Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/eb714302-493d-348d-ac6c-5ea1b9e26f6e.roa
File:                     eb714302-493d-348d-ac6c-5ea1b9e26f6e.roa (raw, json)
Hash identifier:          nhR9oDpIPQRr7oDN62bKxyHNgthkXXPHTbvT9vgy1Wk=
Subject key identifier:   70:A8:6D:86:01:27:1C:9F:7F:36:47:76:6E:23:70:30:95:D6:B9:48
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584A8C70C5C521B01C39F79B7A00
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/eb714302-493d-348d-ac6c-5ea1b9e26f6e.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     393262
IP address blocks:        66.198.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c5:c5:21:b0:1c:39:f7:9b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=b551e28e-7245-4e28-880a-73c1b2918a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:fa:7a:83:53:71:33:bb:b8:bd:29:0c:65:
                    08:05:b5:04:13:69:e6:0b:fc:bd:4b:2d:da:b5:5f:
                    e1:86:3f:fb:8a:9f:2c:1a:d9:3e:83:e0:88:e6:e0:
                    70:75:60:9a:18:06:26:3f:6a:b9:14:56:46:4d:89:
                    af:f3:fd:97:ba:b4:d5:41:6b:00:94:60:f3:46:c1:
                    4f:90:84:80:94:d7:07:18:40:8f:15:40:55:f3:13:
                    45:18:c8:00:37:dc:08:8b:6c:98:7e:d1:16:50:39:
                    ea:16:55:9b:4b:b6:d1:22:66:87:12:91:6b:aa:0e:
                    eb:c9:85:f2:da:25:fa:3d:c1:ee:82:96:9c:1a:8b:
                    e5:70:11:d5:72:89:c9:a2:a4:a8:78:91:79:17:a1:
                    5d:12:f3:72:9e:3f:5a:4d:d6:26:9c:92:d6:15:91:
                    b9:12:7a:9c:51:bd:f7:5b:5b:36:e2:3b:09:f6:8f:
                    1a:24:09:6d:7b:eb:08:04:34:c1:01:8b:a9:7e:26:
                    56:91:72:4a:e7:86:17:21:15:32:a5:1e:b0:83:73:
                    78:da:31:49:1e:e7:30:67:10:f7:df:aa:2e:87:80:
                    13:8a:0b:f4:2c:f4:ef:93:73:a2:97:64:22:48:00:
                    be:f9:ad:8b:b6:ae:2d:c0:89:2d:a2:03:87:4f:d4:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A8:6D:86:01:27:1C:9F:7F:36:47:76:6E:23:70:30:95:D6:B9:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/eb714302-493d-348d-ac6c-5ea1b9e26f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:d1:be:41:d3:28:ba:cb:b3:a0:06:7e:d1:5d:58:e6:24:
         0a:f0:be:ee:43:24:ce:79:fe:47:a2:91:f9:e0:90:4a:63:22:
         02:a0:5e:b7:4d:cd:c5:cb:ac:18:48:46:f0:47:a1:dd:58:a1:
         d3:0d:27:9c:a2:28:f7:c5:f5:2b:51:e0:0d:b0:39:24:68:48:
         46:ec:ac:5f:51:9e:bb:96:67:b0:a5:08:9c:51:44:a9:ba:aa:
         a5:8a:64:52:02:88:4b:0a:94:38:af:82:65:3f:23:21:1f:79:
         03:d3:da:2d:0e:a3:8b:3a:c2:5b:68:20:fe:f5:c0:72:6a:12:
         31:7f:4c:89:2f:96:cb:ab:9f:6c:a7:64:4b:95:96:6f:e9:35:
         12:d7:f6:3b:da:45:53:60:1b:91:45:4e:0a:e2:a2:3f:d0:e4:
         b3:92:1c:2d:5b:09:9c:77:28:e0:e3:d5:b9:1e:57:08:bb:ae:
         f7:91:ee:3d:b7:f2:a1:7f:c2:9f:e8:a6:49:db:9d:14:9b:45:
         8f:23:60:8a:15:f6:06:76:55:fb:e1:38:5f:e8:2a:ac:c8:e6:
         f3:60:7e:00:ba:38:05:b0:2d:34:98:5d:b6:23:bd:a2:bc:41:
         b1:0c:be:a1:48:bd:7b:77:08:86:7b:56:ad:90:b8:43:14:ee:
         57:aa:75:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMXFIbAcOfebegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VjZTA0MDQtODBhOC00NmYyLTkyZWItOGYwYjU1OGM3
ZGJlMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
YjU1MWUyOGUtNzI0NS00ZTI4LTg4MGEtNzNjMWIyOTE4YTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAX6eoNTcTO7uL0pDGUIBbUEE2nmC/y9Sy3a
tV/hhj/7ip8sGtk+g+CI5uBwdWCaGAYmP2q5FFZGTYmv8/2XurTVQWsAlGDzRsFP
kISAlNcHGECPFUBV8xNFGMgAN9wIi2yYftEWUDnqFlWbS7bRImaHEpFrqg7ryYXy
2iX6PcHugpacGovlcBHVconJoqSoeJF5F6FdEvNynj9aTdYmnJLWFZG5EnqcUb33
W1s24jsJ9o8aJAlte+sIBDTBAYupfiZWkXJK54YXIRUypR6wg3N42jFJHucwZxD3
36ouh4ATigv0LPTvk3Oil2QiSAC++a2Ltq4twIktogOHT9TWtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCobYYBJxyffzZHdm4jcDCV1rlIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNl
MDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4YzdkYmUvZWI3MTQzMDItNDkzZC0z
NDhkLWFjNmMtNWVhMWI5ZTI2ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2VjZTA0MDQtODBhOC00NmYyLTky
ZWItOGYwYjU1OGM3ZGJlLzdlY2UwNDA0LTgwYTgtNDZmMi05MmViLThmMGI1NThj
N2RiZS5jcmwwHwYDVR0jBBgwFoAUGNN/t1DuQwFGJh0iV9F4XA6RX9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBi
NTU4YzdkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsbmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6r0b5B0yi6y7OgBn7RXVjmJArwvu5DJM55/keikfngkEpjIgKgXrdN
zcXLrBhIRvBHod1YodMNJ5yiKPfF9StR4A2wOSRoSEbsrF9RnruWZ7ClCJxRRKm6
qqWKZFICiEsKlDivgmU/IyEfeQPT2i0Oo4s6wltoIP71wHJqEjF/TIkvlsurn2yn
ZEuVlm/pNRLX9jvaRVNgG5FFTgrioj/Q5LOSHC1bCZx3KODj1bkeVwi7rveR7j23
8qF/wp/opknbnRSbRY8jYIoV9gZ2VfvhOF/oKqzI5vNgfgC6OAWwLTSYXbYjvaK8
QbEMvqFIvXt3CIZ7Vq2QuEMU7leqde0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 19:04:21 2025 by rpki-client