Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
File:                     25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json)
Hash identifier:          edV0gcF8TbIo1pRZXMMEIEzCYLt8NMvg64Z1k/Gjfh8=
Subject key identifier:   82:9C:5F:5C:7C:22:D7:E9:88:E6:48:BA:F2:AA:3C:FA:59:99:5C:04
Certificate issuer:       /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Certificate serial:       010D0C9F4328584A093A93E50D731EFFEF08F704
Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     32083
IP address blocks:        66.158.192.0/18 maxlen: 24
                          173.46.160.0/19 maxlen: 24
                          208.111.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:93:e5:0d:73:1e:ff:ef:08:f7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=2bd5744b-c261-4b0a-a24c-61b4b1518863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:7b:80:ce:19:4c:c1:e7:08:e4:ad:ee:54:
                    0a:06:09:7a:aa:a6:2d:e9:e9:2a:e2:a4:65:d2:7a:
                    ff:51:d7:40:a0:76:dc:c9:83:fe:34:1c:dc:4e:42:
                    67:0d:f7:6c:fe:b2:55:c9:13:78:10:02:d4:8b:b9:
                    75:eb:2e:93:9c:ef:d9:25:e9:2c:68:9b:19:eb:71:
                    9a:bb:4c:43:14:37:27:16:1b:be:a0:06:b2:30:1d:
                    4e:e6:d9:ee:e7:85:62:4a:66:57:1f:7b:6b:87:4c:
                    7e:00:26:d4:83:b0:81:dd:b8:a6:86:c2:f2:66:6b:
                    ba:b6:5f:22:15:55:b0:15:c2:0d:1a:a5:f5:55:b2:
                    18:61:1a:98:28:b4:23:ff:83:5c:d7:57:a8:49:34:
                    1e:61:a0:98:06:3c:6e:47:f5:25:b9:d2:1b:1e:85:
                    2e:ad:a9:ec:56:4c:03:e6:cc:13:df:57:24:ec:6b:
                    94:f4:87:92:56:c3:b0:eb:2f:d6:23:27:fd:4e:c7:
                    ad:d6:7d:23:dc:bb:e7:2f:2f:6a:09:9d:26:4c:65:
                    25:61:c8:74:b2:4e:82:88:85:ea:11:c2:e3:ee:d3:
                    e9:3a:a4:2d:78:97:4a:a2:e2:73:40:99:bc:58:a0:
                    de:a6:99:80:d9:87:97:f0:ac:e7:58:eb:fe:16:9e:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:5F:5C:7C:22:D7:E9:88:E6:48:BA:F2:AA:3C:FA:59:99:5C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.192.0/18
                  173.46.160.0/19
                  208.111.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:3d:66:ef:3b:5c:df:e2:d7:bc:86:df:51:cc:36:87:dc:
         a2:9d:4c:64:ac:96:27:b4:76:92:a1:c4:55:1d:63:4c:8e:51:
         fc:12:5e:e6:e8:f6:73:e1:34:67:b4:2b:e6:03:5f:8d:8c:e8:
         29:d5:b1:34:97:9a:31:fb:c0:1b:13:ef:f7:2e:14:3c:2d:7c:
         5c:62:3f:9b:1d:12:18:4b:69:c9:be:e4:82:cb:85:1f:bf:cd:
         4f:31:16:cc:57:b7:68:99:52:12:33:57:d6:25:5d:ff:fe:df:
         21:fa:8d:61:0f:19:0f:11:28:18:60:e0:1f:75:75:bc:ee:e8:
         16:c5:37:c0:b6:00:d8:a9:f8:2b:94:49:15:cc:09:1c:ed:a4:
         38:5a:b3:1f:46:d2:ac:0a:d2:53:a4:f1:a9:01:95:7f:2d:51:
         9f:73:50:ad:85:67:31:0f:ef:4f:2a:74:14:cf:0a:0a:92:d8:
         57:2d:43:16:86:85:c1:b5:86:c5:d8:11:13:f2:b9:04:30:92:
         ea:3e:54:f4:1d:41:f4:c8:5b:b5:8b:b4:7b:c4:33:3d:e6:94:
         38:78:b4:ee:98:b7:1c:cf:56:0b:bb:87:8f:0f:6f:9f:64:e1:
         31:ed:b3:6a:6b:bf:d0:af:3d:e5:f1:17:b7:88:64:91:48:fc:
         ec:51:af:34
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEoJOpPlDXMe/+8I9wQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjlkODJjNzEtMzY2YS00NjdmLTliNmMtMzY2N2QxYWU3
NjA1MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
MmJkNTc0NGItYzI2MS00YjBhLWEyNGMtNjFiNGIxNTE4ODYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBZ7gM4ZTMHnCOSt7lQKBgl6qqYt6ekq4qRl
0nr/UddAoHbcyYP+NBzcTkJnDfds/rJVyRN4EALUi7l16y6TnO/ZJeksaJsZ63Ga
u0xDFDcnFhu+oAayMB1O5tnu54ViSmZXH3trh0x+ACbUg7CB3bimhsLyZmu6tl8i
FVWwFcINGqX1VbIYYRqYKLQj/4Nc11eoSTQeYaCYBjxuR/UludIbHoUuransVkwD
5swT31ck7GuU9IeSVsOw6y/WIyf9Tset1n0j3LvnLy9qCZ0mTGUlYch0sk6CiIXq
EcLj7tPpOqQteJdKouJzQJm8WKDeppmA2YeX8KznWOv+Fp5JBwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIKcX1x8ItfpiOZIuvKqPPpZmVwEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4
MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3ZDFhZTc2MDUvMjUwNTlkOTktMmZhNS0z
YzI5LWFhZTctMDM2NTZkMmFiOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjlkODJjNzEtMzY2YS00NjdmLTli
NmMtMzY2N2QxYWU3NjA1L2Y5ZDgyYzcxLTM2NmEtNDY3Zi05YjZjLTM2NjdkMWFl
NzYwNS5jcmwwHwYDVR0jBBgwFoAUivmrnrZ2KLgxHuoH0zx32aUB93owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3
ZDFhZTc2MDUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGQp7AAwQF
rS6gAwQF0G8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAI2iPWbvO1zf4te8ht9RzDaH3KKdTGSslie0dpKh
xFUdY0yOUfwSXubo9nPhNGe0K+YDX42M6CnVsTSXmjH7wBsT7/cuFDwtfFxiP5sd
EhhLacm+5ILLhR+/zU8xFsxXt2iZUhIzV9YlXf/+3yH6jWEPGQ8RKBhg4B91dbzu
6BbFN8C2ANip+CuUSRXMCRztpDhasx9G0qwK0lOk8akBlX8tUZ9zUK2FZzEP708q
dBTPCgqS2FctQxaGhcG1hsXYERPyuQQwkuo+VPQdQfTIW7WLtHvEMz3mlDh4tO6Y
txzPVgu7h48Pb59k4THts2prv9CvPeXxF7eIZJFI/OxRrzQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:36 2025 by rpki-client