Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
File:                     30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa (raw, json)
Hash identifier:          FAArskhK+MmciP1JHSS11De6XaZculzYIAIEWCFQVIc=
Subject key identifier:   D7:A1:98:35:BC:EA:89:41:E5:55:0A:F4:79:B1:1A:7C:21:E7:ED:8D
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584930DE6E6672A6DC04CC58F140
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     33185
IP address blocks:        66.187.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:6e:66:72:a6:dc:04:cc:58:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=44281ebc-0eb8-4976-86e0-600b66aba7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:ed:c8:04:8c:96:ce:bb:93:1d:7b:50:3a:
                    95:e4:20:c3:d9:33:88:19:38:cd:f8:8c:bc:71:3b:
                    80:47:41:f8:b9:f5:00:76:94:b3:48:31:fc:be:f4:
                    64:c4:c5:f2:02:45:2e:ba:6e:82:52:a8:38:27:32:
                    d2:cf:58:82:f0:7b:5c:7e:ed:8d:a3:3b:d3:c0:42:
                    fe:22:46:33:97:b4:5b:b4:d9:b0:52:ca:38:fd:6c:
                    3d:b3:79:d3:ad:40:dd:55:a0:de:48:a0:4a:a0:05:
                    66:f1:cd:a5:c6:22:f1:f8:1d:98:3d:64:7a:d5:03:
                    cd:e6:87:cd:6f:b7:d7:0b:fb:16:f4:cc:48:70:32:
                    10:ac:61:56:e9:95:16:fb:3f:a6:2c:9c:41:c7:89:
                    80:81:c4:de:9d:9d:80:03:a0:d3:0e:a4:c1:59:d4:
                    f7:1d:5a:6c:2a:41:14:0b:ff:a8:85:85:68:cd:cf:
                    7c:28:a4:99:26:30:aa:da:13:e8:50:ed:50:eb:68:
                    b3:b9:80:8c:80:59:47:3d:94:63:54:4d:19:a5:06:
                    90:fc:41:62:19:71:3f:9a:65:44:57:ce:12:b5:8a:
                    b6:3a:81:29:a7:61:ca:87:06:e3:e7:c2:2f:71:b5:
                    f7:7f:21:b4:e3:6a:a5:88:c5:bd:4d:73:0e:e3:22:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:98:35:BC:EA:89:41:E5:55:0A:F4:79:B1:1A:7C:21:E7:ED:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:33:23:4e:e2:09:da:69:04:b2:d6:ff:8b:6f:a2:65:3f:
         91:94:2f:c5:1b:4d:26:9f:44:c5:3c:a1:5c:03:34:78:cd:eb:
         59:63:99:f5:5b:ac:e4:93:2c:a9:b5:e7:34:eb:ea:1f:86:a8:
         98:4f:6c:cc:b5:6b:b6:06:f6:39:d2:f9:68:c5:b8:e8:28:29:
         d3:b1:7c:4b:d4:33:04:db:9a:72:a6:41:d3:c4:8b:5b:8c:8c:
         1e:eb:a5:72:83:33:8d:22:78:ad:1a:8d:cd:67:5d:dd:f4:6d:
         88:b9:2a:2f:55:29:62:2c:53:e7:f2:84:64:d2:51:1a:a9:63:
         bc:d0:3b:05:82:47:61:82:1f:a6:79:a8:8d:72:3c:a4:46:59:
         ff:08:1b:97:49:62:f0:b9:9f:cd:33:f2:b4:c0:9b:75:27:b3:
         a3:6a:de:e4:6f:45:c8:13:fb:8e:b0:aa:3e:8d:07:29:87:ff:
         98:28:26:1b:33:c2:f4:d7:06:96:83:60:20:84:26:fc:ab:bb:
         23:7e:7f:7f:31:aa:6a:5c:8c:a3:4f:15:87:1a:0b:11:55:21:
         09:1c:ec:2a:78:5d:c1:08:77:00:c8:01:84:f1:df:d2:6f:65:
         98:ce:0d:9e:40:29:86:d3:e2:22:de:92:61:e6:18:8c:99:9b:
         80:be:0b:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m5mcqbcBMxY8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU1NGEyODAtMjJhMS00NzdjLTk3YmYtZjIzYTdmMzNh
MGMwMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NDQyODFlYmMtMGViOC00OTc2LTg2ZTAtNjAwYjY2YWJhN2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyXtyASMls67kx17UDqV5CDD2TOIGTjN+Iy8
cTuAR0H4ufUAdpSzSDH8vvRkxMXyAkUuum6CUqg4JzLSz1iC8Htcfu2NozvTwEL+
IkYzl7RbtNmwUso4/Ww9s3nTrUDdVaDeSKBKoAVm8c2lxiLx+B2YPWR61QPN5ofN
b7fXC/sW9MxIcDIQrGFW6ZUW+z+mLJxBx4mAgcTenZ2AA6DTDqTBWdT3HVpsKkEU
C/+ohYVozc98KKSZJjCq2hPoUO1Q62izuYCMgFlHPZRjVE0ZpQaQ/EFiGXE/mmVE
V84StYq2OoEpp2HKhwbj58IvcbX3fyG042qliMW9TXMO4yKCyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNehmDW86olB5VUK9HmxGnwh5+2NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0
YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNhN2YzM2EwYzAvMzBkNmNiZjQtYTRkMS0z
ZWEzLWJlM2QtMDAwODZiYTA0MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzU1NGEyODAtMjJhMS00NzdjLTk3
YmYtZjIzYTdmMzNhMGMwL2M1NTRhMjgwLTIyYTEtNDc3Yy05N2JmLWYyM2E3ZjMz
YTBjMC5jcmwwHwYDVR0jBBgwFoAUvA5Qxgka7vPVyheHhrapUB3cWcEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNh
N2YzM2EwYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6EMyNO4gnaaQSy1v+Lb6JlP5GUL8UbTSafRMU8oVwDNHjN61ljmfVb
rOSTLKm15zTr6h+GqJhPbMy1a7YG9jnS+WjFuOgoKdOxfEvUMwTbmnKmQdPEi1uM
jB7rpXKDM40ieK0ajc1nXd30bYi5Ki9VKWIsU+fyhGTSURqpY7zQOwWCR2GCH6Z5
qI1yPKRGWf8IG5dJYvC5n80z8rTAm3Uns6Nq3uRvRcgT+46wqj6NBymH/5goJhsz
wvTXBpaDYCCEJvyruyN+f38xqmpcjKNPFYcaCxFVIQkc7Cp4XcEIdwDIAYTx39Jv
ZZjODZ5AKYbT4iLekmHmGIyZm4C+C34=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:46:03 2025 by rpki-client