Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa
File:                     f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa (raw, json)
Hash identifier:          SYgqLTMUSK5hfr/TE4mfyE36aVpu4vRO9u7xHovYReY=
Subject key identifier:   06:C4:41:F2:2B:A5:30:35:E6:79:17:56:C0:BD:01:90:3E:2F:36:38
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858498769ADA53716C520C66B4480
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        66.235.154.0/24 maxlen: 24
                          66.235.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ad:a5:37:16:c5:20:c6:6b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=bee58375-23f2-4fcb-ade2-3b43b47013f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:57:da:d8:47:1d:f1:14:1a:00:6c:20:ab:bd:
                    d4:38:af:7d:c5:a7:e9:16:b0:f2:22:c6:28:9b:1c:
                    67:97:8a:e0:37:0a:13:90:99:c1:14:30:70:27:1c:
                    05:b2:63:8c:79:2a:80:45:2e:b6:c6:5f:a5:94:f5:
                    e7:4c:c6:99:19:81:23:77:f3:8a:c6:fb:99:fd:73:
                    20:60:d2:fb:7d:03:d3:f4:2c:4e:51:c0:48:6f:90:
                    4f:23:71:43:df:91:63:38:39:45:8b:5f:1f:04:9c:
                    cf:1d:70:dc:d9:39:6a:e7:b7:ad:3b:97:8c:7f:0e:
                    30:fa:8a:6a:07:b2:b3:f6:eb:4c:4f:6a:c6:06:94:
                    c3:68:8f:b3:53:ff:79:a8:af:22:22:04:e3:ba:e2:
                    26:4f:c4:bd:05:71:0a:fb:17:5d:5d:40:68:ba:12:
                    12:2a:c5:d1:88:8a:11:a8:9d:b5:38:d4:f1:a8:08:
                    08:01:91:75:33:0e:a7:b2:7d:5d:94:a7:43:34:a7:
                    bf:cc:28:14:5e:5e:38:95:11:e3:e9:08:4e:35:0e:
                    6b:e6:1e:6c:0b:9d:c8:8b:68:8c:7a:d4:17:9a:31:
                    83:01:f3:ae:2d:e8:c3:6f:33:7e:ef:61:00:27:25:
                    ca:0b:0b:94:24:26:97:2f:3b:29:4c:09:94:a4:eb:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:41:F2:2B:A5:30:35:E6:79:17:56:C0:BD:01:90:3E:2F:36:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:ff:46:91:d2:d3:78:86:e0:35:d3:b4:7a:e2:4e:05:eb:
         a5:96:a5:4d:89:cf:41:82:39:ed:d4:6c:c1:c3:18:19:ca:5e:
         cb:8c:d1:1f:33:5d:4f:c7:77:92:59:89:c2:64:04:08:f3:c7:
         27:c3:80:56:5b:e6:6d:94:05:ad:b7:bb:c0:c6:92:08:80:d4:
         99:32:1a:58:b8:b4:52:5b:65:e8:db:77:2e:2d:ef:d5:45:1a:
         3b:10:b6:0b:3c:82:9c:a5:7d:af:d5:07:5c:f0:b9:c9:e3:32:
         b3:6a:f5:c1:59:d5:24:c8:0a:da:ad:cf:cf:b6:17:02:68:d7:
         dc:4a:41:48:b9:5e:39:f2:e8:fd:43:99:3d:c7:48:64:4f:7a:
         2e:59:aa:14:57:85:de:31:02:b4:d8:ca:a3:ba:f3:52:df:7b:
         ca:5e:c8:fd:12:4e:56:35:a7:c1:7d:32:c7:e1:3a:70:00:29:
         e1:dc:c3:fa:36:0f:a4:b9:ad:f9:ba:82:d3:25:06:ba:68:50:
         ac:56:26:0a:2e:76:44:74:d9:7f:4a:6b:42:63:56:50:fd:f2:
         62:76:d1:3e:13:86:91:19:07:17:ed:11:94:e5:c1:7f:81:d2:
         06:16:65:c7:2a:67:f9:bb:2a:04:00:04:b9:c4:69:29:02:a9:
         c1:1a:6e:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaa2lNxbFIMZrRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
YmVlNTgzNzUtMjNmMi00ZmNiLWFkZTItM2I0M2I0NzAxM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFfa2Ecd8RQaAGwgq73UOK99xafpFrDyIsYo
mxxnl4rgNwoTkJnBFDBwJxwFsmOMeSqARS62xl+llPXnTMaZGYEjd/OKxvuZ/XMg
YNL7fQPT9CxOUcBIb5BPI3FD35FjODlFi18fBJzPHXDc2Tlq57etO5eMfw4w+opq
B7Kz9utMT2rGBpTDaI+zU/95qK8iIgTjuuImT8S9BXEK+xddXUBouhISKsXRiIoR
qJ21ONTxqAgIAZF1Mw6nsn1dlKdDNKe/zCgUXl44lRHj6QhONQ5r5h5sC53Ii2iM
etQXmjGDAfOuLejDbzN+72EAJyXKCwuUJCaXLzspTAmUpOtO1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbEQfIrpTA15nkXVsC9AZA+LzY4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvZjczYzA2NDctZGIwYi0z
Y2MwLWE1Y2EtN2RjYWM1ODY2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQuuaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzA/0aR0tN4huA107R64k4F66WWpU2Jz0GCOe3UbMHDGBnKXsuM0R8z
XU/Hd5JZicJkBAjzxyfDgFZb5m2UBa23u8DGkgiA1JkyGli4tFJbZejbdy4t79VF
GjsQtgs8gpylfa/VB1zwucnjMrNq9cFZ1STICtqtz8+2FwJo19xKQUi5Xjny6P1D
mT3HSGRPei5ZqhRXhd4xArTYyqO681Lfe8peyP0STlY1p8F9MsfhOnAAKeHcw/o2
D6S5rfm6gtMlBrpoUKxWJgoudkR02X9Ka0JjVlD98mJ20T4ThpEZBxftEZTlwX+B
0gYWZccqZ/m7KgQABLnEaSkCqcEabg4=
-----END CERTIFICATE-----
Generated at Thu Apr 17 12:18:04 2025 by rpki-client