Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56868fde-0041-3429-846e-6c121a7d4844.roa
File:                     56868fde-0041-3429-846e-6c121a7d4844.roa (raw, json)
Hash identifier:          KfEiDekIqntUE8DVKo/S6AddtYgG3wJVGW69zn7bYlE=
Subject key identifier:   0F:76:1F:2A:63:AA:67:A2:82:47:E4:CC:F7:73:D2:C3:AB:E3:FE:BA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161E5DA8F842AFABEC7B840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56868fde-0041-3429-846e-6c121a7d4844.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        66.191.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:e5:da:8f:84:2a:fa:be:c7:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=46b7fdc3-75f2-4331-80dc-bc0566f5e6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:ca:b6:00:34:a9:1d:92:81:9c:a0:b1:1f:
                    d9:57:cd:77:a3:eb:01:67:f7:cf:8f:03:f8:a9:b1:
                    a3:06:04:c8:2b:25:0e:e2:3e:e0:3f:1c:dc:d0:2c:
                    34:e2:87:ae:65:0d:f2:2d:18:d7:04:5f:d0:72:d8:
                    1c:b9:cc:d0:3a:c8:de:31:36:ef:c6:37:4a:12:05:
                    ab:44:be:32:e2:13:01:92:ee:7c:37:65:bc:d8:64:
                    62:8d:a5:db:05:4c:70:cb:db:fb:6c:76:1e:00:3a:
                    33:cb:67:24:d5:75:f7:07:d5:52:f9:8d:58:83:67:
                    76:92:02:bc:8f:f9:5b:bd:70:ed:17:b3:74:26:cb:
                    1a:db:fa:4c:06:fe:e0:ae:25:2c:99:8a:be:1d:7c:
                    ef:1d:16:4a:58:06:fe:55:dd:d6:c8:c8:c2:0b:88:
                    92:0e:82:8b:43:fc:92:47:db:c8:c9:13:c9:b4:61:
                    b2:bc:4d:14:e7:7a:dd:d7:d6:9f:dd:36:d6:df:f4:
                    60:9d:1e:a3:bc:6c:82:10:09:e4:b2:cc:72:cb:db:
                    32:2f:19:e1:9a:a2:ad:80:e8:2e:6c:a3:a8:44:e7:
                    c7:ce:82:3d:50:da:04:61:80:a1:68:19:9a:85:5f:
                    a2:e8:12:06:a8:9d:b3:81:fa:c3:b2:c8:dc:b7:9b:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:1F:2A:63:AA:67:A2:82:47:E4:CC:F7:73:D2:C3:AB:E3:FE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56868fde-0041-3429-846e-6c121a7d4844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:99:32:01:6c:67:6d:b1:ff:fe:84:41:4e:b3:7c:fa:0e:66:
         d1:0d:38:9a:2e:54:ca:ee:70:50:56:a5:ff:42:37:39:c0:e5:
         5f:8f:26:f4:5c:a8:0b:bc:f5:da:6b:ab:91:a0:36:bd:23:b4:
         c7:b8:75:97:a4:d4:b1:ba:b5:54:c1:8d:6f:bf:0a:e7:bc:3e:
         46:15:aa:91:73:fe:19:b7:8a:fd:f2:e0:5c:2e:d8:57:2e:d3:
         99:0e:0e:43:1b:ff:10:23:87:66:66:c3:e6:ee:c4:8b:f7:c8:
         cd:91:fa:f8:6c:25:59:15:18:8f:5d:af:2b:9c:96:dc:05:dc:
         05:af:56:0f:4a:35:18:b5:7b:38:01:c6:5a:ee:e5:d3:22:a4:
         4f:d3:c4:f2:47:6b:ef:33:18:96:1c:3a:d3:98:54:b3:12:76:
         4e:0d:95:d7:5f:13:c4:72:a4:b0:9d:44:1b:e7:d7:56:f9:aa:
         fc:64:e5:9d:9e:eb:f2:85:9d:83:5b:4c:ee:a4:59:4a:e6:17:
         9d:83:3f:69:36:81:12:01:54:b5:52:be:6b:da:be:34:f3:b5:
         14:ef:2c:07:06:90:de:23:04:79:29:2b:fe:0c:1f:ec:d6:5e:
         88:e4:ba:0e:bf:32:9b:37:a3:78:52:27:3d:24:05:dc:6b:35:
         27:eb:67:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYeXaj4Qq+r7HuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
NDZiN2ZkYzMtNzVmMi00MzMxLTgwZGMtYmMwNTY2ZjVlNmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4rKtgA0qR2SgZygsR/ZV813o+sBZ/fPjwP4
qbGjBgTIKyUO4j7gPxzc0Cw04oeuZQ3yLRjXBF/QctgcuczQOsjeMTbvxjdKEgWr
RL4y4hMBku58N2W82GRijaXbBUxwy9v7bHYeADozy2ck1XX3B9VS+Y1Yg2d2kgK8
j/lbvXDtF7N0Jssa2/pMBv7griUsmYq+HXzvHRZKWAb+Vd3WyMjCC4iSDoKLQ/yS
R9vIyRPJtGGyvE0U53rd19af3TbW3/RgnR6jvGyCEAnkssxyy9syLxnhmqKtgOgu
bKOoROfHzoI9UNoEYYChaBmahV+i6BIGqJ2zgfrDssjct5sYjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA92HypjqmeigkfkzPdz0sOr4/66MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTY4NjhmZGUtMDA0MS0z
NDI5LTg0NmUtNmMxMjFhN2Q0ODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQr8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+ZMgFsZ22x//6EQU6zfPoOZtENOJouVMrucFBWpf9CNznA5V+PJvRc
qAu89dprq5GgNr0jtMe4dZek1LG6tVTBjW+/Cue8PkYVqpFz/hm3iv3y4Fwu2Fcu
05kODkMb/xAjh2Zmw+buxIv3yM2R+vhsJVkVGI9dryucltwF3AWvVg9KNRi1ezgB
xlru5dMipE/TxPJHa+8zGJYcOtOYVLMSdk4NlddfE8RypLCdRBvn11b5qvxk5Z2e
6/KFnYNbTO6kWUrmF52DP2k2gRIBVLVSvmvavjTztRTvLAcGkN4jBHkpK/4MH+zW
Xojkug6/Mps3o3hSJz0kBdxrNSfrZ5M=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:31 2025 by rpki-client