Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/77385484-ead0-3641-8864-f230513fc039.roa
File:                     77385484-ead0-3641-8864-f230513fc039.roa (raw, json)
Hash identifier:          1zgCy0JyUe7d6wz8YZ6UWL1w5h0GQdpKcwCSIVfl57A=
Subject key identifier:   6C:7E:5A:66:CA:F2:F0:5F:FD:C1:C0:46:B9:A8:65:A0:3F:08:EF:81
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584B5DD2090E04F9A8572E552880
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/77385484-ead0-3641-8864-f230513fc039.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        137.66.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:09:0e:04:f9:a8:57:2e:55:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=47412c41-e31f-430f-a9a5-6c1af6aaea82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:04:53:81:f4:30:a1:12:24:8d:cb:2f:23:
                    08:3b:b4:82:88:97:93:af:d6:9e:20:e5:e5:63:97:
                    3d:ea:23:96:53:d6:a4:0c:6b:59:b6:72:80:6c:b5:
                    ac:06:31:89:e8:41:9a:70:b6:dc:78:4d:d9:a3:df:
                    ce:f4:0c:df:37:55:48:0c:c6:2e:ac:42:7b:a5:3b:
                    c9:f8:d9:ba:1f:96:f1:60:e0:1f:6b:d2:df:cd:75:
                    58:6c:34:5d:5a:95:3a:54:08:ad:77:3a:78:21:a3:
                    32:01:9f:3d:de:c6:a4:90:91:db:a5:90:61:4c:3e:
                    d2:39:cd:98:7a:4a:8c:eb:a8:d9:bf:58:33:01:21:
                    12:84:db:e7:fe:ef:5e:15:7d:eb:42:18:09:06:41:
                    9d:ec:3b:48:36:b9:43:5b:2f:68:69:37:64:cb:dc:
                    df:15:5f:2e:76:73:bc:76:e6:dc:73:05:6a:ab:b1:
                    7d:30:7e:24:c1:ae:e6:53:96:c7:be:28:f6:ad:a2:
                    e6:f8:5a:69:7b:09:3e:7b:6e:4a:30:15:32:dc:9e:
                    0f:ac:e8:69:fb:2e:2d:bd:d8:11:e4:2c:06:d6:2d:
                    bb:71:bb:70:02:a9:b1:c6:79:b6:68:2c:4c:2b:7e:
                    7f:38:46:b6:71:af:49:08:21:e1:53:00:24:da:51:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7E:5A:66:CA:F2:F0:5F:FD:C1:C0:46:B9:A8:65:A0:3F:08:EF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/77385484-ead0-3641-8864-f230513fc039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.66.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:25:40:8b:d7:df:25:56:fb:a1:ae:be:a1:96:c3:88:51:dd:
         c1:7f:8f:e1:13:62:e0:05:cd:ca:ef:d2:e6:a4:15:47:05:c2:
         5f:f8:cc:ec:ca:22:99:00:ca:44:87:4e:55:5b:0c:5e:06:8c:
         c1:a7:16:07:03:72:4c:2b:91:ab:98:cf:d9:6b:e9:b2:ee:0a:
         61:11:df:d1:ce:9c:36:1f:cd:61:ae:f2:b7:6b:14:73:3d:3b:
         24:da:58:00:a6:9a:07:a4:06:8d:a4:c8:aa:ad:2c:03:23:10:
         bc:9d:b4:88:ea:db:82:84:36:05:58:9f:06:2e:42:a9:fe:54:
         77:11:b6:01:86:45:c9:87:c2:39:f0:ea:58:c2:a4:5d:59:d4:
         89:c1:8b:7a:11:6c:fa:cb:c4:12:2f:19:8a:97:17:8d:94:72:
         6c:5d:66:82:d1:3c:98:9f:0b:9c:cd:3c:1c:0a:fc:b8:70:14:
         dd:76:25:12:21:54:d4:d3:c7:a4:08:ea:4a:a7:07:71:4f:15:
         ea:aa:97:5f:fb:e4:0c:60:36:17:a7:7f:ee:bc:15:15:6c:a2:
         36:f9:cf:25:ac:f6:0a:be:b4:f4:4f:32:33:7b:4e:89:69:cd:
         8c:d6:9a:03:da:01:07:33:44:83:a1:0f:d1:f0:b4:62:62:2c:
         0d:70:9d:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gkOBPmoVy5VKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4
YjY4MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
NDc0MTJjNDEtZTMxZi00MzBmLWE5YTUtNmMxYWY2YWFlYTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokoEU4H0MKESJI3LLyMIO7SCiJeTr9aeIOXl
Y5c96iOWU9akDGtZtnKAbLWsBjGJ6EGacLbceE3Zo9/O9AzfN1VIDMYurEJ7pTvJ
+Nm6H5bxYOAfa9LfzXVYbDRdWpU6VAitdzp4IaMyAZ893sakkJHbpZBhTD7SOc2Y
ekqM66jZv1gzASEShNvn/u9eFX3rQhgJBkGd7DtINrlDWy9oaTdky9zfFV8udnO8
dubccwVqq7F9MH4kwa7mU5bHvij2raLm+Fppewk+e25KMBUy3J4PrOhp+y4tvdgR
5CwG1i27cbtwAqmxxnm2aCxMK35/OEa2ca9JCCHhUwAk2lExWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGx+WmbK8vBf/cHARrmoZaA/CO+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy
ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNzczODU0ODQtZWFkMC0z
NjQxLTg4NjQtZjIzMDUxM2ZjMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5
YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk
OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy
ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYlQIvX3yVW+6GuvqGWw4hR3cF/j+ETYuAFzcrv0uakFUcFwl/4zOzK
IpkAykSHTlVbDF4GjMGnFgcDckwrkauYz9lr6bLuCmER39HOnDYfzWGu8rdrFHM9
OyTaWACmmgekBo2kyKqtLAMjELydtIjq24KENgVYnwYuQqn+VHcRtgGGRcmHwjnw
6ljCpF1Z1InBi3oRbPrLxBIvGYqXF42UcmxdZoLRPJifC5zNPBwK/LhwFN12JRIh
VNTTx6QI6kqnB3FPFeqql1/75AxgNhenf+68FRVsojb5zyWs9gq+tPRPMjN7Tolp
zYzWmgPaAQczRIOhD9HwtGJiLA1wnXA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:07:09 2025 by rpki-client