Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa
File:                     daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa (raw, json)
Hash identifier:          UaEXUwqJxastwcb534V3w10dMx8u2TlmT1jnZQgkN6E=
Subject key identifier:   D0:21:AB:C1:5A:C4:EA:D6:FD:05:E6:AE:CB:1F:60:0A:68:0E:6B:26
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBC69D407F7C2F7D939080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        66.249.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:c6:9d:40:7f:7c:2f:7d:93:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=d6e7d7f2-3462-43a6-8d1c-5408d829e393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:04:d6:14:28:cb:7b:cf:66:41:99:0f:ea:
                    37:9d:95:78:a8:cd:25:ca:de:c6:ca:d2:a8:97:7f:
                    7c:17:9f:ac:3c:5d:b4:d6:3e:aa:54:06:7b:ca:0b:
                    4e:b5:8a:c6:68:d6:e2:a8:e6:44:25:b3:dd:63:5b:
                    62:49:51:27:71:6e:b8:8f:c7:3a:a4:bd:6b:0e:0d:
                    d0:42:1f:6b:20:33:a0:80:93:8a:43:9f:32:25:c3:
                    dc:f5:90:ef:54:86:65:d8:f3:74:3c:52:3e:e4:68:
                    49:0c:89:85:c9:b5:ca:17:22:fd:01:28:9d:5b:7c:
                    86:25:49:2d:09:df:11:a3:99:45:11:2a:a3:95:3f:
                    71:10:50:1e:93:60:20:a8:da:ad:c1:86:68:d3:db:
                    f4:59:f5:aa:ad:c9:af:12:38:db:2c:18:e8:4c:55:
                    e8:cd:eb:eb:e6:34:51:84:8d:a2:db:47:9e:a7:1a:
                    36:a8:4f:e2:37:5c:ae:ef:38:a3:bb:6a:2e:4f:6f:
                    14:63:d6:82:69:ce:3e:bb:ee:c9:e5:32:84:85:5b:
                    9e:f0:e9:81:0b:b6:1a:30:3f:ce:38:48:ed:2b:14:
                    b4:3e:b1:65:d8:ae:30:e0:54:38:d4:89:e4:25:f7:
                    bf:65:b1:df:c5:73:c3:84:eb:cc:20:71:8f:b5:42:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:AB:C1:5A:C4:EA:D6:FD:05:E6:AE:CB:1F:60:0A:68:0E:6B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:a1:de:55:19:9c:a2:9a:8f:b9:63:82:0a:f1:76:62:d0:
         d2:12:8e:98:2a:91:fa:bd:9f:3a:45:e3:c4:c4:1d:51:1f:18:
         d8:54:29:88:79:be:42:e6:ed:9d:a1:7e:bd:92:c7:aa:7e:e2:
         ad:f2:36:ca:c9:6b:7e:70:63:d2:89:63:2a:47:7c:23:ce:b1:
         79:97:c8:66:aa:5f:82:1b:7f:da:26:98:dc:81:63:1d:30:80:
         06:ac:82:60:30:48:50:57:a1:c8:ca:fb:c4:43:a7:8d:be:b2:
         ed:24:62:59:86:ed:0f:85:8b:52:09:ed:5c:62:35:fa:b1:97:
         23:48:71:34:df:00:81:9f:18:29:ad:0b:9e:6e:ac:3e:ed:d2:
         65:77:cf:9a:83:03:b7:f7:92:76:7f:b5:c9:6c:2b:0a:3e:d4:
         3a:42:02:f0:2c:88:ac:34:e7:8f:2a:b7:2d:a9:c3:56:be:0b:
         1d:8b:03:f5:ef:ed:32:c5:02:ea:e3:41:f6:ce:dc:ce:41:77:
         09:91:d2:42:5c:eb:14:d5:f3:ec:12:24:57:20:91:3d:19:d5:
         3f:8d:94:58:41:e5:f9:4b:35:5f:e8:8e:7e:46:c6:b9:81:cb:
         4d:e1:ef:01:cc:18:b8:71:26:c8:06:58:35:ad:a9:d7:3a:48:
         90:de:1e:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28adQH98L32TkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZDZlN2Q3ZjItMzQ2Mi00M2E2LThkMWMtNTQwOGQ4MjllMzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+cE1hQoy3vPZkGZD+o3nZV4qM0lyt7GytKo
l398F5+sPF201j6qVAZ7ygtOtYrGaNbiqOZEJbPdY1tiSVEncW64j8c6pL1rDg3Q
Qh9rIDOggJOKQ58yJcPc9ZDvVIZl2PN0PFI+5GhJDImFybXKFyL9ASidW3yGJUkt
Cd8Ro5lFESqjlT9xEFAek2AgqNqtwYZo09v0WfWqrcmvEjjbLBjoTFXozevr5jRR
hI2i20eepxo2qE/iN1yu7ziju2ouT28UY9aCac4+u+7J5TKEhVue8OmBC7YaMD/O
OEjtKxS0PrFl2K4w4FQ41InkJfe/ZbHfxXPDhOvMIHGPtUKIdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAhq8FaxOrW/QXmrssfYApoDmsmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGFmN2M4ZDctZTJhNi0z
YmE4LWE4NGEtMDUyNTEwY2I0NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvlQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByDod5VGZyimo+5Y4IK8XZi0NISjpgqkfq9nzpF48TEHVEfGNhUKYh5
vkLm7Z2hfr2Sx6p+4q3yNsrJa35wY9KJYypHfCPOsXmXyGaqX4Ibf9ommNyBYx0w
gAasgmAwSFBXocjK+8RDp42+su0kYlmG7Q+Fi1IJ7VxiNfqxlyNIcTTfAIGfGCmt
C55urD7t0mV3z5qDA7f3knZ/tclsKwo+1DpCAvAsiKw0548qty2pw1a+Cx2LA/Xv
7TLFAurjQfbO3M5BdwmR0kJc6xTV8+wSJFcgkT0Z1T+NlFhB5flLNV/ojn5GxrmB
y03h7wHMGLhxJsgGWDWtqdc6SJDeHhA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:23 2025 by rpki-client