Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
File:                     033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa (raw, json)
Hash identifier:          X8IDY+S3Ww0ar+EJtnljKF7Y4+3jeJ88IJxBlyJmKPQ=
Subject key identifier:   30:A0:E8:4C:6E:6C:A8:9D:77:1C:6C:A7:08:B6:6F:FB:66:1B:93:56
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285849D42FA4DF527B9AD60194D335
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     20055
IP address blocks:        64.52.6.0/24 maxlen: 24
                          64.52.96.0/22 maxlen: 22
                          66.35.0.0/20 maxlen: 20
                          69.55.208.0/20 maxlen: 20
                          72.21.10.0/23 maxlen: 23
                          107.191.236.0/22 maxlen: 22
                          137.83.56.0/24 maxlen: 24
                          137.83.80.0/23 maxlen: 23
                          162.33.232.0/21 maxlen: 21
                          162.43.200.0/21 maxlen: 21
                          192.75.144.0/24 maxlen: 24
                          192.152.0.0/24 maxlen: 24
                          198.179.52.0/22 maxlen: 22
                          204.194.220.0/23 maxlen: 23
                          205.174.152.0/22 maxlen: 22
                          206.166.252.0/23 maxlen: 23
                          207.32.192.0/20 maxlen: 20
                          208.52.160.0/24 maxlen: 24
                          208.52.175.0/24 maxlen: 24
                          209.237.136.0/22 maxlen: 22
                          2001:506:38::/48 maxlen: 48
                          2001:506:39::/48 maxlen: 48
                          2605:21c0::/32 maxlen: 32
                          2607:f688::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a4:df:52:7b:9a:d6:01:94:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=e92a9466-36b6-47cd-a796-d8bb1de9c245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:1f:f1:cb:73:9f:8f:1c:95:de:15:41:29:
                    b6:9c:d6:a3:d5:12:07:07:62:f4:67:0a:3d:c1:45:
                    8a:ad:66:02:e9:a4:33:2d:31:fa:07:13:9e:35:91:
                    9b:70:c0:36:f5:20:3b:75:97:f9:9a:c0:53:51:01:
                    ba:8f:a9:85:f8:22:b6:53:bd:a4:21:72:f0:97:05:
                    78:8c:39:d3:27:68:c9:f7:84:01:b3:e7:24:b5:8a:
                    b2:ad:02:6d:71:f8:9e:bc:dc:b2:57:af:6a:a6:c1:
                    d8:ba:68:c1:83:d4:bf:81:94:27:a3:2a:46:14:da:
                    e6:09:8f:c2:a0:42:e8:55:e6:fb:37:90:5b:75:18:
                    e5:b8:c4:15:a1:e1:b4:f8:09:f3:39:ec:ba:4a:68:
                    ef:25:8b:f6:d7:70:f8:d0:1a:9d:17:90:a2:21:c0:
                    79:7c:32:51:42:77:82:91:3c:1d:82:ba:04:c8:07:
                    64:b6:3a:89:98:a3:06:18:e6:e7:b1:a9:61:fe:05:
                    66:6f:c9:3c:cd:11:d1:3f:47:9a:d5:6a:0f:df:b1:
                    6b:4a:d4:f2:4e:66:9b:77:48:9a:c0:d0:28:b4:6a:
                    95:93:02:90:ce:8d:77:de:f5:b4:bf:1c:72:8b:cf:
                    b8:bf:67:70:70:84:28:41:f3:a2:70:63:ef:88:c4:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A0:E8:4C:6E:6C:A8:9D:77:1C:6C:A7:08:B6:6F:FB:66:1B:93:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.6.0/24
                  64.52.96.0/22
                  66.35.0.0/20
                  69.55.208.0/20
                  72.21.10.0/23
