Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/aab91842-7d76-3325-b89a-5f01e757b2ff.roa
File:                     aab91842-7d76-3325-b89a-5f01e757b2ff.roa (raw, json)
Hash identifier:          HDnp7GRO53Kfg4l30xfHEpGUSNeKnds6JNj23kxlEjw=
Subject key identifier:   55:9B:D9:BE:3B:52:28:67:1F:D8:1A:81:CE:4F:9C:B2:90:47:94:45
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B047C008597651A9365EA0C80
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/aab91842-7d76-3325-b89a-5f01e757b2ff.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13916
IP address blocks:        66.159.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:00:85:97:65:1a:93:65:ea:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=d4deeb4f-3f74-466a-8ed2-1fd1dfbce834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:e4:ae:d6:3e:6a:c9:e8:4a:bf:4a:6a:a2:
                    fc:da:68:c7:f1:b3:9a:1a:63:1e:45:65:8d:9f:f0:
                    3e:32:8e:8a:7b:38:46:4a:9a:27:f6:3d:bc:b5:de:
                    fb:7c:9b:b1:38:55:86:9d:0c:a8:81:31:34:63:9e:
                    b5:e9:38:67:34:d4:57:9e:42:37:22:4b:26:68:ef:
                    0a:b1:41:f2:46:a6:4e:e9:70:fc:7a:08:24:21:b0:
                    4f:98:4f:77:09:72:b3:f7:98:fa:f3:33:4b:28:2d:
                    5f:2a:19:8b:4a:e3:83:d9:03:b2:fc:5a:08:f8:cf:
                    cf:46:4c:37:b1:ab:3c:b7:90:63:32:61:42:95:dc:
                    2a:25:30:f9:6c:da:7b:0c:fe:08:fc:bc:00:1b:80:
                    4f:e3:77:e4:4d:ab:bf:89:a2:42:d6:d1:f7:79:c0:
                    54:c1:61:56:cf:16:54:33:ab:5b:36:b7:17:3e:18:
                    59:c6:f1:af:58:ff:1a:59:bc:94:55:ab:06:7c:a6:
                    d9:e3:32:40:4c:88:45:5e:45:18:45:61:84:02:ff:
                    57:00:a2:95:af:3e:6e:e1:4b:c7:a8:73:8d:1b:36:
                    5d:28:c6:10:a1:64:29:70:5e:5f:54:eb:1a:66:56:
                    4a:bf:b7:23:f0:6a:3f:cd:cf:78:d3:e3:07:aa:93:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:D9:BE:3B:52:28:67:1F:D8:1A:81:CE:4F:9C:B2:90:47:94:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/aab91842-7d76-3325-b89a-5f01e757b2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ba:be:64:71:4d:49:b6:f2:cb:9d:9e:91:3f:69:dc:86:d7:
         d5:5a:12:dd:b3:92:ac:1b:58:b1:82:75:cf:16:97:0f:f9:35:
         cc:01:90:a2:f9:74:c1:7d:12:63:bb:d8:28:d0:a7:90:19:73:
         ea:74:5e:85:52:43:67:2d:a9:e8:ab:2a:82:7f:ed:eb:aa:ca:
         07:66:b5:7c:44:8c:2e:5b:5c:5d:84:c7:35:8d:eb:97:24:eb:
         5b:93:34:2b:64:8d:ad:a8:e1:be:11:7d:92:cd:86:08:83:f0:
         8d:b3:9f:c2:b0:e9:95:14:93:80:22:a7:19:df:2a:49:d3:97:
         b1:41:6c:38:ee:a4:1a:61:a1:3f:52:a9:00:1e:31:d4:3f:df:
         1e:63:be:59:ed:54:a0:77:f0:11:82:51:e5:62:1f:39:d8:72:
         b3:53:ff:af:46:da:a3:cd:fe:12:2b:64:7b:62:90:36:73:fa:
         4f:b3:31:ff:58:72:4f:28:6c:33:de:08:d6:ca:f3:96:e8:31:
         50:76:59:14:31:82:9c:96:21:32:91:f2:40:1a:89:62:61:30:
         14:b0:c3:97:35:78:e7:bd:c9:1e:41:e2:93:bb:49:1a:33:e5:
         ea:a1:ec:0a:a8:35:48:84:c1:7c:b7:35:4f:b5:43:c0:45:e6:
         fe:ff:65:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfACFl2Uak2XqDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZDRkZWViNGYtM2Y3NC00NjZhLThlZDItMWZkMWRmYmNlODM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtDkrtY+asnoSr9KaqL82mjH8bOaGmMeRWWN
n/A+Mo6KezhGSpon9j28td77fJuxOFWGnQyogTE0Y5616ThnNNRXnkI3IksmaO8K
sUHyRqZO6XD8eggkIbBPmE93CXKz95j68zNLKC1fKhmLSuOD2QOy/FoI+M/PRkw3
sas8t5BjMmFCldwqJTD5bNp7DP4I/LwAG4BP43fkTau/iaJC1tH3ecBUwWFWzxZU
M6tbNrcXPhhZxvGvWP8aWbyUVasGfKbZ4zJATIhFXkUYRWGEAv9XAKKVrz5u4UvH
qHONGzZdKMYQoWQpcF5fVOsaZlZKv7cj8Go/zc940+MHqpNdlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWb2b47UihnH9gagc5PnLKQR5RFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYWFiOTE4NDItN2Q3Ni0z
MzI1LWI4OWEtNWYwMWU3NTdiMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp/lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGm6vmRxTUm28sudnpE/adyG19VaEt2zkqwbWLGCdc8Wlw/5NcwBkKL5
dMF9EmO72CjQp5AZc+p0XoVSQ2ctqeirKoJ/7euqygdmtXxEjC5bXF2ExzWN65ck
61uTNCtkja2o4b4RfZLNhgiD8I2zn8Kw6ZUUk4AipxnfKknTl7FBbDjupBphoT9S
qQAeMdQ/3x5jvlntVKB38BGCUeViHznYcrNT/69G2qPN/hIrZHtikDZz+k+zMf9Y
ck8obDPeCNbK85boMVB2WRQxgpyWITKR8kAaiWJhMBSww5c1eOe9yR5B4pO7SRoz
5eqh7AqoNUiEwXy3NU+1Q8BF5v7/ZY4=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:30:31 2025 by rpki-client