Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/5af5fa8c-d984-310e-bef5-1e266ad32547.roa
File:                     5af5fa8c-d984-310e-bef5-1e266ad32547.roa (raw, json)
Hash identifier:          pX9F9vAUz/sHuuY4vocfHyb7faLV5Pe1kdPSB5n7atM=
Subject key identifier:   D8:A1:06:7C:07:53:67:26:B7:32:DD:B4:3D:E8:9E:22:36:82:3C:6E
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849FB811E8C3CB17EC8E25D5500
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/5af5fa8c-d984-310e-bef5-1e266ad32547.roa
Signing time:             Mon 26 May 2025 15:01:53 +0000
ROA not before:           Mon 26 May 2025 15:01:53 +0000
ROA not after:            Sun 24 Aug 2025 15:01:53 +0000
asID:                     23316
IP address blocks:        67.201.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:81:1e:8c:3c:b1:7e:c8:e2:5d:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 26 15:01:53 2025 GMT
            Not After : Aug 24 15:01:53 2025 GMT
        Subject: CN=07521633-c632-4b95-ae43-d778d11993ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:92:dc:6a:f3:3d:9c:d8:d5:b8:d3:1b:b5:
                    ab:57:0c:62:db:58:03:8b:24:70:13:60:32:c7:ef:
                    3b:9b:7f:44:9a:a4:a0:dc:74:5f:ce:52:6c:cd:2a:
                    c8:b7:a7:19:55:c0:fb:39:b6:2e:3f:94:5e:bd:d1:
                    94:f8:f8:a5:0e:ff:4e:00:d7:85:46:9c:d3:5f:c0:
                    41:e0:af:a2:c8:0f:b4:00:66:f5:15:84:89:b1:1a:
                    1a:d6:5b:eb:4f:b0:11:c7:39:c3:ed:86:92:fe:d3:
                    f8:65:48:89:35:7d:05:ee:53:05:b0:d2:c7:a8:69:
                    e4:aa:1e:ee:a2:72:24:5c:f1:72:fc:9f:fa:c6:aa:
                    0c:f0:07:f5:0d:3f:24:54:fc:a8:4d:49:81:e4:7c:
                    2f:08:0f:2a:fa:56:a1:b8:4c:e8:72:25:f5:8b:38:
                    97:94:bc:67:7c:3b:43:2b:75:28:de:d9:81:b6:d6:
                    6a:69:b9:d8:26:f7:db:5e:9e:8a:df:68:8c:e6:a3:
                    8b:fc:cd:64:98:08:aa:c9:5f:45:d1:91:10:d0:6e:
                    19:4f:c2:1c:5c:cd:50:64:df:68:dd:d4:14:dd:aa:
                    0a:83:8c:27:3d:82:20:e8:be:15:33:f0:d4:13:95:
                    bc:db:2d:93:4b:de:6c:33:c1:b0:37:45:c7:80:ab:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A1:06:7C:07:53:67:26:B7:32:DD:B4:3D:E8:9E:22:36:82:3C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/5af5fa8c-d984-310e-bef5-1e266ad32547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.201.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:40:e6:8d:78:cd:eb:e0:23:5b:b7:da:7f:79:13:c6:bb:
         29:71:98:f1:62:7f:9e:66:8f:d7:fb:6f:c5:8e:22:7c:ec:b7:
         c2:b2:b6:22:d6:a0:40:9a:13:bd:b1:91:39:39:48:7e:f2:2c:
         7a:9b:bf:7e:65:34:9e:7f:eb:b4:ec:ee:f5:95:26:fe:23:b6:
         47:bc:9a:a2:13:20:42:f7:50:9f:cc:7b:b5:ea:97:6f:36:91:
         69:f0:35:68:50:a0:2c:5d:b0:27:1d:8f:a8:7f:75:02:bf:6e:
         ab:9a:fd:bb:8b:75:8d:90:fd:a2:8d:0f:f1:11:d3:a8:c2:24:
         5f:90:5e:ae:37:3b:43:67:12:bf:68:d9:8e:dd:2f:16:6e:4f:
         b7:c6:81:64:c8:d0:b1:d0:9a:07:6e:c6:f1:37:e6:ea:cb:23:
         d2:9f:9e:3a:2d:74:9e:2d:6a:fe:e2:5d:cb:69:59:fb:20:00:
         c4:50:87:7e:63:f4:94:6a:d8:69:e1:0f:86:e4:ee:9a:b1:05:
         aa:43:3b:00:62:d9:96:09:9a:40:a9:38:29:f5:33:f9:ff:2f:
         d1:c4:8d:e8:32:b3:84:d8:07:4c:95:de:49:e3:5d:7e:08:b7:
         fd:e9:ac:da:33:2c:c8:6f:e2:c5:73:2d:eb:a6:5c:0f:70:29:
         bd:31:d4:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7gR6MPLF+yOJdVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI1MDUyNjE1MDE1M1oXDTI1MDgyNDE1MDE1M1owLzEtMCsGA1UEAxMk
MDc1MjE2MzMtYzYzMi00Yjk1LWFlNDMtZDc3OGQxMTk5M2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqCS3GrzPZzY1bjTG7WrVwxi21gDiyRwE2Ay
x+87m39EmqSg3HRfzlJszSrIt6cZVcD7ObYuP5RevdGU+PilDv9OANeFRpzTX8BB
4K+iyA+0AGb1FYSJsRoa1lvrT7ARxznD7YaS/tP4ZUiJNX0F7lMFsNLHqGnkqh7u
onIkXPFy/J/6xqoM8Af1DT8kVPyoTUmB5HwvCA8q+lahuEzociX1iziXlLxnfDtD
K3Uo3tmBttZqabnYJvfbXp6K32iM5qOL/M1kmAiqyV9F0ZEQ0G4ZT8IcXM1QZN9o
3dQU3aoKg4wnPYIg6L4VM/DUE5W82y2TS95sM8GwN0XHgKspoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNihBnwHU2cmtzLdtD3oniI2gjxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvNWFmNWZhOGMtZDk4NC0z
MTBlLWJlZjUtMWUyNjZhZDMyNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ8kIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc/QOaNeM3r4CNbt9p/eRPGuylxmPFif55mj9f7b8WOInzst8KytiLW
oECaE72xkTk5SH7yLHqbv35lNJ5/67Ts7vWVJv4jtke8mqITIEL3UJ/Me7Xql282
kWnwNWhQoCxdsCcdj6h/dQK/bqua/buLdY2Q/aKND/ER06jCJF+QXq43O0NnEr9o
2Y7dLxZuT7fGgWTI0LHQmgduxvE35urLI9KfnjotdJ4tav7iXctpWfsgAMRQh35j
9JRq2GnhD4bk7pqxBapDOwBi2ZYJmkCpOCn1M/n/L9HEjegys4TYB0yV3knjXX4I
t/3prNozLMhv4sVzLeumXA9wKb0x1Nw=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:42:47 2025 by rpki-client