Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/13f66870-ee62-3946-beee-1f966efb2965.roa
File:                     13f66870-ee62-3946-beee-1f966efb2965.roa (raw, json)
Hash identifier:          Yb3CG53W+JI8AsnnnUGwwkRf+yFoKLn8VgaQmA9yOWw=
Subject key identifier:   5A:5D:02:96:26:31:00:37:C6:8C:BD:5D:CA:0D:9B:AC:14:18:A1:DF
Certificate issuer:       /CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
Certificate serial:       010D0C9F4328584A78EB1BD6A14EAEA0AB7FFA40
Authority key identifier: 65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/13f66870-ee62-3946-beee-1f966efb2965.roa
Signing time:             Thu 10 Jul 2025 13:11:29 +0000
ROA not before:           Thu 10 Jul 2025 13:11:29 +0000
ROA not after:            Wed 08 Oct 2025 13:11:29 +0000
asID:                     32787
IP address blocks:        159.208.24.0/24 maxlen: 24
                          159.208.25.0/24 maxlen: 24
                          159.208.26.0/24 maxlen: 24
                          159.208.27.0/24 maxlen: 24
                          159.208.28.0/24 maxlen: 24
                          159.208.29.0/24 maxlen: 24
                          159.208.30.0/24 maxlen: 24
                          159.208.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:eb:1b:d6:a1:4e:ae:a0:ab:7f:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
        Validity
            Not Before: Jul 10 13:11:29 2025 GMT
            Not After : Oct  8 13:11:29 2025 GMT
        Subject: CN=e58f05d1-767d-48dd-bff4-ad34c2bb8142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:0d:b0:5e:f6:f8:ed:9b:b2:59:2b:83:af:
                    91:c5:1e:7c:aa:aa:fe:f6:3c:25:ea:40:6b:06:ea:
                    79:5f:7f:c9:10:d2:8e:03:69:ed:d3:a7:21:77:47:
                    d3:2a:90:39:0d:84:76:ce:3b:fd:b1:91:64:17:bc:
                    b7:3f:37:58:b5:b6:51:3a:88:15:26:11:5a:81:03:
                    73:f1:8d:d7:eb:d7:27:00:77:8a:b4:a3:cc:0d:4a:
                    21:35:5c:f7:35:49:0a:ec:66:d8:b7:df:5f:fa:20:
                    df:74:cf:1c:14:36:53:31:e5:e0:9d:b6:c8:13:4f:
                    5a:c4:0b:e5:e0:56:54:e5:f0:a5:e1:e7:c6:ad:99:
                    15:00:f0:b5:26:b3:5e:08:26:86:44:4a:fe:e1:8d:
                    9a:fb:fc:64:25:90:34:e2:55:8a:d2:35:d0:ec:69:
                    b1:fb:ca:2d:9f:fb:7d:1d:81:cc:d9:d0:9b:5c:15:
                    c0:ae:de:79:2e:3f:06:4f:4a:77:88:6d:27:32:2e:
                    6c:ef:dd:21:cd:a1:ac:17:f7:90:c7:fc:c0:4a:24:
                    65:4f:9d:63:a7:1e:17:bb:70:22:dd:f5:d1:8d:ed:
                    32:91:61:e9:57:e3:45:68:9e:fc:91:65:cd:fe:be:
                    70:82:76:34:9f:c1:68:16:ab:2f:f8:8e:33:40:4e:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5D:02:96:26:31:00:37:C6:8C:BD:5D:CA:0D:9B:AC:14:18:A1:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/13f66870-ee62-3946-beee-1f966efb2965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl

