Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5d37394b-a34f-300f-81ab-aef557a62c52.roa
File:                     5d37394b-a34f-300f-81ab-aef557a62c52.roa (raw, json)
Hash identifier:          XrAxesxzE4MXbVLjuwKW6c6rLhxN0JvNrra3DDNAyhI=
Subject key identifier:   7C:A4:22:37:AE:88:02:7E:36:0C:9D:09:32:CE:D3:44:19:6C:5E:5A
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285848AFB60CF5A8C599A9B39EB400
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5d37394b-a34f-300f-81ab-aef557a62c52.roa
Signing time:             Mon 27 Jan 2025 18:40:09 +0000
ROA not before:           Mon 27 Jan 2025 18:40:09 +0000
ROA not after:            Sun 27 Apr 2025 17:40:09 +0000
asID:                     54198
IP address blocks:        66.78.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:b6:0c:f5:a8:c5:99:a9:b3:9e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jan 27 18:40:09 2025 GMT
            Not After : Apr 27 17:40:09 2025 GMT
        Subject: CN=8fbd7a7a-e3c1-41da-8a62-5d0569616f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:05:a6:a6:9c:b6:2e:26:38:c3:94:4c:c9:
                    24:76:df:9a:11:f2:eb:e1:6f:ef:1e:52:bb:3a:2c:
                    15:c7:3f:31:5f:e7:52:ac:e1:ba:19:7c:59:c9:90:
                    db:d5:60:e8:d5:a7:d9:e0:e6:1a:2a:e5:2f:05:61:
                    82:91:30:c9:be:c3:02:6b:8e:60:d0:a1:79:ff:c2:
                    1f:93:74:20:16:e6:53:17:60:e2:1f:40:54:9d:04:
                    9e:02:83:da:e5:39:b5:a7:73:a5:9a:6e:0b:01:15:
                    54:59:5d:65:47:44:c0:81:a2:6c:54:b8:21:b4:c2:
                    f4:91:59:99:52:ef:b0:aa:60:55:3b:bd:a1:d3:c1:
                    02:06:f3:c0:1c:18:f4:02:56:e8:49:d3:42:43:69:
                    96:f8:9b:d9:d4:bf:a5:7f:90:1f:7f:0b:60:c7:94:
                    62:d6:7d:1a:e6:83:de:2b:d9:ec:e7:04:14:25:2b:
                    c8:ce:44:6c:21:b2:56:a1:22:d1:53:27:f6:c4:79:
                    3e:36:b0:d3:91:b2:ff:1f:08:18:87:9b:d9:99:de:
                    b5:01:a1:5e:88:bd:74:2b:eb:88:ff:bb:6d:51:3e:
                    50:2b:66:35:a4:ae:61:f6:f8:9a:ca:26:99:a8:6e:
                    2f:cd:7c:70:0e:33:03:d6:ef:e7:f6:12:9f:94:9a:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:22:37:AE:88:02:7E:36:0C:9D:09:32:CE:D3:44:19:6C:5E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5d37394b-a34f-300f-81ab-aef557a62c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:33:9b:d7:90:0e:a7:6e:6a:c9:04:c0:2d:5e:e0:3e:55:e4:
         bb:2c:c8:71:3b:f7:e9:a5:76:70:be:23:df:2e:11:08:d0:49:
         2f:bc:5f:54:b0:cc:42:68:a4:33:ff:f2:6c:79:3b:b3:69:a1:
         8d:28:95:e3:1f:d4:8d:ae:2b:d8:6b:98:c8:bf:10:21:c1:54:
         d9:bc:87:d2:cd:18:5f:8e:ad:6b:00:b0:b9:a4:7e:ce:45:3b:
         80:16:64:9d:21:3a:ca:9e:80:be:d6:ea:5c:a1:4d:0e:c6:33:
         15:97:f7:af:93:23:87:21:08:53:04:36:08:f3:57:3e:8a:e0:
         f8:57:07:87:3f:71:b0:4a:df:35:d5:f9:7f:fc:94:1e:f3:92:
         92:c8:7a:9b:e7:d4:b2:af:3e:66:bd:85:5c:7b:00:0b:5a:89:
         61:ce:25:b6:66:45:6f:45:f0:18:06:7b:78:4e:27:d2:37:4e:
         75:0e:30:06:d4:04:37:b2:0f:82:a4:fe:69:21:e1:6c:0c:cf:
         e8:dc:26:70:1d:fa:5c:1a:41:30:88:41:b3:f5:88:37:0a:d6:
         77:6a:42:e1:e7:18:94:47:68:ff:a4:ef:ad:fb:0e:44:81:e1:
         fd:c4:ad:72:88:dc:a2:ca:a5:7c:44:3a:e7:7c:b4:14:da:f9:
         b9:69:fa:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivtgz1qMWZqbOetAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI1MDEyNzE4NDAwOVoXDTI1MDQyNzE3NDAwOVowLzEtMCsGA1UEAxMk
OGZiZDdhN2EtZTNjMS00MWRhLThhNjItNWQwNTY5NjE2ZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk4Fpqacti4mOMOUTMkkdt+aEfLr4W/vHlK7
OiwVxz8xX+dSrOG6GXxZyZDb1WDo1afZ4OYaKuUvBWGCkTDJvsMCa45g0KF5/8If
k3QgFuZTF2DiH0BUnQSeAoPa5Tm1p3Olmm4LARVUWV1lR0TAgaJsVLghtML0kVmZ
Uu+wqmBVO72h08ECBvPAHBj0AlboSdNCQ2mW+JvZ1L+lf5Affwtgx5Ri1n0a5oPe
K9ns5wQUJSvIzkRsIbJWoSLRUyf2xHk+NrDTkbL/HwgYh5vZmd61AaFeiL10K+uI
/7ttUT5QK2Y1pK5h9viayiaZqG4vzXxwDjMD1u/n9hKflJrl9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHykIjeuiAJ+NgydCTLO00QZbF5aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNWQzNzM5NGItYTM0Zi0z
MDBmLTgxYWItYWVmNTU3YTYyYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQk5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4zm9eQDqduaskEwC1e4D5V5LssyHE79+mldnC+I98uEQjQSS+8X1Sw
zEJopDP/8mx5O7NpoY0oleMf1I2uK9hrmMi/ECHBVNm8h9LNGF+OrWsAsLmkfs5F
O4AWZJ0hOsqegL7W6lyhTQ7GMxWX96+TI4chCFMENgjzVz6K4PhXB4c/cbBK3zXV
+X/8lB7zkpLIepvn1LKvPma9hVx7AAtaiWHOJbZmRW9F8BgGe3hOJ9I3TnUOMAbU
BDeyD4Kk/mkh4WwMz+jcJnAd+lwaQTCIQbP1iDcK1ndqQuHnGJRHaP+k7637DkSB
4f3ErXKI3KLKpXxEOud8tBTa+blp+mA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:37 2025 by rpki-client