Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
File:                     5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json)
Hash identifier:          RAgdbh/R4YFye3rH6tj3EC+21l50ekRMB3j0wrYjUbQ=
Subject key identifier:   DE:E9:3C:4D:5F:9A:22:C8:5A:13:96:64:28:88:7B:F7:00:36:CA:DC
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584B0A115FA1288DDD6FFEB79B48
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     27768
IP address blocks:        66.249.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5f:a1:28:8d:dd:6f:fe:b7:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=ac249437-c93a-457b-b8f8-e3f1b4e7655a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e2:d5:02:d2:34:6f:83:ea:9b:56:9b:11:62:
                    fe:50:84:ab:a6:18:b3:a8:9c:3a:ea:79:36:b1:7b:
                    3a:c2:4c:b4:7a:7c:6e:8a:42:ef:ad:b5:93:15:87:
                    a4:ce:8b:1a:fb:2b:3a:23:d5:45:61:d3:6b:9a:67:
                    af:b5:49:e4:93:da:e7:b4:3c:49:b8:33:9a:cc:24:
                    00:2c:60:94:c8:3c:22:61:49:fe:f8:c7:2e:3e:f4:
                    2e:4e:1f:97:a4:bb:3b:40:30:75:74:a6:36:82:5b:
                    36:74:28:1d:c7:32:3e:e0:1e:48:a2:5d:bc:7b:1d:
                    a0:ca:a6:e4:92:56:d0:10:76:74:39:d0:31:fc:ca:
                    c8:c9:93:62:56:fd:7b:c0:91:79:65:67:37:d9:66:
                    a5:a0:16:c6:9b:f7:79:36:dd:b5:ab:c5:88:bf:de:
                    09:c4:e4:bc:7d:d1:94:00:59:d5:9e:4d:da:97:c4:
                    41:12:79:87:7a:8e:09:75:93:af:5f:31:d6:77:8f:
                    8f:f8:5b:7b:c8:4a:1c:32:a0:8c:e0:70:e2:0f:65:
                    2d:61:0b:a2:5f:0a:34:2b:40:17:c6:1d:2c:8f:e9:
                    1f:a8:7e:fa:d0:88:5a:80:cf:ef:65:f9:12:26:2d:
                    dc:ef:42:47:96:37:f1:bf:f5:8f:e4:d9:69:76:0f:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:3C:4D:5F:9A:22:C8:5A:13:96:64:28:88:7B:F7:00:36:CA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4f:cd:5d:f0:d7:36:71:87:a9:95:a8:37:3f:3d:69:7c:8c:
         8a:13:33:83:41:f7:c4:c0:06:9b:92:f6:d1:57:8e:a2:5d:d3:
         a3:aa:cf:d6:a3:50:1d:70:08:ca:f3:a9:19:45:ca:0e:e4:46:
         33:61:a2:b6:e4:db:89:e4:b5:db:46:06:51:47:a8:f6:72:1e:
         e1:7e:16:2d:61:0a:a0:88:05:c5:e0:dc:e9:d0:58:31:05:e8:
         c5:dd:e5:02:e0:f1:48:ea:83:2d:83:d9:5c:4a:65:cc:59:83:
         35:b2:c3:39:bb:20:25:71:b7:84:fc:8e:77:fa:ee:70:55:21:
         fd:68:f6:29:d8:0b:db:b7:8f:62:72:79:36:37:33:54:40:56:
         da:3c:1d:52:d3:36:34:a2:0c:95:b0:77:c6:07:2f:a4:6c:a8:
         ca:6b:54:6f:64:fc:b0:cd:5d:98:19:b3:72:79:2c:89:7d:6d:
         d5:9c:4f:3f:4f:ef:12:80:f6:bd:a4:82:f3:df:2b:bd:bd:94:
         ec:af:6c:ac:91:2d:56:43:22:b1:c2:08:71:58:fa:a0:ea:ff:
         60:0d:30:76:1c:03:7d:83:49:c9:bb:46:79:66:d0:47:3c:7d:
         dc:d4:13:e4:21:b2:1b:da:87:f4:1a:8c:34:60:2e:53:ef:03:
         64:fd:7b:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEV+hKI3db/63m0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3
NjVjMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
YWMyNDk0MzctYzkzYS00NTdiLWI4ZjgtZTNmMWI0ZTc2NTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OLVAtI0b4Pqm1abEWL+UISrphizqJw66nk2
sXs6wky0enxuikLvrbWTFYekzosa+ys6I9VFYdNrmmevtUnkk9rntDxJuDOazCQA
LGCUyDwiYUn++McuPvQuTh+XpLs7QDB1dKY2gls2dCgdxzI+4B5Iol28ex2gyqbk
klbQEHZ0OdAx/MrIyZNiVv17wJF5ZWc32WaloBbGm/d5Nt21q8WIv94JxOS8fdGU
AFnVnk3al8RBEnmHeo4JdZOvXzHWd4+P+Ft7yEocMqCM4HDiD2UtYQuiXwo0K0AX
xh0sj+kfqH760IhagM/vZfkSJi3c70JHljfxv/WP5Nlpdg/cuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7pPE1fmiLIWhOWZCiIe/cANsrcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj
MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvNWFjZGUxMjMtOGIyYS0z
MmQ1LTgyMjMtZTZiOGE4NDI0MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj
MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi
NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl
MTFiYjc2NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvncMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARPzV3w1zZxh6mVqDc/PWl8jIoTM4NB98TABpuS9tFXjqJd06Oqz9aj
UB1wCMrzqRlFyg7kRjNhorbk24nktdtGBlFHqPZyHuF+Fi1hCqCIBcXg3OnQWDEF
6MXd5QLg8Ujqgy2D2VxKZcxZgzWywzm7ICVxt4T8jnf67nBVIf1o9inYC9u3j2Jy
eTY3M1RAVto8HVLTNjSiDJWwd8YHL6RsqMprVG9k/LDNXZgZs3J5LIl9bdWcTz9P
7xKA9r2kgvPfK729lOyvbKyRLVZDIrHCCHFY+qDq/2ANMHYcA32DScm7Rnlm0Ec8
fdzUE+Qhshvah/QajDRgLlPvA2T9e/k=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:36:58 2025 by rpki-client