Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03c38202-7f10-33fe-9011-b0591856f50a.roa
File:                     03c38202-7f10-33fe-9011-b0591856f50a.roa (raw, json)
Hash identifier:          4YYwRTOol9R/4cHQ1BADE2cu6NjIc6IAP39I1jcVrYI=
Subject key identifier:   B6:9D:B4:3A:64:10:22:90:6A:80:EA:3A:D6:B9:DA:1B:A5:ED:73:18
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B212F368A1FB4CCAC8560
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03c38202-7f10-33fe-9011-b0591856f50a.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        66.54.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:21:2f:36:8a:1f:b4:cc:ac:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=33c801ab-a836-4313-80da-e1d810b5be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:76:a8:eb:e6:ec:21:1a:9d:0e:69:7e:20:
                    b9:2d:f1:39:39:57:cf:77:de:61:7b:a1:0a:86:63:
                    16:e9:5e:d0:19:21:da:29:bc:56:2a:14:b7:13:23:
                    3a:32:43:d8:57:1d:6c:1c:7b:9a:c9:bd:23:d6:91:
                    90:57:92:ca:8e:fb:63:f5:23:da:10:42:df:08:3b:
                    3a:94:96:1e:39:06:6d:5c:05:65:bd:cc:b0:5b:fa:
                    68:6c:50:41:aa:b5:e3:23:b2:0a:d1:c8:e6:f3:86:
                    76:fd:b9:ac:5a:03:d1:fb:27:b2:08:0a:bd:1b:fa:
                    df:2f:e1:67:c2:05:10:69:05:8b:6c:23:45:a9:79:
                    20:49:66:ec:43:b1:84:95:d5:bd:5e:55:cd:df:db:
                    92:7e:c9:b7:75:65:65:83:8d:4d:82:c8:62:0e:01:
                    d3:8b:ac:76:fc:90:66:a0:4a:45:a7:bb:1e:69:dd:
                    a6:c9:3a:17:c0:99:03:a3:a5:72:18:c1:22:d3:a0:
                    18:e9:2e:f6:41:16:05:8e:6c:1c:b4:d8:45:68:34:
                    82:6b:e2:aa:a0:4e:20:d8:0a:03:9b:f4:a5:74:9c:
                    92:05:a1:20:b5:51:71:fb:6b:e5:77:01:76:71:18:
                    1a:b8:61:53:c1:cb:e4:39:f2:bd:62:9f:37:b1:c8:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9D:B4:3A:64:10:22:90:6A:80:EA:3A:D6:B9:DA:1B:A5:ED:73:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03c38202-7f10-33fe-9011-b0591856f50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:d8:f1:c5:72:35:df:d0:8e:c0:61:3d:54:05:0c:14:77:
         6a:7f:95:0b:8b:a5:ca:8b:c7:f5:20:12:21:65:04:13:a7:14:
         dd:26:bc:6d:29:e8:6f:7a:80:a9:a1:e3:51:e8:30:e5:e0:e5:
         2c:d1:aa:7f:cf:aa:9d:aa:00:f2:ed:65:68:31:5e:c9:e9:13:
         7a:43:ff:49:50:a8:4e:ff:49:2a:35:e4:95:64:38:c6:38:47:
         1e:6a:85:ce:44:8e:f6:ce:28:bd:72:a4:5a:5e:46:c1:6c:ba:
         06:a8:fd:80:50:83:4a:aa:40:8a:0b:26:77:f6:69:68:80:65:
         0e:7c:53:6d:f2:d2:8d:2d:07:cb:00:7b:b4:f5:b8:4b:74:7c:
         69:3e:04:33:8c:65:cd:8b:9f:3f:30:17:50:75:37:ce:29:fc:
         0e:9b:1b:90:12:14:db:38:6e:60:f4:e2:eb:1d:11:d6:4e:fa:
         13:96:8b:b6:dd:b4:a7:4d:2a:a5:c9:87:6c:1d:0d:d4:c9:59:
         31:75:61:12:26:ee:f1:72:ee:67:33:ff:33:44:9e:db:09:fd:
         a9:b4:5e:0f:71:64:c9:cc:af:9b:57:1c:1b:21:98:8d:3f:20:
         51:b8:54:c2:52:de:e2:f3:a4:63:e9:ae:3f:df:7d:d3:8d:6c:
         e4:c6:18:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyEvNooftMyshWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
MzNjODAxYWItYTgzNi00MzEzLTgwZGEtZTFkODEwYjViZTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry12qOvm7CEanQ5pfiC5LfE5OVfPd95he6EK
hmMW6V7QGSHaKbxWKhS3EyM6MkPYVx1sHHuayb0j1pGQV5LKjvtj9SPaEELfCDs6
lJYeOQZtXAVlvcywW/pobFBBqrXjI7IK0cjm84Z2/bmsWgPR+yeyCAq9G/rfL+Fn
wgUQaQWLbCNFqXkgSWbsQ7GEldW9XlXN39uSfsm3dWVlg41NgshiDgHTi6x2/JBm
oEpFp7sead2myToXwJkDo6VyGMEi06AY6S72QRYFjmwctNhFaDSCa+KqoE4g2AoD
m/SldJySBaEgtVFx+2vldwF2cRgauGFTwcvkOfK9Yp83sci/5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLadtDpkECKQaoDqOta52hul7XMYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDNjMzgyMDItN2YxMC0z
M2ZlLTkwMTEtYjA1OTE4NTZmNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2M2PHFcjXf0I7AYT1UBQwUd2p/lQuLpcqLx/UgEiFlBBOnFN0mvG0p
6G96gKmh41HoMOXg5SzRqn/Pqp2qAPLtZWgxXsnpE3pD/0lQqE7/SSo15JVkOMY4
Rx5qhc5EjvbOKL1ypFpeRsFsugao/YBQg0qqQIoLJnf2aWiAZQ58U23y0o0tB8sA
e7T1uEt0fGk+BDOMZc2Lnz8wF1B1N84p/A6bG5ASFNs4bmD04usdEdZO+hOWi7bd
tKdNKqXJh2wdDdTJWTF1YRIm7vFy7mcz/zNEntsJ/am0Xg9xZMnMr5tXHBshmI0/
IFG4VMJS3uLzpGPprj/ffdONbOTGGK8=
-----END CERTIFICATE-----
Generated at Wed Jul 30 23:44:03 2025 by rpki-client