Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80c0b86d-c93e-3578-90a0-25a7b1c8687a.roa
File:                     80c0b86d-c93e-3578-90a0-25a7b1c8687a.roa (raw, json)
Hash identifier:          q6BtGDYBCrUJUOMST2HAMXwyH4UvGJ8PM9nQpod6JaU=
Subject key identifier:   2D:A5:BD:C9:72:14:BA:F6:A2:9A:92:78:2A:53:19:3A:0A:6C:6C:80
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AD8C57E0B979DE9E2C6025F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80c0b86d-c93e-3578-90a0-25a7b1c8687a.roa
Signing time:             Wed 13 Aug 2025 21:13:17 +0000
ROA not before:           Wed 13 Aug 2025 21:13:17 +0000
ROA not after:            Tue 11 Nov 2025 22:13:17 +0000
asID:                     11798
IP address blocks:        69.27.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:c5:7e:0b:97:9d:e9:e2:c6:02:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 13 21:13:17 2025 GMT
            Not After : Nov 11 22:13:17 2025 GMT
        Subject: CN=626aabae-b94f-4e41-95d4-59a5ffe662c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:30:65:f2:7d:c5:50:d5:d2:b2:95:a3:63:
                    c4:50:80:0d:4c:9d:16:29:17:b9:df:34:22:a3:06:
                    aa:f3:41:ec:82:ae:c5:25:20:a4:4b:55:a9:a3:34:
                    e4:b8:7a:2e:b1:73:08:94:60:79:1f:97:10:a9:4b:
                    6e:fa:10:50:c0:a2:0e:3f:f6:2e:72:9d:11:84:b3:
                    61:cf:95:4c:52:d7:ab:0a:e3:ea:80:21:d7:e3:e9:
                    81:d5:6f:d1:65:26:7a:28:a2:90:54:e5:c1:e5:4e:
                    20:72:80:53:be:e9:d3:2e:3d:b4:4e:9f:df:b5:e7:
                    14:a4:60:7e:66:0d:75:a3:aa:6c:b0:46:f9:9e:2b:
                    d2:96:da:12:c9:3d:20:66:45:5e:f4:90:f8:42:84:
                    17:fc:db:8a:15:a0:82:23:29:83:de:d5:97:8b:1d:
                    d8:ec:32:a9:14:9b:23:f8:e7:c5:d7:db:1d:59:11:
                    95:0b:48:96:c1:aa:8d:e4:7e:92:ff:ac:3d:89:38:
                    86:9b:d4:f4:0e:eb:82:1c:f6:ee:e9:d1:28:ea:dd:
                    d0:00:8a:4d:3d:7c:db:aa:76:a0:5c:45:1d:44:82:
                    21:77:cd:34:3b:b0:3f:2b:f0:af:a1:60:20:7d:ad:
                    63:67:b7:3f:b6:39:0a:8d:c8:ae:ae:75:d4:2c:0f:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A5:BD:C9:72:14:BA:F6:A2:9A:92:78:2A:53:19:3A:0A:6C:6C:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80c0b86d-c93e-3578-90a0-25a7b1c8687a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.27.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:34:9a:47:f0:ee:ef:89:fa:ff:fb:21:0f:c3:98:a3:d3:8d:
         2c:b4:16:1f:c8:2b:db:9f:ab:0d:d4:6b:97:31:ed:07:a4:77:
         ac:a3:e3:97:57:cc:52:61:e2:b6:50:c6:4f:d8:d3:36:a2:b1:
         83:cc:a9:c3:18:6d:af:07:5e:cb:75:9f:bf:6e:e3:8e:fd:34:
         60:ff:15:43:f3:a0:d0:38:ea:f1:f0:c1:91:a4:68:84:f4:b7:
         99:7c:7e:30:8e:35:f0:d3:95:69:df:ac:e1:24:74:68:1a:9c:
         b6:9a:ba:24:2e:5e:be:7e:f6:a4:2e:4c:c0:dd:c7:4b:c3:a7:
         29:0f:97:bc:9b:36:df:ab:2c:7b:1a:4e:7c:31:49:d0:aa:ed:
         e5:dc:16:3c:4b:06:2f:ca:fb:9e:47:53:7f:03:7d:f2:9a:f7:
         6c:dc:00:bc:67:5e:e8:c0:e9:df:8c:be:6b:d3:a0:89:d0:6f:
         5f:2b:b6:8e:f9:01:73:3e:6d:25:66:44:d4:4b:bf:fb:85:8a:
         39:80:dc:c5:aa:67:3a:f5:0b:ad:f1:03:66:96:f1:d6:5b:4e:
         09:3d:27:b4:ea:21:f3:0c:00:0a:49:fc:38:c6:d9:35:ef:ad:
         ea:98:82:85:a2:7c:51:7b:68:ee:ed:1e:f7:3d:ae:2a:a4:db:
         32:bb:79:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYxX4Ll53p4sYCX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDgxMzIxMTMxN1oXDTI1MTExMTIyMTMxN1owLzEtMCsGA1UEAxMk
NjI2YWFiYWUtYjk0Zi00ZTQxLTk1ZDQtNTlhNWZmZTY2MmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSUwZfJ9xVDV0rKVo2PEUIANTJ0WKRe53zQi
owaq80Hsgq7FJSCkS1WpozTkuHousXMIlGB5H5cQqUtu+hBQwKIOP/Yucp0RhLNh
z5VMUterCuPqgCHX4+mB1W/RZSZ6KKKQVOXB5U4gcoBTvunTLj20Tp/ftecUpGB+
Zg11o6pssEb5nivSltoSyT0gZkVe9JD4QoQX/NuKFaCCIymD3tWXix3Y7DKpFJsj
+OfF19sdWRGVC0iWwaqN5H6S/6w9iTiGm9T0DuuCHPbu6dEo6t3QAIpNPXzbqnag
XEUdRIIhd800O7A/K/CvoWAgfa1jZ7c/tjkKjciurnXULA9WbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2lvclyFLr2opqSeCpTGToKbGyAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODBjMGI4NmQtYzkzZS0z
NTc4LTkwYTAtMjVhN2IxYzg2ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRugMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg0mkfw7u+J+v/7IQ/DmKPTjSy0Fh/IK9ufqw3Ua5cx7Qekd6yj45dX
zFJh4rZQxk/Y0zaisYPMqcMYba8HXst1n79u4479NGD/FUPzoNA46vHwwZGkaIT0
t5l8fjCONfDTlWnfrOEkdGganLaauiQuXr5+9qQuTMDdx0vDpykPl7ybNt+rLHsa
TnwxSdCq7eXcFjxLBi/K+55HU38DffKa92zcALxnXujA6d+MvmvToInQb18rto75
AXM+bSVmRNRLv/uFijmA3MWqZzr1C63xA2aW8dZbTgk9J7TqIfMMAApJ/DjG2TXv
reqYgoWifFF7aO7tHvc9riqk2zK7ees=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:27 2025 by rpki-client