Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa
File:                     f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa (raw, json)
Hash identifier:          kptexjzV1XaYMni81b3IeCpPsGrwuhiSrJyxlwjprMg=
Subject key identifier:   C7:66:F7:71:7E:A3:3D:9C:4E:3E:AC:D3:93:8F:FA:FA:3B:3F:64:A5
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849FB8437233C89453D21A13EA0
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa
Signing time:             Mon 26 May 2025 15:08:07 +0000
ROA not before:           Mon 26 May 2025 15:08:07 +0000
ROA not after:            Sun 24 Aug 2025 15:08:07 +0000
asID:                     23316
IP address blocks:        67.199.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:84:37:23:3c:89:45:3d:21:a1:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 26 15:08:07 2025 GMT
            Not After : Aug 24 15:08:07 2025 GMT
        Subject: CN=a17e5c19-deea-4374-890b-4f0f9287112a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:a2:89:1a:a9:90:e6:98:28:11:e9:d9:03:
                    5e:74:11:7a:92:a7:a9:45:f8:fc:f9:df:3e:bd:4f:
                    df:80:b6:45:a5:ad:7f:d8:a0:0a:9a:d5:4d:2e:79:
                    81:41:f1:f2:60:66:06:79:0b:6d:8e:94:a0:0e:2d:
                    75:e1:7c:82:01:6a:03:c2:68:60:d6:62:a2:18:90:
                    1d:5a:71:b5:1c:f5:71:77:e9:87:b5:c7:5e:b8:6b:
                    43:01:f1:67:24:d1:84:be:a6:4d:db:d2:c4:6b:8a:
                    36:5c:90:58:ac:ae:46:e6:95:c7:22:88:20:ba:93:
                    c1:44:00:1b:e2:65:58:1b:54:51:fc:87:03:c4:25:
                    17:f1:f0:26:35:d9:08:52:b9:d9:54:76:1a:10:ce:
                    97:84:2a:46:49:f2:f1:8c:75:4a:2b:6f:74:ab:f1:
                    06:00:88:30:11:b7:44:00:5a:03:59:c7:03:88:74:
                    3f:63:80:2a:99:ec:d7:f8:6c:e4:4d:22:ac:1f:90:
                    2f:30:41:3f:f8:08:cc:02:dd:72:41:4d:02:4b:02:
                    f2:59:ca:56:b3:f7:69:f0:48:68:dc:5d:89:53:6f:
                    9c:08:6f:45:a9:2b:ef:95:a0:6c:d4:d8:82:5c:f2:
                    77:41:eb:71:58:27:8a:b3:a0:2d:1e:ae:0e:90:dc:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:66:F7:71:7E:A3:3D:9C:4E:3E:AC:D3:93:8F:FA:FA:3B:3F:64:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:88:97:be:39:0b:93:16:82:4b:6c:81:b5:11:71:5f:cf:
         4b:17:3f:2f:de:be:17:ac:08:1a:5b:a6:05:65:e6:fd:e3:f8:
         5e:f7:29:fa:2d:71:6a:9b:48:ea:14:3e:d9:d2:30:3d:a4:98:
         65:17:9d:a2:20:74:2f:c4:66:74:3c:d2:14:2d:7f:e8:a3:cc:
         79:0d:56:10:61:d7:50:f6:5b:f7:bf:c4:75:94:72:c7:54:d5:
         20:18:e3:7e:b7:a5:a9:ef:4c:97:fd:87:2b:2f:bc:f1:af:fe:
         62:40:19:cb:56:30:9e:99:c1:db:15:91:50:f9:66:d9:80:04:
         1b:ce:96:98:4e:5e:84:d0:4f:b7:e9:de:40:e3:68:55:09:17:
         39:fd:0e:09:85:1f:97:95:06:01:58:b7:f4:bb:db:eb:e4:2a:
         06:68:2d:66:22:3e:7f:29:f8:77:d8:9d:4c:af:b3:3d:49:d9:
         ba:fe:6a:03:95:37:08:1e:f5:1f:d8:45:b9:fe:25:6b:9a:4b:
         c2:15:2b:0c:a1:5a:d1:9c:4c:c1:e6:28:ac:62:8e:a6:c5:29:
         ef:b1:d9:02:5f:14:ce:82:30:ab:29:ee:07:e2:2e:dd:95:f2:
         91:df:e5:6d:31:78:5f:49:60:18:14:57:d5:4e:73:d2:20:0d:
         67:2e:67:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7hDcjPIlFPSGhPqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI1MDUyNjE1MDgwN1oXDTI1MDgyNDE1MDgwN1owLzEtMCsGA1UEAxMk
YTE3ZTVjMTktZGVlYS00Mzc0LTg5MGItNGYwZjkyODcxMTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj82iiRqpkOaYKBHp2QNedBF6kqepRfj8+d8+
vU/fgLZFpa1/2KAKmtVNLnmBQfHyYGYGeQttjpSgDi114XyCAWoDwmhg1mKiGJAd
WnG1HPVxd+mHtcdeuGtDAfFnJNGEvqZN29LEa4o2XJBYrK5G5pXHIoggupPBRAAb
4mVYG1RR/IcDxCUX8fAmNdkIUrnZVHYaEM6XhCpGSfLxjHVKK290q/EGAIgwEbdE
AFoDWccDiHQ/Y4AqmezX+GzkTSKsH5AvMEE/+AjMAt1yQU0CSwLyWcpWs/dp8Eho
3F2JU2+cCG9FqSvvlaBs1NiCXPJ3QetxWCeKs6AtHq4OkNwN3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdm93F+oz2cTj6s05OP+vo7P2SlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZjZlZjBkYTMtMGZmMi0z
ZTRlLWJiMDgtY2Y0ZDFiYzlhZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ8eEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0YiJe+OQuTFoJLbIG1EXFfz0sXPy/evhesCBpbpgVl5v3j+F73Kfot
cWqbSOoUPtnSMD2kmGUXnaIgdC/EZnQ80hQtf+ijzHkNVhBh11D2W/e/xHWUcsdU
1SAY4363panvTJf9hysvvPGv/mJAGctWMJ6ZwdsVkVD5ZtmABBvOlphOXoTQT7fp
3kDjaFUJFzn9DgmFH5eVBgFYt/S72+vkKgZoLWYiPn8p+HfYnUyvsz1J2br+agOV
Nwge9R/YRbn+JWuaS8IVKwyhWtGcTMHmKKxijqbFKe+x2QJfFM6CMKsp7gfiLt2V
8pHf5W0xeF9JYBgUV9VOc9IgDWcuZ2Y=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:20:22 2025 by rpki-client