Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/153c4df0-efbf-39d3-b4bc-b27a5332b766.roa
File:                     153c4df0-efbf-39d3-b4bc-b27a5332b766.roa (raw, json)
Hash identifier:          Z0uJ+ClhvaUfZBN7zWBoUguJfDdwgi4ds22+aCodwx8=
Subject key identifier:   3C:21:17:FF:2E:C0:FB:A7:E3:20:08:FD:54:3A:C4:16:FD:55:69:27
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285849F17FC1DE54AAAAFEA28E4400
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/153c4df0-efbf-39d3-b4bc-b27a5332b766.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     13576
IP address blocks:        66.128.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c1:de:54:aa:aa:fe:a2:8e:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=bf8ab06f-b393-4536-8f25-5da34b5f9d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:ec:af:77:65:8a:64:4f:f8:af:ba:de:0f:
                    26:a6:51:0f:d9:7a:9c:29:ad:a8:d4:ab:96:77:60:
                    93:b6:35:13:62:b1:9d:b8:84:79:14:6e:74:7b:02:
                    df:f8:14:55:23:41:48:ac:dc:72:5a:f5:1c:b1:ad:
                    42:29:38:88:c9:32:97:ff:53:52:b5:77:b4:e1:07:
                    1e:60:2b:9b:1b:fa:aa:c1:50:37:69:7a:d7:06:12:
                    1e:38:2c:ca:ab:fc:fa:b2:e6:1a:8e:99:8c:23:f1:
                    ee:4e:2d:28:76:6d:ea:fb:64:0e:e4:1c:21:87:49:
                    b2:fc:30:81:b4:78:75:02:5d:22:e3:c4:b0:b7:5d:
                    2f:7d:ed:61:40:04:d3:88:f9:cc:81:8d:3b:1f:9e:
                    b8:b1:0d:fe:e8:c0:24:79:2f:18:d5:5e:c5:a1:df:
                    51:ec:67:a2:f8:dd:1c:30:57:00:b3:70:d5:58:53:
                    09:9f:d5:6f:22:1d:37:8b:84:25:57:11:13:f1:0f:
                    e7:38:30:28:5b:68:fc:d6:6b:9d:25:b6:7a:15:3d:
                    5a:a2:86:1c:58:27:b1:bc:92:22:1d:dc:ca:6f:b5:
                    2e:df:74:88:b9:4b:3a:c2:67:f7:d0:85:21:42:8e:
                    82:b0:fc:6f:8f:f7:10:10:82:75:52:fd:90:e8:1c:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:21:17:FF:2E:C0:FB:A7:E3:20:08:FD:54:3A:C4:16:FD:55:69:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/153c4df0-efbf-39d3-b4bc-b27a5332b766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:7d:b5:fe:32:20:59:e3:a3:33:92:08:d1:ce:7e:ef:d6:1f:
         1d:64:99:ed:f8:46:05:72:5f:25:95:54:0d:bc:2e:a5:ea:3c:
         ac:b1:64:ad:35:2c:08:99:6d:a5:ed:0a:33:90:86:be:bc:fa:
         be:76:4d:8d:c8:84:2f:db:f0:f3:35:c0:6b:5d:c3:4a:19:93:
         b7:9c:f1:87:a3:1b:28:81:32:b6:a4:f6:ff:d2:08:fe:83:7d:
         56:32:b9:4f:82:83:c6:71:2c:21:26:47:85:89:61:34:7d:91:
         7d:f0:89:95:48:ed:12:7e:da:b9:02:35:8f:4a:f1:42:e1:86:
         93:7f:5f:a7:5d:6e:f0:21:1f:35:37:28:63:6e:43:26:36:a8:
         0d:eb:0b:d6:60:88:2b:13:8c:49:40:bb:bb:9f:a8:8a:16:4f:
         d2:70:98:12:4b:dd:bb:ee:81:58:d5:22:f5:8c:05:a7:75:0a:
         a5:2e:6b:0d:df:de:34:c1:60:00:ca:9e:24:f6:8a:d1:e6:0e:
         df:69:a7:c8:8d:f8:cb:5d:90:be:27:a2:57:94:cd:19:98:9f:
         fc:8d:a1:2a:0c:bc:40:b8:89:e7:02:ab:12:6c:d0:24:30:a2:
         0b:01:6c:3d:05:91:5e:8e:97:c6:43:37:61:99:d7:20:9c:f5:
         47:ba:48:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8HeVKqq/qKORAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YmY4YWIwNmYtYjM5My00NTM2LThmMjUtNWRhMzRiNWY5ZDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRHsr3dlimRP+K+63g8mplEP2XqcKa2o1KuW
d2CTtjUTYrGduIR5FG50ewLf+BRVI0FIrNxyWvUcsa1CKTiIyTKX/1NStXe04Qce
YCubG/qqwVA3aXrXBhIeOCzKq/z6suYajpmMI/HuTi0odm3q+2QO5Bwhh0my/DCB
tHh1Al0i48Swt10vfe1hQATTiPnMgY07H564sQ3+6MAkeS8Y1V7Fod9R7Gei+N0c
MFcAs3DVWFMJn9VvIh03i4QlVxET8Q/nODAoW2j81mudJbZ6FT1aooYcWCexvJIi
HdzKb7Uu33SIuUs6wmf30IUhQo6CsPxvj/cQEIJ1Uv2Q6BzEJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwhF/8uwPun4yAI/VQ6xBb9VWknMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTUzYzRkZjAtZWZiZi0z
OWQzLWI0YmMtYjI3YTUzMzJiNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM19tf4yIFnjozOSCNHOfu/WHx1kme34RgVyXyWVVA28LqXqPKyxZK01
LAiZbaXtCjOQhr68+r52TY3IhC/b8PM1wGtdw0oZk7ec8YejGyiBMrak9v/SCP6D
fVYyuU+Cg8ZxLCEmR4WJYTR9kX3wiZVI7RJ+2rkCNY9K8ULhhpN/X6ddbvAhHzU3
KGNuQyY2qA3rC9ZgiCsTjElAu7ufqIoWT9JwmBJL3bvugVjVIvWMBad1CqUuaw3f
3jTBYADKniT2itHmDt9pp8iN+MtdkL4noleUzRmYn/yNoSoMvEC4iecCqxJs0CQw
ogsBbD0FkV6Ol8ZDN2GZ1yCc9Ue6SH4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:31 2025 by rpki-client