            X509v3 Authority Key Identifier:
                keyid:65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.208.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:af:e9:06:8d:29:57:ba:2a:70:c4:8e:ac:73:47:4f:21:
         bc:d3:d7:ca:3d:30:31:8e:0a:0a:ad:92:ed:86:c2:86:38:a5:
         ad:94:8e:e8:b7:dc:f7:d1:9d:a8:46:e9:d2:85:13:19:fa:b4:
         f8:de:21:c4:20:5f:11:9f:73:12:45:67:c5:80:d5:52:5b:d0:
         e4:b3:67:85:e2:3e:9a:d9:d0:4e:62:d1:cc:73:41:cf:f9:f8:
         b1:bc:d0:ee:a6:24:f2:49:4a:68:78:bf:c6:8d:81:e3:d2:f9:
         46:51:52:30:1f:89:38:8a:70:1d:3f:7e:6c:38:66:e3:49:0b:
         c7:31:80:15:d3:66:86:1e:42:31:77:23:eb:53:ad:7f:7c:1e:
         a7:91:c4:17:1c:db:52:d1:81:bc:de:87:4a:62:01:fe:a4:76:
         83:6a:70:e7:0d:10:12:84:22:c9:9f:08:c2:56:2b:10:3a:f9:
         fa:74:6a:79:ef:23:79:a9:22:dc:d8:1b:26:9d:99:28:66:62:
         8f:77:65:eb:ea:d6:ae:0b:5c:3d:f7:fb:34:43:8d:78:85:d3:
         3e:f4:77:07:a3:90:3a:10:49:0e:c2:ee:62:88:56:c2:8d:e9:
         5e:1b:53:6b:2c:b0:33:bf:e1:83:ae:05:ec:cd:09:0a:cd:d8:
         0d:94:df:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp46xvWoU6uoKt/+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjMTNkNTItODllNC00MDkzLWIzZDEtMzdhOTg3MDJk
YzdhMB4XDTI1MDcxMDEzMTEyOVoXDTI1MTAwODEzMTEyOVowLzEtMCsGA1UEAxMk
ZTU4ZjA1ZDEtNzY3ZC00OGRkLWJmZjQtYWQzNGMyYmI4MTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnsNsF72+O2bslkrg6+RxR58qqr+9jwl6kBr
Bup5X3/JENKOA2nt06chd0fTKpA5DYR2zjv9sZFkF7y3PzdYtbZROogVJhFagQNz
8Y3X69cnAHeKtKPMDUohNVz3NUkK7GbYt99f+iDfdM8cFDZTMeXgnbbIE09axAvl
4FZU5fCl4efGrZkVAPC1JrNeCCaGREr+4Y2a+/xkJZA04lWK0jXQ7Gmx+8otn/t9
HYHM2dCbXBXArt55Lj8GT0p3iG0nMi5s790hzaGsF/eQx/zASiRlT51jpx4Xu3Ai
3fXRje0ykWHpV+NFaJ78kWXN/r5wgnY0n8FoFqsv+I4zQE7BFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpdApYmMQA3xoy9XcoNm6wUGKHfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZGMx
M2Q1Mi04OWU0LTQwOTMtYjNkMS0zN2E5ODcwMmRjN2EvMTNmNjY4NzAtZWU2Mi0z
OTQ2LWJlZWUtMWY5NjZlZmIyOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWRjMTNkNTItODllNC00MDkzLWIz
ZDEtMzdhOTg3MDJkYzdhL2FkYzEzZDUyLTg5ZTQtNDA5My1iM2QxLTM3YTk4NzAy
ZGM3YS5jcmwwHwYDVR0jBBgwFoAUZaQCxoJ4yZvoIsfUQWhWTRG7rrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZGMxM2Q1Mi04OWU0LTQwOTMtYjNkMS0zN2E5
ODcwMmRjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn9AYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+zr+kGjSlXuipwxI6sc0dPIbzT18o9MDGOCgqtku2GwoY4pa2Ujui3
3PfRnahG6dKFExn6tPjeIcQgXxGfcxJFZ8WA1VJb0OSzZ4XiPprZ0E5i0cxzQc/5
+LG80O6mJPJJSmh4v8aNgePS+UZRUjAfiTiKcB0/fmw4ZuNJC8cxgBXTZoYeQjF3
I+tTrX98HqeRxBcc21LRgbzeh0piAf6kdoNqcOcNEBKEIsmfCMJWKxA6+fp0annv
I3mpItzYGyadmShmYo93Zevq1q4LXD33+zRDjXiF0z70dwejkDoQSQ7C7mKIVsKN
6V4bU2sssDO/4YOuBezNCQrN2A2U39o=
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:12:20 2025 by rpki-client