Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa
File:                     29405407-ca65-35ca-bd75-7cd4d56b8692.roa (raw, json)
Hash identifier:          6YVTzOeiJzM6FH81ebSY0Lamy+v3iDrFS3znAn8Yock=
Subject key identifier:   20:6C:76:5A:4A:0A:76:DC:8F:8B:B8:A0:0D:50:10:56:81:B4:5F:87
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F4328584A7A4B3104D7579882809CC980
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     396982
IP address blocks:        199.65.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:31:04:d7:57:98:82:80:9c:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=8d019876-b3bd-4b3b-bb3d-0ed7ea39c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:76:16:8c:d4:34:fb:e3:e5:ce:30:0b:6e:
                    75:84:05:7e:23:ac:85:fe:b9:54:fd:dd:b7:50:01:
                    c3:f7:bd:d8:c5:f4:0b:70:cf:49:a7:5d:04:14:77:
                    ee:a8:2f:f1:5f:67:40:6f:e2:e9:a1:d5:bf:70:81:
                    3c:e7:c7:f2:0e:e8:27:f8:c0:c9:1e:99:54:65:b3:
                    41:f9:9c:b3:ba:04:3f:5f:cf:9d:6b:75:54:33:4a:
                    4a:de:dd:2b:42:87:b3:3d:6d:8a:34:f9:df:3a:5a:
                    f1:d5:54:f8:f9:0e:ef:e7:42:24:5c:63:51:1a:50:
                    75:9a:91:c6:cb:c7:bb:af:43:3b:af:b9:85:de:89:
                    14:fc:32:e4:d7:eb:5b:4c:da:48:03:ca:05:01:a0:
                    6e:33:c5:43:22:c6:62:ce:cb:c0:fb:38:47:de:ea:
                    91:b2:bc:e6:1f:51:bc:30:1d:b8:43:27:d0:5e:48:
                    62:71:7b:72:b0:c1:ae:c9:75:8f:42:79:65:40:dc:
                    8d:a0:a9:6f:b0:59:30:e9:60:59:4d:71:4b:14:a6:
                    07:85:09:0b:4e:47:de:62:66:6e:b1:ee:2d:9b:4d:
                    93:cf:63:b8:b6:1a:93:cc:42:ff:82:c3:82:eb:44:
                    7a:22:4c:e3:93:56:9c:91:ad:96:48:63:0e:54:55:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:76:5A:4A:0A:76:DC:8F:8B:B8:A0:0D:50:10:56:81:B4:5F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bb:2c:03:f8:d2:bc:a9:50:b6:33:01:09:bd:9b:98:20:f2:
         0c:3d:26:97:29:4d:db:4c:0e:51:91:0f:ea:3f:84:eb:f9:46:
         a8:9e:9e:0b:53:59:85:b1:cb:2e:d1:f3:8b:c8:bf:00:e8:88:
         c2:97:67:ca:f3:a7:c9:84:e1:68:ae:dc:ff:1e:62:05:4a:19:
         61:a9:33:d4:62:d3:95:55:20:10:68:0e:eb:81:45:73:3e:e8:
         f1:fc:da:34:4e:9c:0e:14:85:06:45:f4:00:2c:ee:e3:09:83:
         bb:fb:81:34:9f:56:ce:f6:e7:27:df:15:c5:05:28:35:6f:72:
         ab:d0:57:2e:1a:af:bd:e0:67:7d:39:db:9a:68:2a:50:4b:fc:
         c5:5e:1c:21:fe:03:46:cd:25:6b:80:8e:f2:d8:01:34:5b:fc:
         6f:c1:52:85:1d:75:17:e9:af:d2:00:fa:b7:60:0c:dd:4d:d0:
         52:e0:e4:5b:c3:e3:fe:57:4c:76:a3:cd:ba:3e:9a:28:ff:66:
         ea:83:45:39:64:05:ef:15:d2:02:7b:2c:41:6d:6e:35:f2:fb:
         46:af:76:5f:8c:be:94:78:31:1b:0d:eb:d2:7d:84:54:d9:be:
         06:a1:2d:c7:f0:06:4e:61:1a:a2:f4:36:e6:52:50:6e:68:bd:
         46:44:c9:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzEE11eYgoCcyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0
NDY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
OGQwMTk4NzYtYjNiZC00YjNiLWJiM2QtMGVkN2VhMzljMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tV2FozUNPvj5c4wC251hAV+I6yF/rlU/d23
UAHD973YxfQLcM9Jp10EFHfuqC/xX2dAb+LpodW/cIE858fyDugn+MDJHplUZbNB
+ZyzugQ/X8+da3VUM0pK3t0rQoezPW2KNPnfOlrx1VT4+Q7v50IkXGNRGlB1mpHG
y8e7r0M7r7mF3okU/DLk1+tbTNpIA8oFAaBuM8VDIsZizsvA+zhH3uqRsrzmH1G8
MB24QyfQXkhicXtysMGuyXWPQnllQNyNoKlvsFkw6WBZTXFLFKYHhQkLTkfeYmZu
se4tm02Tz2O4thqTzEL/gsOC60R6Ikzjk1acka2WSGMOVFUeCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBsdlpKCnbcj4u4oA1QEFaBtF+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi
NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMjk0MDU0MDctY2E2NS0z
NWNhLWJkNzUtN2NkNGQ1NmI4NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx
MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw
NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw
NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIC7LAP40rypULYzAQm9m5gg8gw9JpcpTdtMDlGRD+o/hOv5RqiengtT
WYWxyy7R84vIvwDoiMKXZ8rzp8mE4Wiu3P8eYgVKGWGpM9Ri05VVIBBoDuuBRXM+
6PH82jROnA4UhQZF9AAs7uMJg7v7gTSfVs725yffFcUFKDVvcqvQVy4ar73gZ305
25poKlBL/MVeHCH+A0bNJWuAjvLYATRb/G/BUoUddRfpr9IA+rdgDN1N0FLg5FvD
4/5XTHajzbo+mij/ZuqDRTlkBe8V0gJ7LEFtbjXy+0avdl+MvpR4MRsN69J9hFTZ
vgahLcfwBk5hGqL0NuZSUG5ovUZEybQ=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:27:08 2025 by rpki-client