Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa
File:                     0f5de3cf-38f4-358d-87b9-d26a85402381.roa (raw, json)
Hash identifier:          J86Q8y/2k8lW0FXPqjNylW5nV4sTRfvFADOYR4DFnlQ=
Subject key identifier:   6E:CE:C3:D9:73:6D:FB:E5:E4:20:37:83:98:91:1F:97:C5:00:44:12
Certificate issuer:       /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Certificate serial:       010D0C9F4328584B5B50451AAE77DCB993D26B9F
Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa
Signing time:             Mon 29 Sep 2025 15:27:59 +0000
ROA not before:           Mon 29 Sep 2025 15:27:59 +0000
ROA not after:            Sun 28 Dec 2025 16:27:59 +0000
asID:                     7029
IP address blocks:        66.207.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:50:45:1a:ae:77:dc:b9:93:d2:6b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
        Validity
            Not Before: Sep 29 15:27:59 2025 GMT
            Not After : Dec 28 16:27:59 2025 GMT
        Subject: CN=b8ede9b0-7734-4e11-8b21-2c0cbc617a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:22:d0:c2:14:42:ce:06:88:47:c8:74:0e:4d:
                    5e:b0:f8:1e:66:07:0b:47:a9:63:1d:d2:24:02:05:
                    9c:f5:f9:33:05:6d:6d:b7:d4:2d:22:e2:5d:32:4f:
                    bc:ea:77:5f:cc:ca:73:e4:7c:44:88:c6:de:05:b0:
                    11:18:b9:79:8b:08:99:08:75:f3:97:11:23:27:56:
                    19:e5:58:be:f5:42:23:03:2f:56:81:61:2c:ca:60:
                    18:7c:4f:ae:8b:b1:b9:11:77:db:86:49:1a:ce:59:
                    ba:42:11:3a:0f:25:c3:cb:71:e2:35:af:e3:37:72:
                    0f:98:0e:e2:cc:c5:b2:32:62:e8:e3:03:0f:47:65:
                    8a:e7:6b:96:d8:d9:35:cf:9f:98:97:4a:43:43:6d:
                    40:ac:16:7c:58:f3:52:8f:25:5c:2e:06:5a:fe:f9:
                    e6:23:31:b9:34:44:ca:69:d9:cd:eb:ec:e4:62:e2:
                    a5:d4:00:b6:54:ad:6e:ca:f8:37:d9:c8:c8:65:77:
                    2c:cd:51:f3:84:4d:9a:57:e9:e4:85:9d:66:cc:d2:
                    80:44:c3:38:eb:30:2b:9d:54:ec:10:df:2e:95:e6:
                    f6:9e:b5:63:2f:1b:eb:89:f5:f3:75:e6:fa:81:d2:
                    cd:f1:25:aa:e4:df:82:d5:f0:30:50:1e:41:9d:27:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:C3:D9:73:6D:FB:E5:E4:20:37:83:98:91:1F:97:C5:00:44:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/0f5de3cf-38f4-358d-87b9-d26a85402381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl

            X509v3 Authority Key Identifier:
                keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:33:8c:e9:47:40:bd:b4:cd:8d:e3:1d:0b:d3:13:d6:ee:7c:
         ff:f7:f7:75:88:e8:8c:98:bb:d1:9d:c2:c4:d3:bb:e2:7c:81:
         25:76:b7:44:23:4b:83:90:b7:1e:bd:f7:85:e0:fc:88:56:1b:
         9c:bd:3c:06:d6:81:eb:be:00:0a:5c:a7:c0:a1:d5:06:ca:10:
         20:a8:4d:76:ff:76:7f:14:45:6b:7a:82:a4:83:6f:47:a4:ae:
         3d:35:af:ae:09:d5:ef:c5:3e:e9:61:a2:0d:4f:57:29:f5:1e:
         ba:c5:fe:fa:cd:c9:44:e2:ae:e9:ec:de:f0:f0:2e:04:1a:77:
         9f:97:ab:17:bc:57:f9:68:9e:0c:d3:8e:6b:23:b1:3a:55:02:
         c8:0f:63:84:a9:ff:22:51:72:34:33:28:0a:c3:e5:d5:a7:40:
         34:e0:c0:d6:c7:97:74:42:24:0e:f5:9f:e6:0b:4b:d8:53:41:
         24:fc:55:25:b4:91:87:90:51:0f:2c:81:80:45:7d:b4:71:a8:
         0d:a0:68:f2:a2:b0:01:8a:0f:e9:b6:fa:f3:64:a2:55:55:ec:
         5e:0b:28:23:ef:17:e7:5b:56:f2:ae:20:29:67:56:60:f9:ed:
         7d:81:3d:f8:92:a6:72:b6:39:ec:d2:1c:1f:69:95:02:50:67:
         1f:ee:2d:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbUEUarnfcuZPSa58wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk
YjYwMB4XDTI1MDkyOTE1Mjc1OVoXDTI1MTIyODE2Mjc1OVowLzEtMCsGA1UEAxMk
YjhlZGU5YjAtNzczNC00ZTExLThiMjEtMmMwY2JjNjE3YTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CLQwhRCzgaIR8h0Dk1esPgeZgcLR6ljHdIk
AgWc9fkzBW1tt9QtIuJdMk+86ndfzMpz5HxEiMbeBbARGLl5iwiZCHXzlxEjJ1YZ
5Vi+9UIjAy9WgWEsymAYfE+ui7G5EXfbhkkazlm6QhE6DyXDy3HiNa/jN3IPmA7i
zMWyMmLo4wMPR2WK52uW2Nk1z5+Yl0pDQ21ArBZ8WPNSjyVcLgZa/vnmIzG5NETK
adnN6+zkYuKl1AC2VK1uyvg32cjIZXcszVHzhE2aV+nkhZ1mzNKARMM46zArnVTs
EN8uleb2nrVjLxvrifXzdeb6gdLN8SWq5N+C1fAwUB5BnSf3/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7Ow9lzbfvl5CA3g5iRH5fFAEQSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvMGY1ZGUzY2YtMzhmNC0z
NThkLTg3YjktZDI2YTg1NDAyMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj
NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0
ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1
N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYzjOlHQL20zY3jHQvTE9bufP/393WI6IyYu9GdwsTTu+J8gSV2t0Qj
S4OQtx6994Xg/IhWG5y9PAbWgeu+AApcp8Ch1QbKECCoTXb/dn8URWt6gqSDb0ek
rj01r64J1e/FPulhog1PVyn1HrrF/vrNyUTiruns3vDwLgQad5+Xqxe8V/longzT
jmsjsTpVAsgPY4Sp/yJRcjQzKArD5dWnQDTgwNbHl3RCJA71n+YLS9hTQST8VSW0
kYeQUQ8sgYBFfbRxqA2gaPKisAGKD+m2+vNkolVV7F4LKCPvF+dbVvKuIClnVmD5
7X2BPfiSpnK2OezSHB9plQJQZx/uLds=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:27 2025 by rpki-client