Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa
File:                     510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa (raw, json)
Hash identifier:          1EoUydJ+vxgyuiTEbZeN+JF1Eg7UyKBYVFRFIZc/EFI=
Subject key identifier:   51:2E:9A:42:9A:8B:BE:8C:EB:FA:E3:56:01:B7:A0:D0:C5:B8:43:10
Certificate issuer:       /CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
Certificate serial:       010D0C9F4328584A66C0776808F2684F6E28D700
Authority key identifier: 0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     393990
IP address blocks:        192.33.167.0/24 maxlen: 24
                          192.160.255.0/24 maxlen: 24
                          2620:120:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:77:68:08:f2:68:4f:6e:28:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=66ebbda6-cf43-44ed-97a7-5b50fed78ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:ca:91:3a:ab:a8:4f:62:3d:de:cd:ec:40:
                    40:1e:5b:4e:a4:24:d1:e2:08:06:17:f9:72:1f:c3:
                    33:45:4a:76:6c:89:a0:9c:f6:37:f5:4a:d7:ad:9a:
                    8c:6f:85:72:9a:99:8e:c1:c1:89:0d:d0:da:b8:67:
                    68:21:68:5a:4c:11:0b:7f:a7:1c:d3:a9:54:72:a0:
                    4b:89:fc:38:a4:bd:c6:39:04:00:71:74:d9:83:5d:
                    b6:04:1f:96:e0:7a:38:d2:83:e2:ec:84:04:51:c2:
                    8b:aa:c9:38:4f:e2:af:6c:1d:b5:e3:10:d7:c9:b0:
                    84:9b:c4:9d:2f:48:bf:e1:4b:77:ab:cb:6f:70:7a:
                    cb:2d:91:4b:c1:b3:ce:73:50:a3:06:ef:4a:49:e7:
                    46:2a:29:2e:bc:86:f8:de:7b:9a:d9:a2:09:fa:02:
                    d7:f4:1c:4e:e2:53:93:06:85:7d:60:c3:8f:c3:e1:
                    11:d8:3f:55:67:54:eb:5c:bc:92:3e:fe:b6:7a:64:
                    a6:21:9f:af:cf:d3:09:62:b7:29:9f:25:31:da:2e:
                    47:c0:b1:ec:b2:4b:ee:ef:98:81:95:b7:93:a5:21:
                    be:23:50:38:f7:1b:1e:69:3e:83:d0:f4:b4:73:2f:
                    8a:72:9c:a8:b8:7e:26:ff:f8:6e:ec:c2:51:ed:d8:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:9A:42:9A:8B:BE:8C:EB:FA:E3:56:01:B7:A0:D0:C5:B8:43:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl

            X509v3 Authority Key Identifier:
                keyid:0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.167.0/24
                  192.160.255.0/24
                IPv6:
                  2620:120:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:bc:e3:97:2e:b8:ee:67:1f:e5:19:84:22:8e:c8:c2:29:
         5c:9e:70:fe:e7:aa:02:f9:bf:5e:d5:68:c6:c3:f3:ff:c1:b5:
         76:9f:ae:4c:88:56:1a:f9:fb:a0:f4:1c:1a:d9:7b:9b:a4:fe:
         6c:7a:05:b5:2f:d6:56:6b:3e:19:f4:80:e1:a9:6b:cc:dc:73:
         a0:ff:27:e5:09:b7:15:03:2d:3a:a1:fe:80:eb:36:45:16:21:
         14:12:15:f5:bb:6f:f9:4c:4a:6a:5b:57:28:81:bc:60:9e:07:
         40:a7:71:bb:6f:c7:e0:58:71:6c:c3:d3:a0:34:40:a5:c6:2e:
         9c:8c:fa:d4:5d:00:23:de:77:82:3c:e2:71:ca:a3:24:b6:02:
         78:80:b9:25:fc:fe:c9:60:de:90:b2:c1:57:0d:a3:c0:4b:9a:
         b2:0a:0e:cf:3e:87:d3:95:05:c7:ae:48:0e:20:4a:c1:5b:20:
         8d:18:3e:b3:ce:9a:25:cd:4b:d9:d9:f7:06:cd:6f:85:4d:7c:
         d3:bf:77:46:dd:fa:7e:5e:8a:d6:34:2d:11:54:1c:39:ec:05:
         20:4c:97:d4:8f:75:41:51:e4:15:11:72:bf:c3:e6:32:33:2a:
         38:a0:a0:d8:8f:dc:d0:49:6a:e8:1b:c5:88:3d:47:68:b3:40:
         14:88:53:c9
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEpmwHdoCPJoT24o1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmMjFiZmEtOWIwNC00YjUyLThhZjAtZTBiY2M5OTEy
OGQzMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
NjZlYmJkYTYtY2Y0My00NGVkLTk3YTctNWI1MGZlZDc4ZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMvKkTqrqE9iPd7N7EBAHltOpCTR4ggGF/ly
H8MzRUp2bImgnPY39UrXrZqMb4VympmOwcGJDdDauGdoIWhaTBELf6cc06lUcqBL
ifw4pL3GOQQAcXTZg122BB+W4Ho40oPi7IQEUcKLqsk4T+KvbB214xDXybCEm8Sd
L0i/4Ut3q8tvcHrLLZFLwbPOc1CjBu9KSedGKikuvIb43nua2aIJ+gLX9BxO4lOT
BoV9YMOPw+ER2D9VZ1TrXLySPv62emSmIZ+vz9MJYrcpnyUx2i5HwLHsskvu75iB
lbeTpSG+I1A49xseaT6D0PS0cy+KcpyouH4m//hu7MJR7diegQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFFEumkKai76M6/rjVgG3oNDFuEMQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hY2Yy
MWJmYS05YjA0LTRiNTItOGFmMC1lMGJjYzk5MTI4ZDMvNTEwYzVkYWItOTkwNC0z
YWE0LWI5NmEtYWNiOGNkYzNkMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWNmMjFiZmEtOWIwNC00YjUyLThh
ZjAtZTBiY2M5OTEyOGQzL2FjZjIxYmZhLTliMDQtNGI1Mi04YWYwLWUwYmNjOTkx
MjhkMy5jcmwwHwYDVR0jBBgwFoAUC5YR7naTygov1+mx2PUBpLDN7gUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hY2YyMWJmYS05YjA0LTRiNTItOGFmMC1lMGJj
Yzk5MTI4ZDMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwCGnAwQA
wKD/MA8EAgACMAkDBwQmIAEggAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADI+845cuuO5nH+UZhCKOyMIp
XJ5w/ueqAvm/XtVoxsPz/8G1dp+uTIhWGvn7oPQcGtl7m6T+bHoFtS/WVms+GfSA
4alrzNxzoP8n5Qm3FQMtOqH+gOs2RRYhFBIV9btv+UxKaltXKIG8YJ4HQKdxu2/H
4FhxbMPToDRApcYunIz61F0AI953gjziccqjJLYCeIC5Jfz+yWDekLLBVw2jwEua
sgoOzz6H05UFx65IDiBKwVsgjRg+s86aJc1L2dn3Bs1vhU180793Rt36fl6K1jQt
EVQcOewFIEyX1I91QVHkFRFyv8PmMjMqOKCg2I/c0Elq6BvFiD1HaLNAFIhTyQ==
-----END CERTIFICATE-----
Generated at Thu Jul 10 21:02:33 2025 by rpki-client