:86:19:
                    8f:99:3b:9f:fe:89:37:31:70:86:14:c0:c8:65:2a:
                    cd:d5:78:61:e6:5c:30:cf:94:1b:fd:b5:5c:d3:4d:
                    b4:5b:88:55:43:60:7a:77:3d:5a:34:42:bf:e2:56:
                    fb:4f:52:7d:44:a4:ad:1a:c3:fc:7b:14:d2:db:fe:
                    90:0a:da:7e:2a:6a:2c:67:1b:2b:d8:a9:d5:61:1b:
                    22:a6:e9:1c:f8:49:bf:2d:44:c0:b4:46:f4:2a:d9:
                    4f:ab:a7:16:52:d1:83:b6:40:dd:be:1e:14:ab:f4:
                    74:ef:fa:be:53:44:a5:80:1a:e2:32:1d:0b:58:de:
                    e8:7b:b5:47:bb:50:e7:a4:e2:ab:28:92:b1:6f:8f:
                    4f:6a:7f:0f:c3:c1:44:44:3e:74:77:d4:e7:cd:fd:
                    51:b5:e5:fd:b9:00:d7:86:f3:9c:1e:dd:f0:65:d3:
                    5d:c5:40:35:21:27:89:5a:f4:8d:40:61:95:bc:35:
                    5c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:D2:00:05:F7:40:6F:3F:57:8C:35:48:C8:2B:6D:67:D7:47:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4c6c27e-6dc7-3ec7-96b1-56e3d09dfa15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.70.0/24
                  66.93.83.0/24
                  66.253.46.0/24
                  69.17.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:51:65:db:45:de:c5:fb:82:da:79:ab:a2:1c:c1:87:19:51:
         c1:bc:bc:7e:70:c1:2b:1f:4e:ed:2b:4a:9f:2a:96:5d:b6:a5:
         49:d4:01:2f:7c:3d:1e:a0:65:e6:df:19:bd:9f:2d:d6:c1:47:
         d3:e2:79:7d:ef:0d:c7:85:20:f7:21:55:9d:15:4a:23:21:4d:
         90:bf:cc:10:44:85:69:01:10:d0:59:7c:e9:32:77:f7:46:ed:
         c9:16:2b:70:7b:17:d5:0c:8a:8a:1b:66:a9:07:a8:c3:50:b6:
         f9:28:7b:ba:73:21:5b:b6:02:9c:63:5a:05:b3:25:4d:a4:aa:
         fb:e3:c8:44:d6:62:8e:cf:98:4a:52:2d:33:3b:eb:0c:7d:76:
         3b:53:ec:ad:fe:24:e8:c3:48:31:a4:43:9f:2c:e3:f7:4a:a1:
         c2:2d:84:96:3c:f2:c9:c9:7e:59:d5:28:53:6c:d1:f5:1c:01:
         28:a3:ef:e3:9b:a7:72:0e:1a:04:63:fe:1e:d4:a3:3b:03:c1:
         8b:cd:b1:c7:f3:ab:8a:77:98:ef:c0:ed:3f:d1:99:ab:79:12:
         27:42:03:90:3f:72:98:53:83:eb:42:12:0a:12:b1:94:76:01:
         d2:ee:46:4d:d2:69:f5:22:fe:9e:b7:12:67:7a:48:9f:e0:91:
         ec:e9:e1:eb
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEu/RUvUARh/2XCKCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDgyMTA4MDcxMVoXDTI1MTExOTA5MDcxMVowLzEtMCsGA1UEAxMk
M2UxZWE1MjctMWNjMy00ZGIyLTg3MjctZTczN2M0OTc4N2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNil3ICGis1m666iDqMqkgfwHH1QgN5RkHQU
s+U92AAF+oBA9/OAVH8LAwTRTKPdOu2FsM2ode9UnUh3x+rj3c+jAZuAk6vuhhmP
mTuf/ok3MXCGFMDIZSrN1Xhh5lwwz5Qb/bVc0020W4hVQ2B6dz1aNEK/4lb7T1J9
RKStGsP8exTS2/6QCtp+KmosZxsr2KnVYRsipukc+Em/LUTAtEb0KtlPq6cWUtGD
tkDdvh4Uq/R07/q+U0SlgBriMh0LWN7oe7VHu1DnpOKrKJKxb49Pan8Pw8FERD50
d9Tnzf1RteX9uQDXhvOcHt3wZdNdxUA1ISeJWvSNQGGVvDVcjQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFE6z0gAF90BvP1eMNUjIK21n10drMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzRjNmMyN2UtNmRjNy0z
ZWM3LTk2YjEtNTZlM2QwOWRmYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQl1GAwQA
Ql1TAwQAQv0uAwQARRFgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJVRZdtF3sX7gtp5q6IcwYcZUcG8vH5w
wSsfTu0rSp8qll22pUnUAS98PR6gZebfGb2fLdbBR9PieX3vDceFIPchVZ0VSiMh
TZC/zBBEhWkBENBZfOkyd/dG7ckWK3B7F9UMioobZqkHqMNQtvkoe7pzIVu2Apxj
WgWzJU2kqvvjyETWYo7PmEpSLTM76wx9djtT7K3+JOjDSDGkQ58s4/dKocIthJY8
8snJflnVKFNs0fUcASij7+Obp3IOGgRj/h7UozsDwYvNscfzq4p3mO/A7T/Rmat5
EidCA5A/cphTg+tCEgoSsZR2AdLuRk3SafUi/p63Emd6SJ/gkezp4es=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:52 2025 by rpki-client