Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa
File:                     66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa (raw, json)
Hash identifier:          crfDEU6MqTWg+8RQTcM0Kr2UaQKjU025HYlRSNaY//c=
Subject key identifier:   05:19:13:13:92:27:12:4C:C2:1B:79:18:FC:10:55:D2:D5:0A:AC:D7
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584B36BC499A659D68B983FC98C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     26480
IP address blocks:        66.254.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:49:9a:65:9d:68:b9:83:fc:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=f3cf29a2-843e-4874-9c26-fa5815c3b393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:d3:81:4f:a0:1c:35:c0:1c:42:3d:68:54:
                    47:bd:c7:60:ef:67:1d:96:b1:8e:72:a3:88:e1:45:
                    72:d9:9f:d7:19:73:d6:86:11:03:81:31:7c:c8:d7:
                    7b:99:d7:1b:33:fd:46:29:f0:b0:5c:c1:41:a1:01:
                    ec:c1:33:ff:85:59:b8:ce:c1:6a:e0:02:dc:39:10:
                    34:30:40:2c:43:81:b4:cf:74:60:e6:98:86:3e:07:
                    f7:33:32:c7:a8:f5:62:1e:7a:cf:c6:53:91:82:41:
                    66:37:32:9b:87:19:c6:4b:da:60:18:7a:e8:17:91:
                    19:24:44:28:95:15:eb:1f:04:ef:32:25:37:3f:f7:
                    b5:25:36:65:ec:94:0b:7c:f4:c1:9b:8f:87:14:6d:
                    72:01:4d:89:3b:4e:3b:c7:85:03:d5:07:26:f3:ee:
                    c2:44:99:00:bb:17:a3:7b:e8:d0:2d:b1:aa:df:23:
                    d4:59:6d:bb:35:29:7e:8c:81:34:72:bf:9a:0e:d9:
                    56:20:9a:b7:13:cc:83:a8:4c:fa:33:d7:17:e9:94:
                    7e:80:f3:7c:61:44:38:a2:ac:bb:d5:51:e2:8c:ef:
                    26:59:50:35:91:e2:01:80:f4:a8:5a:3c:f2:3a:5d:
                    5d:1e:39:e8:c4:28:33:ce:e4:3d:d0:4e:39:22:23:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:19:13:13:92:27:12:4C:C2:1B:79:18:FC:10:55:D2:D5:0A:AC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:7a:08:23:8f:e1:9c:78:96:e5:e1:33:06:33:0c:23:8d:
         a9:5c:de:70:8b:99:4a:2f:76:f4:72:88:ee:7f:97:57:50:e5:
         fc:a3:36:32:96:d6:1d:59:64:f8:e8:2b:31:a9:db:dc:2a:a8:
         26:4f:ac:2d:c6:c6:27:10:17:ee:df:bf:52:46:38:b4:21:15:
         ea:d9:4f:10:7c:3d:65:b9:0b:00:eb:fe:de:e1:75:aa:cc:b7:
         d9:77:79:ba:fa:93:e4:49:18:ae:93:80:ce:bc:81:47:b6:da:
         cb:24:15:dd:b6:fd:31:76:ee:af:a9:e4:9a:e9:7b:bd:a8:89:
         86:68:40:63:24:67:f2:39:ad:40:d5:8e:eb:9a:d2:f1:ea:cf:
         37:7d:60:55:85:49:c1:5e:95:79:e7:b4:24:17:83:f3:23:8c:
         e9:86:af:9d:e2:86:03:c5:a3:b9:fb:15:65:5e:02:a9:a8:54:
         14:99:85:8d:17:60:1c:1d:b9:83:10:08:9d:d2:23:b4:73:f2:
         b9:4c:d8:a1:58:0d:da:1a:59:fd:aa:07:d8:cb:09:ad:91:f5:
         4a:b9:06:84:65:79:31:64:8b:6d:ad:ad:b0:91:a6:ca:2e:14:
         98:df:ad:3c:3a:e4:68:4d:76:39:4f:21:94:22:c4:03:45:a2:
         6d:2a:8b:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vEmaZZ1ouYP8mMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZjNjZjI5YTItODQzZS00ODc0LTljMjYtZmE1ODE1YzNiMzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5fTgU+gHDXAHEI9aFRHvcdg72cdlrGOcqOI
4UVy2Z/XGXPWhhEDgTF8yNd7mdcbM/1GKfCwXMFBoQHswTP/hVm4zsFq4ALcORA0
MEAsQ4G0z3Rg5piGPgf3MzLHqPViHnrPxlORgkFmNzKbhxnGS9pgGHroF5EZJEQo
lRXrHwTvMiU3P/e1JTZl7JQLfPTBm4+HFG1yAU2JO047x4UD1Qcm8+7CRJkAuxej
e+jQLbGq3yPUWW27NSl+jIE0cr+aDtlWIJq3E8yDqEz6M9cX6ZR+gPN8YUQ4oqy7
1VHijO8mWVA1keIBgPSoWjzyOl1dHjnoxCgzzuQ90E45IiMNFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUZExOSJxJMwht5GPwQVdLVCqzXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNjZkM2NkYjgtZjlkZS0z
NWI1LTlkODctYzJmNDJmYWY4YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQv4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABz/eggjj+GceJbl4TMGMwwjjalc3nCLmUovdvRyiO5/l1dQ5fyjNjKW
1h1ZZPjoKzGp29wqqCZPrC3GxicQF+7fv1JGOLQhFerZTxB8PWW5CwDr/t7hdarM
t9l3ebr6k+RJGK6TgM68gUe22sskFd22/TF27q+p5Jrpe72oiYZoQGMkZ/I5rUDV
juua0vHqzzd9YFWFScFelXnntCQXg/MjjOmGr53ihgPFo7n7FWVeAqmoVBSZhY0X
YBwduYMQCJ3SI7Rz8rlM2KFYDdoaWf2qB9jLCa2R9Uq5BoRleTFki22trbCRpsou
FJjfrTw65GhNdjlPIZQixANFom0qi1k=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:58 2025 by rpki-client