Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/584f624c-99b9-334e-b332-7b034f457b98.roa
File:                     584f624c-99b9-334e-b332-7b034f457b98.roa (raw, json)
Hash identifier:          hcofCBvsa58c7i1W48rtKhijGTBDcJ6f9KNoH6H8/Ok=
Subject key identifier:   D2:46:CE:E1:48:AD:D3:0A:FF:4F:E6:FB:07:6B:3B:F4:10:08:3C:77
Certificate issuer:       /CN=41415190-afe9-4f90-902f-9102f69180fb
Certificate serial:       010D0C9F4328584B0E414C34920A6CFFEEBEC000
Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/584f624c-99b9-334e-b332-7b034f457b98.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     968
IP address blocks:        66.248.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:4c:34:92:0a:6c:ff:ee:be:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=0632115a-701e-45ef-8c27-f995c9d38bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:fa:08:f5:30:98:59:19:8a:d4:b9:d8:0b:
                    d8:f1:be:63:d3:a8:7c:2c:31:02:fc:e3:6f:6a:0b:
                    3d:bc:af:55:a7:26:84:aa:c4:db:ff:0a:72:ef:d1:
                    d3:28:b2:1b:6a:5d:eb:99:55:c6:6a:16:cc:f3:b5:
                    7a:a4:cc:f6:55:a0:a8:1e:e9:05:98:91:85:75:ae:
                    f4:f7:49:ce:5b:a8:ba:28:33:e5:2e:b2:12:f8:74:
                    17:14:f3:f3:fb:10:60:8f:4a:83:15:ef:3e:42:fe:
                    09:4d:58:92:ed:af:9a:fe:64:0c:62:d6:28:d5:0a:
                    75:2c:d4:ae:19:ce:08:32:17:15:be:2b:ae:ed:85:
                    b5:4d:52:91:cb:ba:b0:e1:35:31:19:dd:f2:24:33:
                    29:24:e8:0f:da:2c:21:6e:d6:db:a6:17:a8:e3:46:
                    f4:fb:d6:1e:96:f7:ab:d0:b8:07:95:dc:2a:66:6f:
                    cd:8b:27:c2:96:99:f2:81:4e:8c:17:1c:32:b3:8e:
                    64:59:6f:65:ba:9f:73:9c:ce:d6:c3:2a:ec:c5:32:
                    10:2d:28:03:3f:cf:20:06:5a:b1:4a:02:f9:19:4c:
                    38:d8:6b:49:6f:a3:67:9c:6a:81:5b:2e:36:6c:c9:
                    a0:48:fd:07:c8:b6:ab:a2:c6:3e:c3:7b:9c:7d:2c:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:CE:E1:48:AD:D3:0A:FF:4F:E6:FB:07:6B:3B:F4:10:08:3C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/584f624c-99b9-334e-b332-7b034f457b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl

            X509v3 Authority Key Identifier:
                keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:91:19:e3:1e:04:36:cd:37:1f:6d:87:c1:00:63:b1:76:91:
         b6:56:89:7a:b8:36:a6:a7:f8:29:44:13:69:45:bb:f2:83:1b:
         64:08:32:34:1f:97:c0:55:30:15:45:9a:02:2b:26:b8:3b:99:
         60:e9:a8:a5:c0:82:c8:29:44:6d:3d:4f:77:36:99:52:f5:27:
         73:96:9d:02:f8:2d:fc:00:4d:7c:d9:75:cc:c8:20:26:c0:ce:
         02:f0:f3:52:81:bd:54:12:3e:af:30:98:fe:40:80:6e:c5:d3:
         92:ba:67:01:33:6d:76:4d:9d:27:ce:3f:62:ec:f8:4d:2e:70:
         11:a5:76:d8:d2:f8:58:70:1f:40:08:cc:1f:ff:59:2b:70:8c:
         e6:23:f5:b5:c6:b3:dc:1d:43:73:4b:c8:f9:e1:f8:e3:8c:6a:
         f0:39:87:66:7e:bb:c0:85:60:43:b3:e3:19:8a:d2:ae:84:3f:
         de:e8:fa:12:2c:eb:69:41:c0:44:7f:9e:c3:5e:65:dd:90:27:
         24:bc:49:b8:10:79:be:9e:52:6a:5c:c0:b0:4d:d8:77:61:1e:
         2b:bb:24:c5:f7:9a:96:78:76:32:f0:3f:36:71:5b:64:48:75:
         1f:4d:4d:53:71:2d:ae:72:c4:f8:e2:68:bf:fb:fc:2c:c5:ff:
         94:a4:d6:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQUw0kgps/+6+wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE0MTUxOTAtYWZlOS00ZjkwLTkwMmYtOTEwMmY2OTE4
MGZiMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDYzMjExNWEtNzAxZS00NWVmLThjMjctZjk5NWM5ZDM4YmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiT6CPUwmFkZitS52AvY8b5j06h8LDEC/ONv
ags9vK9VpyaEqsTb/wpy79HTKLIbal3rmVXGahbM87V6pMz2VaCoHukFmJGFda70
90nOW6i6KDPlLrIS+HQXFPPz+xBgj0qDFe8+Qv4JTViS7a+a/mQMYtYo1Qp1LNSu
Gc4IMhcVviuu7YW1TVKRy7qw4TUxGd3yJDMpJOgP2iwhbtbbpheo40b0+9Yelver
0LgHldwqZm/NiyfClpnygU6MFxwys45kWW9lup9znM7WwyrsxTIQLSgDP88gBlqx
SgL5GUw42GtJb6NnnGqBWy42bMmgSP0HyLarosY+w3ucfSwqLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJGzuFIrdMK/0/m+wdrO/QQCDx3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80MTQx
NTE5MC1hZmU5LTRmOTAtOTAyZi05MTAyZjY5MTgwZmIvNTg0ZjYyNGMtOTliOS0z
MzRlLWIzMzItN2IwMzRmNDU3Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDE0MTUxOTAtYWZlOS00ZjkwLTkw
MmYtOTEwMmY2OTE4MGZiLzQxNDE1MTkwLWFmZTktNGY5MC05MDJmLTkxMDJmNjkx
ODBmYi5jcmwwHwYDVR0jBBgwFoAUnTIT2A5DjTx4bz0c1yX6nCJZafowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80MTQxNTE5MC1hZmU5LTRmOTAtOTAyZi05MTAy
ZjY5MTgwZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGRGeMeBDbNNx9th8EAY7F2kbZWiXq4Nqan+ClEE2lFu/KDG2QIMjQf
l8BVMBVFmgIrJrg7mWDpqKXAgsgpRG09T3c2mVL1J3OWnQL4LfwATXzZdczIICbA
zgLw81KBvVQSPq8wmP5AgG7F05K6ZwEzbXZNnSfOP2Ls+E0ucBGldtjS+FhwH0AI
zB//WStwjOYj9bXGs9wdQ3NLyPnh+OOMavA5h2Z+u8CFYEOz4xmK0q6EP97o+hIs
62lBwER/nsNeZd2QJyS8SbgQeb6eUmpcwLBN2HdhHiu7JMX3mpZ4djLwPzZxW2RI
dR9NTVNxLa5yxPjiaL/7/CzF/5Sk1h0=
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:35:52 2025 by rpki-client