Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bdf348c-b55e-313b-9035-caceed42c709.roa
File:                     4bdf348c-b55e-313b-9035-caceed42c709.roa (raw, json)
Hash identifier:          WOWA4VCDoQQfOY9M5EYDTQYpN86mTazJy5FBWdyMA44=
Subject key identifier:   6F:70:A8:E7:AB:74:F5:CF:19:C0:ED:8C:2F:B6:89:2F:5B:91:72:D3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B261D49BC24083D0A87C8BFC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bdf348c-b55e-313b-9035-caceed42c709.roa
Signing time:             Wed 10 Sep 2025 14:07:26 +0000
ROA not before:           Wed 10 Sep 2025 14:07:26 +0000
ROA not after:            Tue 09 Dec 2025 15:07:26 +0000
asID:                     32620
IP address blocks:        66.93.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:1d:49:bc:24:08:3d:0a:87:c8:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 10 14:07:26 2025 GMT
            Not After : Dec  9 15:07:26 2025 GMT
        Subject: CN=be6a8a37-5817-411e-89b0-c88ec49adf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:aa:65:e0:8d:ab:d5:75:cc:fb:66:ce:36:
                    ab:9d:9a:1d:bd:ec:c6:51:5d:64:d0:d6:0a:c6:c5:
                    64:0c:f4:ff:6d:1a:fb:78:96:11:bc:f5:48:53:54:
                    0f:12:1a:16:cc:fe:61:f3:96:ce:09:5f:30:ea:2d:
                    fd:79:a8:c9:f5:9d:13:e2:30:48:85:22:fa:b5:18:
                    e4:62:43:f7:02:41:22:ca:22:91:0a:0f:06:8c:ce:
                    a9:b7:bc:fe:62:35:76:26:98:e1:d0:09:fe:af:88:
                    b9:b1:4f:d3:c7:c9:3a:1c:d3:dc:8e:a2:06:3b:42:
                    68:be:d5:65:16:63:af:b7:31:e0:7b:cb:25:ee:82:
                    61:69:b3:dc:4e:fe:aa:38:aa:79:6f:6d:55:f6:00:
                    05:f3:eb:37:67:c6:b6:1c:aa:e2:74:75:e8:68:0f:
                    e6:db:db:07:e0:b8:7b:87:0a:e8:62:de:44:1a:ef:
                    09:21:83:bf:0c:e3:35:3d:bd:04:dd:f8:30:56:b0:
                    10:20:92:c1:4e:c3:12:d6:8b:da:cb:50:66:08:9d:
                    b1:ca:0e:7d:fc:ab:62:29:68:3b:59:d1:28:b7:33:
                    ac:05:d6:2e:d1:85:65:62:b9:b3:0a:3b:7e:25:3e:
                    da:37:59:70:f8:ce:fe:50:2b:79:09:31:8b:ef:8d:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:A8:E7:AB:74:F5:CF:19:C0:ED:8C:2F:B6:89:2F:5B:91:72:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bdf348c-b55e-313b-9035-caceed42c709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:52:39:84:90:76:a1:6a:91:84:35:de:38:46:8a:30:b4:
         02:e5:a7:c5:35:97:68:31:0d:80:be:63:92:f5:d9:fb:e5:88:
         43:bc:87:3e:74:4d:58:ff:3f:41:d9:33:b7:c5:ec:0c:30:59:
         fe:c5:c8:63:93:68:80:b0:c4:7b:f6:66:26:16:be:1e:ed:c9:
         53:0f:30:78:eb:f7:4e:39:05:bc:a6:de:8e:f2:c5:df:b3:a1:
         6a:50:99:32:b0:fe:4d:5a:e4:40:14:5b:e8:4e:82:6b:ab:2e:
         a5:9d:26:ff:4a:ac:de:a7:65:7e:6a:69:b9:25:25:f8:45:55:
         0c:00:7a:dd:0d:fc:4d:e2:96:e5:7a:f8:88:cf:e9:b8:ea:b8:
         41:23:da:46:d3:55:c8:c0:36:11:74:d7:35:74:80:da:c7:be:
         b8:8e:0c:a0:70:51:48:61:52:7d:6e:c6:c3:5e:86:70:84:e1:
         56:09:9a:11:64:b0:79:ee:ce:b9:d7:64:a5:d0:d4:6a:c2:3f:
         46:6c:0c:ff:66:ec:62:c6:b3:22:09:e6:8d:c5:53:5b:f8:9f:
         30:cc:fb:a8:ef:a2:40:47:af:4f:8b:36:30:9c:ea:df:c7:07:
         b3:1c:65:0c:33:9f:23:19:09:c5:2c:c0:a3:90:a3:61:68:17:
         f1:5f:0c:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmHUm8JAg9CofIv8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkxMDE0MDcyNloXDTI1MTIwOTE1MDcyNlowLzEtMCsGA1UEAxMk
YmU2YThhMzctNTgxNy00MTFlLTg5YjAtYzg4ZWM0OWFkZjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS2qZeCNq9V1zPtmzjarnZodvezGUV1k0NYK
xsVkDPT/bRr7eJYRvPVIU1QPEhoWzP5h85bOCV8w6i39eajJ9Z0T4jBIhSL6tRjk
YkP3AkEiyiKRCg8GjM6pt7z+YjV2Jpjh0An+r4i5sU/Tx8k6HNPcjqIGO0JovtVl
FmOvtzHge8sl7oJhabPcTv6qOKp5b21V9gAF8+s3Z8a2HKridHXoaA/m29sH4Lh7
hwroYt5EGu8JIYO/DOM1Pb0E3fgwVrAQIJLBTsMS1ovay1BmCJ2xyg59/KtiKWg7
WdEotzOsBdYu0YVlYrmzCjt+JT7aN1lw+M7+UCt5CTGL743xGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9wqOerdPXPGcDtjC+2iS9bkXLTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGJkZjM0OGMtYjU1ZS0z
MTNiLTkwMzUtY2FjZWVkNDJjNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl28MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1TUjmEkHahapGENd44RoowtALlp8U1l2gxDYC+Y5L12fvliEO8hz50
TVj/P0HZM7fF7AwwWf7FyGOTaICwxHv2ZiYWvh7tyVMPMHjr9045Bbym3o7yxd+z
oWpQmTKw/k1a5EAUW+hOgmurLqWdJv9KrN6nZX5qabklJfhFVQwAet0N/E3iluV6
+IjP6bjquEEj2kbTVcjANhF01zV0gNrHvriODKBwUUhhUn1uxsNehnCE4VYJmhFk
sHnuzrnXZKXQ1GrCP0ZsDP9m7GLGsyIJ5o3FU1v4nzDM+6jvokBHr0+LNjCc6t/H
B7McZQwznyMZCcUswKOQo2FoF/FfDBI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:57:37 2025 by rpki-client