Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e0065593-a0dc-3814-a196-9e1681e7b548.roa
File:                     e0065593-a0dc-3814-a196-9e1681e7b548.roa (raw, json)
Hash identifier:          dGCvQeY9ksZ39r9LgwL+YAFDDAA+Rl5V7kBfvMc3O18=
Subject key identifier:   4B:E8:8F:54:A2:7F:07:16:3A:49:29:00:19:60:C9:EE:04:13:05:37
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A78E96C1C11E4B8C38400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e0065593-a0dc-3814-a196-9e1681e7b548.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.169.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:78:e9:6c:1c:11:e4:b8:c3:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7bc5c672-3779-4d4c-b20e-32628d93a65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:ed:a3:4b:68:9c:c9:de:8f:8d:30:f4:2e:
                    80:b1:6e:b9:e9:d8:0a:8e:2f:12:97:0c:bc:b5:11:
                    ee:da:77:3f:58:46:05:4a:e2:ef:79:90:26:30:70:
                    43:2e:3a:df:66:26:66:90:b0:52:85:9d:5c:66:4a:
                    61:7b:0a:70:92:27:de:72:ce:e6:d2:6c:80:8d:0c:
                    be:39:a5:d9:5f:ca:8c:69:cd:e8:b4:a8:6b:18:2c:
                    1b:c9:41:6e:2c:74:92:00:31:33:4a:79:9c:12:82:
                    98:58:cb:c2:5e:f2:87:24:cd:1a:7c:18:f6:7c:e4:
                    91:0f:cb:a4:af:2a:de:5b:48:ff:e0:c6:59:91:c5:
                    6b:b0:ed:69:64:98:7a:ab:0e:ec:31:dc:81:fd:f5:
                    41:d6:37:a6:f6:eb:b2:f9:36:13:9a:15:a9:fe:89:
                    df:aa:f0:9f:89:3d:54:ec:a1:3b:ff:13:77:f5:14:
                    9d:38:3b:d2:17:06:ed:6a:55:03:86:2c:50:d8:06:
                    6f:3f:ee:8c:30:4e:94:15:a5:15:dd:f6:50:28:10:
                    7b:79:92:f3:17:91:67:de:2f:10:7d:0e:7c:fd:23:
                    fd:ba:e7:d7:ae:0b:aa:4d:2f:5e:0c:e6:9c:15:10:
                    79:f5:83:65:d6:73:59:6c:1c:c7:d7:64:ed:9c:4d:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:8F:54:A2:7F:07:16:3A:49:29:00:19:60:C9:EE:04:13:05:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e0065593-a0dc-3814-a196-9e1681e7b548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.169.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:39:cc:96:9b:ca:c9:c7:6c:66:17:4d:21:29:4e:33:9d:
         a7:93:8d:8f:8a:86:59:f9:2f:73:d0:4c:55:3d:53:c1:04:fd:
         d1:a8:08:d7:87:2d:b4:e2:05:49:ae:e9:32:ce:05:30:a7:56:
         77:d2:a7:2e:03:b4:6f:c9:3c:54:b2:24:d4:f2:2d:83:3e:ff:
         42:07:1d:87:c4:63:ad:1f:20:74:2f:21:53:0c:0d:95:a9:d7:
         a0:e2:ca:37:d1:53:e1:fa:9c:14:6a:64:33:e1:8e:7a:40:b5:
         65:e9:ef:93:e7:eb:c2:44:b5:74:07:ff:9b:1e:52:a7:be:9b:
         ca:a7:90:5a:11:31:e4:af:b8:ea:f1:20:f9:35:68:d4:ea:30:
         5c:26:bb:5a:6c:61:69:90:bc:7d:68:aa:50:50:2d:75:fb:d1:
         9a:0b:03:64:05:20:35:39:8b:c2:a9:6f:cb:08:56:ba:fa:16:
         e8:c0:d2:26:9c:69:99:89:3f:e4:b1:df:27:d4:8a:65:4a:87:
         48:31:47:66:fc:ad:2a:66:f6:1a:d1:ed:a0:48:49:02:5a:06:
         c7:4b:11:5f:c6:6a:41:ba:f5:e4:14:d5:e4:af:8a:25:5f:2b:
         bc:0f:1f:9b:3d:fa:75:81:ff:58:21:56:1c:01:24:55:dc:8b:
         2b:89:13:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCnjpbBwR5LjDhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
N2JjNWM2NzItMzc3OS00ZDRjLWIyMGUtMzI2MjhkOTNhNjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5bto0tonMnej40w9C6AsW656dgKji8Slwy8
tRHu2nc/WEYFSuLveZAmMHBDLjrfZiZmkLBShZ1cZkphewpwkifecs7m0myAjQy+
OaXZX8qMac3otKhrGCwbyUFuLHSSADEzSnmcEoKYWMvCXvKHJM0afBj2fOSRD8uk
ryreW0j/4MZZkcVrsO1pZJh6qw7sMdyB/fVB1jem9uuy+TYTmhWp/onfqvCfiT1U
7KE7/xN39RSdODvSFwbtalUDhixQ2AZvP+6MME6UFaUV3fZQKBB7eZLzF5Fn3i8Q
fQ58/SP9uufXrguqTS9eDOacFRB59YNl1nNZbBzH12TtnE3VYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvoj1SifwcWOkkpABlgye4EEwU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTAwNjU1OTMtYTBkYy0z
ODE0LWExOTYtOWUxNjgxZTdiNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfJOcyWm8rJx2xmF00hKU4znaeTjY+Khln5L3PQTFU9U8EE/dGoCNeH
LbTiBUmu6TLOBTCnVnfSpy4DtG/JPFSyJNTyLYM+/0IHHYfEY60fIHQvIVMMDZWp
16DiyjfRU+H6nBRqZDPhjnpAtWXp75Pn68JEtXQH/5seUqe+m8qnkFoRMeSvuOrx
IPk1aNTqMFwmu1psYWmQvH1oqlBQLXX70ZoLA2QFIDU5i8Kpb8sIVrr6FujA0iac
aZmJP+Sx3yfUimVKh0gxR2b8rSpm9hrR7aBISQJaBsdLEV/GakG69eQU1eSviiVf
K7wPH5s9+nWB/1ghVhwBJFXciyuJE68=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:43 2025 by rpki-client