Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
File:                     9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa (raw, json)
Hash identifier:          ZFolyk2J4LHteZivYEv5TVf919X8eM6B4hUqU5YkAMM=
Subject key identifier:   7D:BC:99:1C:B1:AD:AD:8E:45:45:AE:E5:85:DB:46:27:D8:49:B9:F6
Certificate issuer:       /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial:       010D0C9F4328584A3FAADC04E90D4D81D69187A0
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     11766
IP address blocks:        66.60.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:dc:04:e9:0d:4d:81:d6:91:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=ce30baa1-7dfa-4da9-848c-7e9995fe1cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:9b:5f:2f:c8:43:c3:88:d6:11:1e:86:27:
                    78:c7:1e:64:50:c1:15:05:26:e9:57:43:32:28:d5:
                    12:f8:fe:47:49:b4:66:23:14:21:9f:2e:27:d5:fa:
                    5a:cb:08:8c:a7:a0:49:5e:78:27:bd:ef:27:1c:34:
                    72:99:51:5d:70:e6:19:5d:d6:d0:07:cd:fa:b8:8b:
                    0e:12:a2:b2:6a:00:5b:ec:5e:99:ba:bf:40:68:74:
                    33:43:a3:b9:5d:36:23:4b:a1:92:45:d3:21:0f:ce:
                    0e:f5:af:d7:54:83:5d:ee:8f:2e:f6:10:05:9d:9c:
                    d2:6f:80:41:35:53:d5:12:b1:1f:6e:11:b7:b9:03:
                    6b:aa:d6:35:f2:b8:70:76:4c:d2:56:1b:40:23:e1:
                    db:d7:a7:4a:db:e8:6e:96:ad:8c:11:86:67:67:3f:
                    30:c6:8a:50:bd:55:84:e3:b9:d9:ae:ff:1f:70:2b:
                    32:7f:44:df:9a:b6:2b:66:17:f5:05:a0:eb:38:68:
                    1c:83:0a:7b:22:af:6f:fe:a0:46:b1:15:a7:0b:c8:
                    06:52:95:92:c7:c4:24:16:d8:db:8a:d3:c8:9e:0d:
                    8d:8c:9f:fc:57:48:8c:f7:c5:98:40:ba:c8:62:53:
                    e3:b0:2e:6f:cd:5a:12:5b:a9:61:28:9c:7f:7b:63:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BC:99:1C:B1:AD:AD:8E:45:45:AE:E5:85:DB:46:27:D8:49:B9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/9b4faa3a-e84e-3cbb-95f8-11e99e46c440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl

            X509v3 Authority Key Identifier:
                keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:16:09:4d:39:7b:8b:7b:99:ef:f5:13:6e:6c:47:b8:b7:04:
         3c:25:d7:88:0d:4f:eb:74:99:b7:bb:a5:68:32:55:f0:c3:42:
         ee:09:9f:d7:f1:63:44:02:b4:1f:0d:10:f8:db:4c:6d:8c:cc:
         79:7e:ed:67:17:a6:28:52:db:16:4d:27:43:db:58:b1:c0:a7:
         e2:e0:b4:2f:7f:10:a1:cd:7c:d0:27:44:d7:33:88:18:01:19:
         09:58:07:34:d9:3a:60:dc:69:fc:61:e7:ca:07:b1:6f:79:27:
         59:ce:35:92:09:f2:45:a2:fb:d4:96:58:d6:71:29:94:b4:34:
         4a:03:ca:cc:cf:fc:55:45:8f:ba:98:24:e5:31:2d:42:2e:65:
         70:09:32:1a:46:e5:e5:dc:0e:de:6f:49:40:d1:25:5f:08:0b:
         89:80:02:64:4e:bb:90:ad:10:ae:51:79:d6:ba:22:14:c8:b5:
         df:8b:8c:54:d9:c1:8b:42:8f:ea:3c:d5:fa:34:33:9d:10:bc:
         ad:45:05:f3:28:e8:75:a6:b3:fa:0e:1a:cb:93:45:9b:e3:a3:
         a4:f0:57:78:73:bb:da:bc:07:a7:6c:96:57:c4:fc:ff:70:71:
         d4:af:d3:11:8d:e5:ab:9c:07:12:9d:2e:c0:1e:67:97:5f:cd:
         a0:59:ba:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtwE6Q1NgdaRh6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI0Y2E4NDctOTAwZS00NGJhLTg0ZTQtNDYwYmYyZjVk
ZjE4MB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk
Y2UzMGJhYTEtN2RmYS00ZGE5LTg0OGMtN2U5OTk1ZmUxY2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZybXy/IQ8OI1hEehid4xx5kUMEVBSbpV0My
KNUS+P5HSbRmIxQhny4n1fpaywiMp6BJXngnve8nHDRymVFdcOYZXdbQB836uIsO
EqKyagBb7F6Zur9AaHQzQ6O5XTYjS6GSRdMhD84O9a/XVINd7o8u9hAFnZzSb4BB
NVPVErEfbhG3uQNrqtY18rhwdkzSVhtAI+Hb16dK2+hulq2MEYZnZz8wxopQvVWE
47nZrv8fcCsyf0TfmrYrZhf1BaDrOGgcgwp7Iq9v/qBGsRWnC8gGUpWSx8QkFtjb
itPIng2NjJ/8V0iM98WYQLrIYlPjsC5vzVoSW6lhKJx/e2MTQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH28mRyxra2ORUWu5YXbRifYSbn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82YjRj
YTg0Ny05MDBlLTQ0YmEtODRlNC00NjBiZjJmNWRmMTgvOWI0ZmFhM2EtZTg0ZS0z
Y2JiLTk1ZjgtMTFlOTllNDZjNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmI0Y2E4NDctOTAwZS00NGJhLTg0
ZTQtNDYwYmYyZjVkZjE4LzZiNGNhODQ3LTkwMGUtNDRiYS04NGU0LTQ2MGJmMmY1
ZGYxOC5jcmwwHwYDVR0jBBgwFoAUxVimf8BhwurNMWkdOo1bPyZ04SEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82YjRjYTg0Ny05MDBlLTQ0YmEtODRlNC00NjBi
ZjJmNWRmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoWCU05e4t7me/1E25sR7i3BDwl14gNT+t0mbe7pWgyVfDDQu4Jn9fx
Y0QCtB8NEPjbTG2MzHl+7WcXpihS2xZNJ0PbWLHAp+LgtC9/EKHNfNAnRNcziBgB
GQlYBzTZOmDcafxh58oHsW95J1nONZIJ8kWi+9SWWNZxKZS0NEoDyszP/FVFj7qY
JOUxLUIuZXAJMhpG5eXcDt5vSUDRJV8IC4mAAmROu5CtEK5Reda6IhTItd+LjFTZ
wYtCj+o81fo0M50QvK1FBfMo6HWms/oOGsuTRZvjo6TwV3hzu9q8B6dsllfE/P9w
cdSv0xGN5aucBxKdLsAeZ5dfzaBZugY=
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:40:38 2025 by rpki-client