Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa
File:                     c899a622-f404-3044-83bc-25459ddb7206.roa (raw, json)
Hash identifier:          nzMaLLpLpLFZQTgwJAWGbw1KQSVZ8Xac3aRqxjiMo/U=
Subject key identifier:   FF:C7:61:E6:2D:15:88:9B:58:3F:13:B1:C2:28:BC:8D:B7:48:0D:39
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F4328584B21CC31DA60C301504B879E80
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     26703
IP address blocks:        66.102.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:31:da:60:c3:01:50:4b:87:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=1efb1ac5-a5ce-49e9-95fb-ed3e25399e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e9:3b:61:7d:10:d2:70:d3:12:ba:b2:b0:ef:
                    a1:98:c0:5e:38:de:b2:03:c3:1b:e3:8c:bc:3c:b4:
                    89:26:ba:57:4c:a6:66:b5:9e:ea:f3:72:a1:5a:1f:
                    db:c5:1e:b0:09:9e:7a:f4:19:a6:9a:e4:26:cb:1e:
                    b1:25:8d:30:b4:39:b8:1c:2e:c0:fa:a0:4a:a8:53:
                    5e:85:67:1e:24:65:2c:f4:67:e4:ae:e2:73:f3:7c:
                    f1:2d:95:5d:b5:2d:5d:54:c6:1d:e9:05:a0:d3:2d:
                    e5:af:52:c7:7c:a1:a9:92:fc:a8:ff:bb:63:fc:0c:
                    8c:b5:7a:3d:dd:e8:7b:2d:a9:05:6e:5b:45:05:88:
                    44:2b:b1:2b:f9:6d:57:8a:b1:7d:22:4e:f6:eb:f0:
                    fb:fb:5e:28:ad:d5:3f:3a:ac:2d:89:02:3d:ae:f9:
                    f6:62:0d:44:8e:36:41:f5:4d:32:e6:2c:ac:75:b5:
                    75:eb:a1:b9:41:4e:f1:57:a0:e2:f9:cf:26:89:ca:
                    f9:08:41:da:45:b0:08:de:ab:bb:0f:4d:35:bc:7f:
                    e8:1e:62:6d:14:a1:89:bd:9e:c7:85:77:07:61:ce:
                    05:95:b7:0f:a0:b5:0d:45:ab:a6:26:5b:a1:f0:93:
                    52:7c:43:42:b0:db:e3:c4:68:53:c7:bc:d1:0d:96:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:61:E6:2D:15:88:9B:58:3F:13:B1:C2:28:BC:8D:B7:48:0D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/c899a622-f404-3044-83bc-25459ddb7206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:31:dc:6c:f1:0c:e8:52:cf:3e:02:45:9f:c0:e6:42:3f:9a:
         72:e3:44:99:eb:8d:23:f4:ed:49:68:a0:6f:af:e4:42:ec:27:
         0e:9e:29:fd:7d:5c:77:f2:d4:e8:2c:a7:7c:a6:2c:70:f4:5d:
         fa:8d:09:b6:8c:61:56:e6:55:4f:67:43:60:5e:71:74:ca:ea:
         e9:67:07:ff:a7:1d:50:0d:75:06:e1:35:78:fa:de:0f:28:04:
         a2:93:b6:36:bc:fd:9d:ea:30:15:25:7f:12:81:8a:5e:39:5d:
         0c:a7:4b:af:8b:b7:09:56:39:4b:f2:38:9d:74:96:61:f9:d7:
         23:a4:0a:81:69:83:22:ee:1f:c9:7e:da:15:53:4e:4e:62:06:
         ea:dd:09:1d:e2:4a:35:25:99:1c:3f:46:bd:f5:cc:dd:04:1b:
         63:a5:c4:8d:e2:b8:b5:6e:ff:3a:84:13:9e:26:6b:dd:63:0c:
         61:8d:88:9f:06:ad:fe:c8:09:5b:c7:f6:72:ad:e9:44:d0:47:
         78:c9:cc:d1:c3:09:b5:0e:27:19:f3:75:b8:50:4d:e2:40:56:
         33:26:71:6f:6f:89:f2:93:16:1c:79:1c:e3:0a:39:85:63:a8:
         09:e8:ff:0b:a5:66:3c:ff:2a:bb:82:43:72:15:d6:52:10:6f:
         ca:89:b8:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzDHaYMMBUEuHnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj
ZTA4MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
MWVmYjFhYzUtYTVjZS00OWU5LTk1ZmItZWQzZTI1Mzk5ZTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+k7YX0Q0nDTErqysO+hmMBeON6yA8Mb44y8
PLSJJrpXTKZmtZ7q83KhWh/bxR6wCZ569BmmmuQmyx6xJY0wtDm4HC7A+qBKqFNe
hWceJGUs9GfkruJz83zxLZVdtS1dVMYd6QWg0y3lr1LHfKGpkvyo/7tj/AyMtXo9
3eh7LakFbltFBYhEK7Er+W1XirF9Ik726/D7+14ordU/OqwtiQI9rvn2Yg1EjjZB
9U0y5iysdbV166G5QU7xV6Di+c8micr5CEHaRbAI3qu7D001vH/oHmJtFKGJvZ7H
hXcHYc4FlbcPoLUNRaumJluh8JNSfENCsNvjxGhTx7zRDZasUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/HYeYtFYibWD8TscIovI23SA05MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4
M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvYzg5OWE2MjItZjQwNC0z
MDQ0LTgzYmMtMjU0NTlkZGI3MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4
NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl
Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll
ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmbfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgx3GzxDOhSzz4CRZ/A5kI/mnLjRJnrjSP07UlooG+v5ELsJw6eKf19
XHfy1Ogsp3ymLHD0XfqNCbaMYVbmVU9nQ2BecXTK6ulnB/+nHVANdQbhNXj63g8o
BKKTtja8/Z3qMBUlfxKBil45XQynS6+LtwlWOUvyOJ10lmH51yOkCoFpgyLuH8l+
2hVTTk5iBurdCR3iSjUlmRw/Rr31zN0EG2OlxI3iuLVu/zqEE54ma91jDGGNiJ8G
rf7ICVvH9nKt6UTQR3jJzNHDCbUOJxnzdbhQTeJAVjMmcW9vifKTFhx5HOMKOYVj
qAno/wulZjz/KruCQ3IV1lIQb8qJuEg=
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:03:20 2025 by rpki-client