Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa
File:                     fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa (raw, json)
Hash identifier:          mZJBn7d68KzfN05hlmF7FefYAFMMh8dfcfzP8zWt6UM=
Subject key identifier:   CF:7B:97:D1:D0:EE:35:38:C3:E2:9E:0F:A4:D7:F2:3B:2B:1B:C4:50
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55CC11F2AFA09991449020
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     8111
IP address blocks:        198.166.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cc:11:f2:af:a0:99:91:44:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=53a0cfd1-2cdf-4b44-a968-951524682de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:de:31:75:10:5b:34:54:7e:ba:66:8f:65:
                    3e:4d:e7:0a:55:43:3a:84:c4:0f:49:84:36:87:b0:
                    a4:c0:2e:68:3b:99:9d:9d:90:d6:4c:b5:58:0d:b9:
                    b0:de:ad:36:4e:a8:b2:ab:96:84:d3:de:29:58:36:
                    47:41:be:85:99:07:60:ff:9e:cb:e3:cd:61:26:77:
                    ed:b2:4c:96:00:2e:f8:5e:88:2a:ac:b4:73:78:35:
                    85:11:7b:dd:38:92:f3:3f:28:e6:c4:e8:f5:02:15:
                    74:8c:40:14:be:04:ae:f8:93:a7:13:66:87:3b:3b:
                    ab:30:5c:f7:8e:32:e3:59:e2:85:49:55:59:49:44:
                    8e:e0:5b:58:18:c7:44:cf:dd:1e:27:08:65:69:85:
                    18:11:c9:2c:0f:24:87:88:3c:19:67:ea:26:da:fa:
                    59:a6:ca:ee:1d:54:d8:42:d8:50:c5:97:72:3f:ad:
                    09:68:5f:3e:a6:9f:6e:fa:4b:20:1a:38:b7:a1:42:
                    f8:26:b9:ae:ae:a6:8a:a2:cb:0f:40:3c:da:6b:1e:
                    b1:8b:6a:8e:4b:5d:72:ae:02:c9:df:59:5e:60:44:
                    21:d9:0f:78:da:48:ac:04:74:4b:76:d5:85:f5:21:
                    29:bf:f0:a2:ef:94:b1:69:2d:d0:0a:10:18:a3:05:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7B:97:D1:D0:EE:35:38:C3:E2:9E:0F:A4:D7:F2:3B:2B:1B:C4:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:72:58:ee:87:4e:63:c1:8b:bd:fa:12:f2:6e:f3:74:15:
         f3:59:59:dc:7b:18:4e:39:5e:6c:ae:c4:93:a8:26:21:24:0a:
         f9:ae:64:17:58:ab:6d:58:86:59:4a:b9:8f:55:a0:7e:c1:49:
         af:8e:38:02:3e:74:31:10:c9:31:e6:88:b3:25:a9:52:af:88:
         2f:43:14:a4:1b:fa:f0:10:8d:27:36:e5:85:ad:0c:90:de:c7:
         2a:68:4a:82:69:aa:d7:4d:00:30:d4:77:41:ab:58:fb:da:12:
         27:0e:d8:58:9a:6a:78:41:31:1b:61:2e:c2:7d:fb:45:0c:dd:
         aa:1f:a0:1c:28:38:9d:23:d2:51:9e:16:60:5f:5f:19:2f:fc:
         77:d8:a2:fa:c1:36:e9:eb:01:c9:99:e0:89:4d:53:dc:69:39:
         24:ff:97:a3:6d:5b:41:eb:02:53:bb:40:54:d1:a4:03:de:5e:
         ca:8d:bd:57:e7:be:e1:05:56:7c:d9:4e:a5:22:c7:08:89:15:
         88:a9:0a:3d:1d:f4:16:f8:6a:51:83:5c:34:eb:b1:c0:27:5e:
         25:a5:36:c0:3c:b5:c0:78:5f:79:79:38:46:d9:f1:3c:57:bf:
         5a:e8:c4:16:a6:65:16:1b:71:cd:79:07:1d:44:f9:fc:74:07:
         0a:82:a1:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcwR8q+gmZFEkCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
NTNhMGNmZDEtMmNkZi00YjQ0LWE5NjgtOTUxNTI0NjgyZGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnDeMXUQWzRUfrpmj2U+TecKVUM6hMQPSYQ2
h7CkwC5oO5mdnZDWTLVYDbmw3q02Tqiyq5aE094pWDZHQb6FmQdg/57L481hJnft
skyWAC74XogqrLRzeDWFEXvdOJLzPyjmxOj1AhV0jEAUvgSu+JOnE2aHOzurMFz3
jjLjWeKFSVVZSUSO4FtYGMdEz90eJwhlaYUYEcksDySHiDwZZ+om2vpZpsruHVTY
QthQxZdyP60JaF8+pp9u+ksgGji3oUL4JrmurqaKossPQDzaax6xi2qOS11yrgLJ
31leYEQh2Q942kisBHRLdtWF9SEpv/Ci75SxaS3QChAYowVfpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM97l9HQ7jU4w+KeD6TX8jsrG8RQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZmQxYmNjY2QtZjk3Ni0z
ODhkLWFjYzItYTViNDJhMmQzNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqbpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK4cljuh05jwYu9+hLybvN0FfNZWdx7GE45XmyuxJOoJiEkCvmuZBdY
q21YhllKuY9VoH7BSa+OOAI+dDEQyTHmiLMlqVKviC9DFKQb+vAQjSc25YWtDJDe
xypoSoJpqtdNADDUd0GrWPvaEicO2FiaanhBMRthLsJ9+0UM3aofoBwoOJ0j0lGe
FmBfXxkv/HfYovrBNunrAcmZ4IlNU9xpOST/l6NtW0HrAlO7QFTRpAPeXsqNvVfn
vuEFVnzZTqUixwiJFYipCj0d9Bb4alGDXDTrscAnXiWlNsA8tcB4X3l5OEbZ8TxX
v1roxBamZRYbcc15Bx1E+fx0BwqCoSQ=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:19:45 2025 by rpki-client