Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
File:                     b33af0fc-e9a0-358c-8666-2e266d81251f.roa (raw, json)
Hash identifier:          y8r0tv25a7PEXn+Iq+vNhoB53NC6f+2k3KTNdwZ+ydI=
Subject key identifier:   2E:56:BA:7F:C8:FF:A1:84:EF:5E:50:67:CA:A9:EE:FA:9C:49:4D:4E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A1730111E99888648784FAA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     6939
IP address blocks:        216.66.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:11:1e:99:88:86:48:78:4f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=d2b46622-710c-482c-9354-19a77fa2d9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4f:bc:38:02:8a:16:32:45:a6:b3:67:fb:e2:
                    cd:cb:65:23:28:bf:92:d6:e1:ac:c8:b0:77:6a:b3:
                    d3:b7:c1:c9:fe:35:ab:26:12:2f:ec:b7:f1:d2:fd:
                    2f:ca:87:ec:ee:cb:9f:f4:1e:1d:36:2d:53:2b:2d:
                    ec:90:94:80:f1:0d:33:24:ea:a7:e5:f0:83:f4:2e:
                    10:a8:69:04:fb:f8:12:47:77:b0:8a:0a:12:c8:af:
                    e1:b9:12:34:c8:3a:5a:63:55:8b:68:91:70:2f:7a:
                    b8:23:8f:9e:3d:00:f8:86:de:c7:3b:32:31:cd:3d:
                    5b:1b:26:f6:37:91:18:e5:b8:43:2c:d1:cb:46:a4:
                    33:dc:6c:77:a5:54:e4:23:09:7b:01:79:19:a3:80:
                    aa:ab:f3:54:91:98:3b:29:10:15:ab:f8:26:97:bc:
                    ab:b6:68:f6:01:1c:86:b7:c3:09:68:b5:b6:cd:e8:
                    ce:95:14:de:b2:47:9a:41:21:99:d8:54:96:60:60:
                    77:a8:16:48:5f:ee:f0:04:8e:fb:75:a5:6f:34:02:
                    f8:ca:8b:3e:49:d6:ff:3a:84:d6:3c:09:e1:7e:26:
                    bc:b6:d2:fd:c8:cc:e3:1d:1a:10:9c:0c:e8:3c:14:
                    bd:33:30:ad:b9:c7:fc:bd:4f:60:e4:b9:75:c2:8f:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:BA:7F:C8:FF:A1:84:EF:5E:50:67:CA:A9:EE:FA:9C:49:4D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:9c:58:28:2b:00:d4:db:7e:cb:e5:d8:9f:cc:1f:1b:28:
         09:d1:be:94:6b:c1:7a:ac:26:49:44:a6:42:84:da:ba:5a:70:
         97:24:55:96:af:35:c2:c2:2b:4c:1a:ac:c8:0a:17:bc:cf:2a:
         5f:33:b4:aa:c3:fc:69:8d:60:be:22:39:66:74:78:1c:07:3c:
         88:b1:b7:c1:cf:3f:e7:1a:65:ee:5c:d0:87:8e:ba:6e:e0:b3:
         ef:a4:05:9c:b7:01:da:88:cf:44:c1:71:cc:d5:52:2a:dc:3e:
         81:50:be:36:78:36:3e:99:0a:50:9d:26:c6:3c:d1:66:88:80:
         21:6c:90:24:8e:5f:66:de:7c:cc:fd:d3:27:ca:34:d9:79:fa:
         9d:48:22:f0:b0:44:be:2b:9b:05:3b:58:ef:e4:ae:ce:62:1a:
         5d:5e:10:70:9c:67:62:1d:4a:11:e1:2e:b3:53:e2:81:8a:e7:
         6d:a1:8f:35:b9:6c:e7:74:f9:ef:3e:6e:38:ca:08:02:5c:82:
         15:18:7c:80:78:48:01:53:38:b9:a7:fc:72:32:92:b2:0c:f5:
         38:1e:37:a3:c1:1c:e8:c5:0b:53:30:04:36:96:b2:77:41:a9:
         3d:4c:99:9c:33:60:7e:43:75:61:73:ad:df:a7:7a:76:09:55:
         f0:70:45:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMBEemYiGSHhPqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk
ZDJiNDY2MjItNzEwYy00ODJjLTkzNTQtMTlhNzdmYTJkOWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30+8OAKKFjJFprNn++LNy2UjKL+S1uGsyLB3
arPTt8HJ/jWrJhIv7Lfx0v0vyofs7suf9B4dNi1TKy3skJSA8Q0zJOqn5fCD9C4Q
qGkE+/gSR3ewigoSyK/huRI0yDpaY1WLaJFwL3q4I4+ePQD4ht7HOzIxzT1bGyb2
N5EY5bhDLNHLRqQz3Gx3pVTkIwl7AXkZo4Cqq/NUkZg7KRAVq/gml7yrtmj2ARyG
t8MJaLW2zejOlRTeskeaQSGZ2FSWYGB3qBZIX+7wBI77daVvNAL4yos+Sdb/OoTW
PAnhfia8ttL9yMzjHRoQnAzoPBS9MzCtucf8vU9g5Ll1wo8DPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5Wun/I/6GE715QZ8qp7vqcSU1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjMzYWYwZmMtZTlhMC0z
NThjLTg2NjYtMmUyNjZkODEyNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2EIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2CnFgoKwDU237L5difzB8bKAnRvpRrwXqsJklEpkKE2rpacJckVZav
NcLCK0warMgKF7zPKl8ztKrD/GmNYL4iOWZ0eBwHPIixt8HPP+caZe5c0IeOum7g
s++kBZy3AdqIz0TBcczVUircPoFQvjZ4Nj6ZClCdJsY80WaIgCFskCSOX2befMz9
0yfKNNl5+p1IIvCwRL4rmwU7WO/krs5iGl1eEHCcZ2IdShHhLrNT4oGK522hjzW5
bOd0+e8+bjjKCAJcghUYfIB4SAFTOLmn/HIykrIM9TgeN6PBHOjFC1MwBDaWsndB
qT1MmZwzYH5DdWFzrd+nenYJVfBwRWo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:03 2025 by rpki-client