Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/f26f659a-b4fb-3a2a-a393-f847394715d4.roa
File:                     f26f659a-b4fb-3a2a-a393-f847394715d4.roa (raw, json)
Hash identifier:          GXxQfqVszDRiyG3e3UPKne2kSRnRd5MxdiRXXMqm/T4=
Subject key identifier:   7F:F8:CC:76:30:F4:E8:EE:E4:B7:06:0F:97:CF:95:77:B7:DA:37:E7
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584AF6868C353E8436D969452CC0
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/f26f659a-b4fb-3a2a-a393-f847394715d4.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     22351
IP address blocks:        66.36.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:8c:35:3e:84:36:d9:69:45:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=6bf0709f-4045-4c46-a17a-2147feaa3d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:b6:90:67:9f:18:8c:c5:6b:fa:7f:59:1d:
                    90:11:da:66:bf:3b:6e:e2:dd:fd:87:1f:2c:a1:38:
                    12:2a:26:a9:2a:9b:77:a9:62:fe:1d:82:65:e6:12:
                    cb:da:76:c5:cd:14:9c:b6:16:de:47:5c:53:30:7c:
                    a4:be:4c:6b:75:8b:64:34:88:16:3c:76:69:38:3e:
                    6a:4a:49:a7:1a:6b:d7:1b:7f:e5:d2:cd:5d:01:3a:
                    c6:16:76:b4:51:16:dc:43:96:46:6d:97:c9:cf:b7:
                    e5:53:35:2b:0c:d1:9b:eb:6b:3c:17:8b:c9:5c:41:
                    e7:4a:05:3e:4f:ee:c4:fd:2b:2c:46:5b:ad:20:94:
                    6a:19:d1:7a:44:ad:19:4d:5e:2c:9d:3b:b6:d5:fa:
                    98:0c:fa:2a:43:61:83:be:66:c6:b3:d8:74:a8:2a:
                    93:92:5e:09:1b:a8:db:c8:60:b9:b3:b7:1f:5e:a8:
                    b0:ef:e9:bd:b4:6f:51:f3:2f:da:d6:66:9f:8f:27:
                    10:81:a5:99:82:2b:e5:02:90:55:0e:0e:51:73:ca:
                    7a:9e:9f:47:ed:5a:d7:19:30:6c:ba:13:2a:9d:32:
                    bd:82:2a:fc:34:ae:f6:29:4d:a9:92:50:e9:ee:89:
                    c4:9a:3e:b2:9b:1c:4f:42:29:64:44:f8:8c:41:d9:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F8:CC:76:30:F4:E8:EE:E4:B7:06:0F:97:CF:95:77:B7:DA:37:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/f26f659a-b4fb-3a2a-a393-f847394715d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:74:fb:70:cf:b8:40:1c:32:27:2f:92:88:1f:ac:e7:1d:57:
         6f:36:a9:7f:ec:4f:a9:93:a0:ee:c8:4b:fc:e7:41:3b:08:97:
         c0:67:a8:46:60:f5:b1:61:97:72:ac:34:f8:c3:b8:59:3a:13:
         a0:57:94:83:0d:7a:26:4d:a1:bf:79:4c:c5:c3:a0:5c:14:81:
         63:94:91:51:24:2b:6d:44:bb:dd:83:c2:57:36:f8:8a:06:62:
         d2:b5:95:0f:6f:dd:fa:68:e1:f4:c7:26:ac:24:75:01:6c:40:
         94:ee:b6:0c:1a:f1:f5:5d:f6:52:69:ea:42:4e:d9:f3:16:4a:
         39:31:4b:ad:36:3b:9f:9a:78:30:49:2d:51:f8:31:6f:9d:11:
         af:c2:12:8f:cb:b8:4a:1b:ef:fc:ba:53:77:76:a9:da:55:66:
         bf:98:07:fb:57:41:ca:be:f9:01:d4:fa:cc:75:eb:ac:62:e8:
         35:26:99:52:32:69:1d:81:3b:31:03:d1:ec:72:e8:aa:cb:c5:
         da:4f:63:3e:7e:a4:ea:5e:9b:4f:af:1b:d5:22:65:b6:f9:5f:
         b4:eb:4c:c1:a1:25:c0:2a:f4:41:78:d9:6b:58:0e:ea:2e:37:
         0f:c4:74:e3:3a:8c:f9:8a:b8:e5:a4:90:0e:07:61:21:70:b3:
         a6:4d:79:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2how1PoQ22WlFLMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm
YTUzMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
NmJmMDcwOWYtNDA0NS00YzQ2LWExN2EtMjE0N2ZlYWEzZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTi2kGefGIzFa/p/WR2QEdpmvztu4t39hx8s
oTgSKiapKpt3qWL+HYJl5hLL2nbFzRScthbeR1xTMHykvkxrdYtkNIgWPHZpOD5q
SkmnGmvXG3/l0s1dATrGFna0URbcQ5ZGbZfJz7flUzUrDNGb62s8F4vJXEHnSgU+
T+7E/SssRlutIJRqGdF6RK0ZTV4snTu21fqYDPoqQ2GDvmbGs9h0qCqTkl4JG6jb
yGC5s7cfXqiw7+m9tG9R8y/a1mafjycQgaWZgivlApBVDg5Rc8p6np9H7VrXGTBs
uhMqnTK9gir8NK72KU2pklDp7onEmj6ymxxPQilkRPiMQdkWMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/4zHYw9Oju5LcGD5fPlXe32jfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0
YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvZjI2ZjY1OWEtYjRmYi0z
YTJhLWEzOTMtZjg0NzM5NDcxNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3
NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5
ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm
Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQiTQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd0+3DPuEAcMicvkogfrOcdV282qX/sT6mToO7IS/znQTsIl8BnqEZg
9bFhl3KsNPjDuFk6E6BXlIMNeiZNob95TMXDoFwUgWOUkVEkK21Eu92Dwlc2+IoG
YtK1lQ9v3fpo4fTHJqwkdQFsQJTutgwa8fVd9lJp6kJO2fMWSjkxS602O5+aeDBJ
LVH4MW+dEa/CEo/LuEob7/y6U3d2qdpVZr+YB/tXQcq++QHU+sx166xi6DUmmVIy
aR2BOzED0exy6KrLxdpPYz5+pOpem0+vG9UiZbb5X7TrTMGhJcAq9EF42WtYDuou
Nw/EdOM6jPmKuOWkkA4HYSFws6ZNeU8=
-----END CERTIFICATE-----
Generated at Tue Aug 26 10:40:13 2025 by rpki-client