Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa
File:                     1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa (raw, json)
Hash identifier:          1sVq3v94Iht+0+j6PgdMjQ8N5d0OOU5/Nh++fbxgfUI=
Subject key identifier:   0A:46:3A:B3:BC:46:E1:E1:C0:DB:34:CC:65:9F:E4:D4:01:3C:21:2E
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285848FD569BE62781C9C3BF8A7590
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        66.22.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9b:e6:27:81:c9:c3:bf:8a:75:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=4701d171-3617-4ab8-a65c-eeae12a027f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:49:d2:b2:01:06:79:bd:94:0e:f6:35:74:
                    05:94:57:a9:3d:e9:fa:36:f0:bd:bb:f0:f7:f3:cd:
                    3b:09:0d:f4:f1:5f:86:74:1d:50:8a:c9:b4:8f:b9:
                    e8:67:0c:b2:3b:e1:f4:93:56:6c:9e:3a:0b:17:83:
                    47:7e:7e:fd:e0:eb:b3:63:c4:79:fc:ab:14:85:4c:
                    6c:61:1b:a5:a5:27:fb:c3:94:88:d7:67:28:0b:d1:
                    49:bb:e3:29:11:aa:c2:19:4c:b2:93:32:b9:77:d2:
                    63:45:cb:26:93:32:18:f2:85:20:68:c5:f2:de:93:
                    ec:5f:36:e8:65:60:da:bc:fa:80:cb:b7:c4:b8:21:
                    90:c5:15:0a:80:a5:ab:72:31:96:a0:36:e8:aa:4b:
                    ed:3f:6f:80:2a:96:fc:72:89:f9:4e:b6:5d:bb:1b:
                    69:cf:01:6d:c4:44:19:78:3b:81:1c:f0:00:8c:87:
                    a0:85:51:29:c6:58:5c:da:b5:71:24:9a:72:7a:c2:
                    ee:f3:3a:94:54:c1:3f:60:c4:ab:2d:16:a5:a7:fb:
                    bb:39:49:9b:f8:a9:0d:93:63:f7:c4:46:98:97:d6:
                    d9:6b:f9:36:cc:62:9a:e7:b2:49:c3:59:0e:9e:98:
                    1f:d8:b1:ec:d9:25:4f:81:9f:0d:6f:6c:4d:ef:e4:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:46:3A:B3:BC:46:E1:E1:C0:DB:34:CC:65:9F:E4:D4:01:3C:21:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1f64e93a-954d-3a9b-9eed-7b3968e8c507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:c6:66:36:b3:83:f4:51:70:43:36:07:e9:c6:e6:53:41:
         51:d7:82:b3:ef:b7:b1:4e:f3:08:33:d5:7c:0e:09:9e:d2:e5:
         4b:58:9b:80:ad:a1:1b:08:dc:64:f4:39:23:21:42:4e:e1:66:
         58:d7:ee:66:47:19:dc:8c:06:26:3d:e1:f2:e5:a0:d0:11:7f:
         63:a8:73:44:28:8b:8e:25:0a:ba:0c:99:b6:ca:eb:29:e1:f8:
         8e:5f:21:28:b8:23:b0:5e:6a:29:17:b6:ec:d9:6a:f6:3f:87:
         eb:a2:ff:9d:19:52:3e:74:8f:f1:be:96:4e:07:0a:a8:49:86:
         25:71:43:6b:f2:c2:bd:66:c3:19:e9:a8:74:eb:ad:8f:d1:56:
         0e:32:de:39:b8:83:57:0f:bc:b5:6e:04:35:fe:cc:be:21:ed:
         b8:a3:b8:2c:05:4c:ad:0b:72:65:2f:a2:0f:ac:40:71:71:5d:
         82:48:46:92:42:42:b7:f6:60:69:87:b6:5b:7e:48:4f:70:7a:
         da:ac:d7:6f:e4:b4:b8:01:d1:40:f9:78:ff:b9:d5:b7:f8:99:
         3d:2f:eb:6d:c4:f2:c0:f2:6e:30:ca:df:d9:dd:77:76:32:ee:
         35:10:de:c4:c2:b9:9e:d1:78:5e:e1:3f:29:fb:a1:65:17:48:
         1e:dd:59:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VpvmJ4HJw7+KdZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDcwMWQxNzEtMzYxNy00YWI4LWE2NWMtZWVhZTEyYTAyN2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvlJ0rIBBnm9lA72NXQFlFepPen6NvC9u/D3
8807CQ308V+GdB1Qism0j7noZwyyO+H0k1ZsnjoLF4NHfn794OuzY8R5/KsUhUxs
YRulpSf7w5SI12coC9FJu+MpEarCGUyykzK5d9JjRcsmkzIY8oUgaMXy3pPsXzbo
ZWDavPqAy7fEuCGQxRUKgKWrcjGWoDboqkvtP2+AKpb8con5TrZduxtpzwFtxEQZ
eDuBHPAAjIeghVEpxlhc2rVxJJpyesLu8zqUVME/YMSrLRalp/u7OUmb+KkNk2P3
xEaYl9bZa/k2zGKa57JJw1kOnpgf2LHs2SVPgZ8Nb2xN7+TtMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApGOrO8RuHhwNs0zGWf5NQBPCEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWY2NGU5M2EtOTU0ZC0z
YTliLTllZWQtN2IzOTY4ZThjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzfxmY2s4P0UXBDNgfpxuZTQVHXgrPvt7FO8wgz1XwOCZ7S5UtYm4Ct
oRsI3GT0OSMhQk7hZljX7mZHGdyMBiY94fLloNARf2Ooc0Qoi44lCroMmbbK6ynh
+I5fISi4I7BeaikXtuzZavY/h+ui/50ZUj50j/G+lk4HCqhJhiVxQ2vywr1mwxnp
qHTrrY/RVg4y3jm4g1cPvLVuBDX+zL4h7bijuCwFTK0LcmUvog+sQHFxXYJIRpJC
Qrf2YGmHtlt+SE9wetqs12/ktLgB0UD5eP+51bf4mT0v623E8sDybjDK39ndd3Yy
7jUQ3sTCuZ7ReF7hPyn7oWUXSB7dWQc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:24 2025 by rpki-client