Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa
File:                     a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa (raw, json)
Hash identifier:          Z83+mUVQYor+jwfTYAk7RBxKDIiMpi0eOdXF7XniNXg=
Subject key identifier:   63:A2:7B:F2:E7:48:CE:78:30:6B:D2:04:6E:F3:7E:7D:1D:7D:A4:69
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD9065B52A766DEF63A80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        66.46.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d9:06:5b:52:a7:66:de:f6:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=eb20a5ff-b56f-4e82-88da-9f0745d21f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:62:53:d3:5a:56:21:5a:47:e2:30:78:48:
                    37:56:a7:02:95:16:6b:c0:09:53:c5:0f:d9:9f:74:
                    ac:71:a6:a3:58:39:ce:1f:24:54:c2:46:b3:5f:87:
                    e6:e2:21:30:e8:21:63:ed:b1:7b:06:24:ad:1b:3b:
                    db:7a:c2:a8:15:3b:c5:f1:5d:92:fa:a3:2a:17:52:
                    60:3b:b7:fc:1c:af:e6:60:a0:b6:fb:2a:6b:2f:81:
                    31:f9:8f:db:e2:da:b5:01:ad:d0:35:d6:6a:d8:e2:
                    76:2b:56:b9:6a:8f:5e:f1:49:e3:b9:09:a3:42:fd:
                    2c:84:e0:70:9a:6d:3a:ee:5c:ec:57:f7:91:de:73:
                    77:56:a6:6b:65:a2:38:9f:02:7a:fe:2d:39:e2:89:
                    95:a8:14:4b:d0:32:41:60:b5:0e:1a:3c:6f:be:97:
                    5e:1b:22:92:76:1f:f3:eb:39:8f:75:6f:6d:14:2a:
                    77:17:f6:59:5f:4b:2b:b2:bf:d8:15:73:0a:13:69:
                    3f:84:a5:f4:23:f1:77:b8:09:2f:8f:29:25:0f:de:
                    98:41:04:2a:b2:b7:87:e4:fc:e9:3a:18:e8:fb:d3:
                    45:fa:09:10:84:2e:f4:7f:9f:5e:b0:d8:c1:a3:23:
                    83:95:4c:b8:41:5b:4e:a0:ce:a5:b7:8a:d3:6d:c2:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A2:7B:F2:E7:48:CE:78:30:6B:D2:04:6E:F3:7E:7D:1D:7D:A4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:d0:b3:7b:85:10:ed:4b:ec:75:36:24:2a:85:80:60:24:
         91:cd:a8:e0:16:cf:f2:c2:e5:82:61:dc:a2:29:8b:b1:1b:47:
         d2:fe:19:b0:31:2e:bd:37:5a:dc:1d:9b:25:80:bc:48:8f:a8:
         86:b7:b9:79:2a:dd:ef:16:3b:46:96:07:44:a0:95:17:1d:72:
         ed:f7:39:44:ab:05:73:6d:6e:46:da:b8:e3:12:25:7a:6b:a2:
         51:0e:71:67:8b:cb:94:0d:2f:5b:c6:b6:b7:3b:fe:40:50:7e:
         ae:8e:71:c1:68:18:68:57:08:be:0b:29:3a:52:7b:a1:8a:73:
         3b:81:6f:d9:30:e4:9c:a2:d6:cb:68:30:ac:22:bc:34:05:47:
         c2:00:d0:69:8a:42:2f:22:a3:1e:a4:9e:29:ff:22:c2:de:d7:
         02:05:2a:32:90:a0:11:10:b1:f2:ef:b6:bc:20:a5:5e:a4:cc:
         30:7e:25:51:5f:91:a3:91:9f:ff:28:6c:be:db:a2:76:fb:28:
         96:e7:ea:34:d8:80:87:44:c8:77:65:01:85:59:a2:52:94:e0:
         a6:e9:e9:26:b7:33:3a:13:3c:5a:3b:c3:f7:0e:91:2a:9e:ae:
         2d:b3:b9:82:cd:f6:cc:26:d8:c4:e2:61:a5:0f:86:a5:b3:1f:
         86:d7:0d:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539kGW1KnZt72OoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
ZWIyMGE1ZmYtYjU2Zi00ZTgyLTg4ZGEtOWYwNzQ1ZDIxZjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIliU9NaViFaR+IweEg3VqcClRZrwAlTxQ/Z
n3SscaajWDnOHyRUwkazX4fm4iEw6CFj7bF7BiStGzvbesKoFTvF8V2S+qMqF1Jg
O7f8HK/mYKC2+yprL4Ex+Y/b4tq1Aa3QNdZq2OJ2K1a5ao9e8UnjuQmjQv0shOBw
mm067lzsV/eR3nN3VqZrZaI4nwJ6/i054omVqBRL0DJBYLUOGjxvvpdeGyKSdh/z
6zmPdW9tFCp3F/ZZX0srsr/YFXMKE2k/hKX0I/F3uAkvjyklD96YQQQqsreH5Pzp
Ohjo+9NF+gkQhC70f59esNjBoyODlUy4QVtOoM6lt4rTbcL/UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOie/LnSM54MGvSBG7zfn0dfaRpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYTFlNzY4NTEtN2U4Ni0z
MGE0LTlmY2UtMWZkMzliM2NjZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/H0LN7hRDtS+x1NiQqhYBgJJHNqOAWz/LC5YJh3KIpi7EbR9L+GbAx
Lr03WtwdmyWAvEiPqIa3uXkq3e8WO0aWB0SglRcdcu33OUSrBXNtbkbauOMSJXpr
olEOcWeLy5QNL1vGtrc7/kBQfq6OccFoGGhXCL4LKTpSe6GKczuBb9kw5Jyi1sto
MKwivDQFR8IA0GmKQi8iox6knin/IsLe1wIFKjKQoBEQsfLvtrwgpV6kzDB+JVFf
kaORn/8obL7bonb7KJbn6jTYgIdEyHdlAYVZolKU4Kbp6Sa3MzoTPFo7w/cOkSqe
ri2zuYLN9swm2MTiYaUPhqWzH4bXDWA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:23:42 2025 by rpki-client