Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3799c8e8-1a62-37f0-b89b-850afb2370a7.roa
File:                     3799c8e8-1a62-37f0-b89b-850afb2370a7.roa (raw, json)
Hash identifier:          SvGvdQnLBjhukQ954K8pCgSdI5OeD5fg+XtuXdJqsUQ=
Subject key identifier:   80:80:CB:73:44:C7:FF:44:19:E0:86:F9:87:16:C4:07:D5:D1:0C:99
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C3702AD374CAEE6DDB40380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3799c8e8-1a62-37f0-b89b-850afb2370a7.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397220
IP address blocks:        199.7.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:02:ad:37:4c:ae:e6:dd:b4:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=a9f6a8b9-ee98-4626-9bd9-d3ec12a02eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:fb:9b:12:e7:6a:13:2b:bd:c4:90:8d:dd:
                    83:8b:da:26:95:b0:0a:07:a9:85:23:a9:ab:42:c1:
                    24:ac:21:95:27:cc:cf:33:bc:3f:7d:d7:c0:b6:40:
                    84:74:76:97:8c:8f:bc:8c:b6:2f:4b:76:9b:38:7a:
                    1d:9e:4a:2f:78:64:b6:1c:bf:bb:d2:cc:fb:c9:66:
                    dc:a4:6e:65:40:c3:bc:14:71:1c:13:09:26:9b:3b:
                    ab:52:14:22:7f:71:65:0e:28:54:a4:cd:24:0e:2f:
                    f1:70:60:37:97:a0:31:c6:36:fd:4d:5e:90:b9:a7:
                    81:69:12:c2:b5:cb:34:36:9c:30:ca:c8:c7:2f:93:
                    1e:7b:e5:92:91:b7:06:ef:e3:df:74:ec:42:e1:36:
                    16:cd:0b:3f:44:05:aa:20:d4:a5:0c:90:45:dc:0c:
                    f3:ac:ce:56:e7:4e:71:9b:ca:84:c7:36:21:96:c8:
                    31:a0:dc:f3:32:1e:2c:ea:d9:13:db:83:74:07:db:
                    9d:cb:eb:63:ea:49:f0:d0:2d:ae:77:c7:12:54:53:
                    dc:4a:a1:dc:40:78:a5:b4:31:e6:18:c9:70:e2:d8:
                    12:8f:cd:12:aa:3f:07:5f:31:f9:ed:bf:58:de:a9:
                    6f:81:b7:26:82:fc:3f:aa:1d:39:e6:a6:2c:d6:b0:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:80:CB:73:44:C7:FF:44:19:E0:86:F9:87:16:C4:07:D5:D1:0C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3799c8e8-1a62-37f0-b89b-850afb2370a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:ac:57:29:06:4d:5a:b6:bf:f6:bc:95:a1:6d:5c:fd:38:
         a3:12:62:26:21:24:ed:13:5e:24:1a:88:99:1a:6c:ca:48:92:
         56:27:9c:99:31:6e:29:a9:f7:a0:6c:c6:72:99:62:b2:ea:6c:
         37:f1:75:4f:4f:68:08:56:21:6e:16:ef:cb:1e:89:89:9c:79:
         0f:de:ac:b1:fc:1f:ee:d9:c0:1f:dc:1c:fa:e1:34:92:a3:0e:
         30:19:f4:24:79:2c:25:61:10:44:bf:5c:af:4f:1c:50:b7:31:
         bf:35:53:ec:c1:f6:00:44:54:74:74:43:52:14:5b:22:80:18:
         1d:12:3f:33:35:3f:7a:04:bb:6d:a1:05:58:e3:e3:f8:f7:7f:
         6f:19:68:53:cf:c4:d7:b3:07:b5:4d:35:86:9e:3e:8d:63:7e:
         73:a8:61:2d:52:27:d5:1a:3d:aa:d4:f6:6c:78:5e:2d:c9:15:
         f3:9b:0c:8b:90:5a:17:03:f4:93:2f:77:07:9c:d9:a7:43:78:
         c5:4f:12:d9:b4:18:29:9e:84:c8:8c:4b:69:41:9d:9b:30:a3:
         55:f6:dc:7f:d5:e2:d3:05:29:f8:4a:e6:01:14:fe:69:61:66:
         73:1d:5a:c9:e9:4c:8e:31:93:56:d9:e8:2e:d0:58:cb:f5:b6:
         d5:6d:f3:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwKtN0yu5t20A4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YTlmNmE4YjktZWU5OC00NjI2LTliZDktZDNlYzEyYTAyZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU/7mxLnahMrvcSQjd2Di9omlbAKB6mFI6mr
QsEkrCGVJ8zPM7w/fdfAtkCEdHaXjI+8jLYvS3abOHodnkoveGS2HL+70sz7yWbc
pG5lQMO8FHEcEwkmmzurUhQif3FlDihUpM0kDi/xcGA3l6Axxjb9TV6QuaeBaRLC
tcs0NpwwysjHL5Mee+WSkbcG7+PfdOxC4TYWzQs/RAWqINSlDJBF3AzzrM5W505x
m8qExzYhlsgxoNzzMh4s6tkT24N0B9udy+tj6knw0C2ud8cSVFPcSqHcQHiltDHm
GMlw4tgSj80Sqj8HXzH57b9Y3qlvgbcmgvw/qh055qYs1rD10QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICAy3NEx/9EGeCG+YcWxAfV0QyZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzc5OWM4ZTgtMWE2Mi0z
N2YwLWI4OWItODUwYWZiMjM3MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEv8rFcpBk1atr/2vJWhbVz9OKMSYiYhJO0TXiQaiJkabMpIklYnnJkx
bimp96BsxnKZYrLqbDfxdU9PaAhWIW4W78seiYmceQ/erLH8H+7ZwB/cHPrhNJKj
DjAZ9CR5LCVhEES/XK9PHFC3Mb81U+zB9gBEVHR0Q1IUWyKAGB0SPzM1P3oEu22h
BVjj4/j3f28ZaFPPxNezB7VNNYaePo1jfnOoYS1SJ9UaParU9mx4Xi3JFfObDIuQ
WhcD9JMvdwec2adDeMVPEtm0GCmehMiMS2lBnZswo1X23H/V4tMFKfhK5gEU/mlh
ZnMdWsnpTI4xk1bZ6C7QWMv1ttVt89Y=
-----END CERTIFICATE-----
Generated at Sun Sep 14 13:53:25 2025 by rpki-client