                  107.191.236.0/22
                  137.83.56.0/24
                  137.83.80.0/23
                  162.33.232.0/21
                  162.43.200.0/21
                  192.75.144.0/24
                  192.152.0.0/24
                  198.179.52.0/22
                  204.194.220.0/23
                  205.174.152.0/22
                  206.166.252.0/23
                  207.32.192.0/20
                  208.52.160.0/24
                  208.52.175.0/24
                  209.237.136.0/22
                IPv6:
                  2001:506:38::/47
                  2605:21c0::/32
                  2607:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:69:26:9c:1d:e1:b1:95:a2:a5:1d:50:a3:66:d7:53:3c:
         5d:07:34:eb:66:a4:b6:a1:e2:b8:7d:c3:9f:3f:a3:fb:95:87:
         63:7c:47:c5:47:fa:35:04:63:d0:9b:fb:8e:64:68:64:4e:cf:
         e8:f6:d0:86:99:a9:12:2b:7c:20:2f:49:1b:15:60:64:f0:d1:
         c6:04:d1:6c:45:94:e4:5b:d1:78:e7:8d:04:5e:a0:fc:4e:0c:
         46:41:40:d2:88:f9:5a:e3:81:c5:ab:dc:e5:72:5b:ec:0f:77:
         68:7c:5d:63:92:85:f7:31:f1:52:db:f9:bb:65:cf:d2:45:36:
         b0:e4:5d:6c:07:ff:f9:3c:63:85:6a:fb:bc:71:52:e1:04:3a:
         e3:c4:ee:23:3f:99:2c:b6:03:4a:43:dd:01:1c:b5:d9:5b:49:
         3c:c8:e7:36:8b:23:ef:47:8e:b6:ea:75:0e:dd:e2:17:d0:c0:
         8d:40:16:28:b1:e8:3e:78:12:3c:1a:7e:02:7c:f1:52:c1:33:
         a0:d6:14:c0:df:f4:c2:c4:a1:ac:22:3f:95:45:dc:da:95:d1:
         f8:e6:84:87:7b:fe:e8:0b:1f:0f:22:b4:48:be:2d:7f:e0:ac:
         93:1a:f8:1d:1c:cf:47:51:d9:90:80:9d:b7:52:f7:14:15:a3:
         74:ab:fb:0a
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgIUAQ0Mn0MoWEnUL6TfUnua1gGU0zUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm
M2M4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZTkyYTk0NjYtMzZiNi00N2NkLWE3OTYtZDhiYjFkZTljMjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsof8ctzn48cld4VQSm2nNaj1RIHB2L0Zwo9
wUWKrWYC6aQzLTH6BxOeNZGbcMA29SA7dZf5msBTUQG6j6mF+CK2U72kIXLwlwV4
jDnTJ2jJ94QBs+cktYqyrQJtcfievNyyV69qpsHYumjBg9S/gZQnoypGFNrmCY/C
oELoVeb7N5BbdRjluMQVoeG0+AnzOey6SmjvJYv213D40BqdF5CiIcB5fDJRQneC
kTwdgroEyAdktjqJmKMGGObnsalh/gVmb8k8zRHRP0ea1WoP37FrStTyTmabd0ia
wNAotGqVkwKQzo133vW0vxxyi8+4v2dwcIQoQfOicGPviMThCwIDAQABo4ID6TCC
A+UwHQYDVR0OBBYEFDCg6ExubKiddxxspwi2b/tmG5NWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm
YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvMDMzZmExZWYtZGM1Ni0z
ZmI4LTgxNWQtNWM1YmEyNzdlNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4
ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi
ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5
ZDkxYmYzYzguY2VyMIGyBggrBgEFBQcBBwEB/wSBojCBnzB+BAIAATB4AwQAQDQG
AwQCQDRgAwQEQiMAAwQERTfQAwQBSBUKAwQCa7/sAwQAiVM4AwQBiVNQAwQDoiHo
AwQDoivIAwQAwEuQAwQAwJgAAwQCxrM0AwQBzMLcAwQCza6YAwQBzqb8AwQEzyDA
AwQA0DSgAwQA0DSvAwQC0e2IMB0EAgACMBcDBwEgAQUGADgDBQAmBSHAAwUAJgf2
iDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQB73GkmnB3hsZWipR1Qo2bXUzxdBzTrZqS2oeK4fcOfP6P7lYdj
fEfFR/o1BGPQm/uOZGhkTs/o9tCGmakSK3wgL0kbFWBk8NHGBNFsRZTkW9F4540E
XqD8TgxGQUDSiPla44HFq9zlclvsD3dofF1jkoX3MfFS2/m7Zc/SRTaw5F1sB//5
PGOFavu8cVLhBDrjxO4jP5kstgNKQ90BHLXZW0k8yOc2iyPvR4626nUO3eIX0MCN
QBYoseg+eBI8Gn4CfPFSwTOg1hTA3/TCxKGsIj+VRdzaldH45oSHe/7oCx8PIrRI
vi1/4KyTGvgdHM9HUdmQgJ23UvcUFaN0q/sK
-----END CERTIFICATE-----
Generated at Sat Jun 14 15:44:08 2025 by rpki-client