Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/14acf770-1afa-3855-b9be-f52cb675541a.roa
File:                     14acf770-1afa-3855-b9be-f52cb675541a.roa (raw, json)
Hash identifier:          jxjmLFOGxL1ecHCj9faG7jPVy7+GG9LlkivBiDgbPgg=
Subject key identifier:   79:BE:9B:82:4F:E3:66:A2:94:80:58:77:53:82:D3:C6:EE:C4:AB:8B
Certificate issuer:       /CN=2c0d6631-d953-4646-a85e-78cc1e2ef97f
Certificate serial:       010D0C9F4328584B02CA2B60F15E29327B5CAB80
Authority key identifier: C6:36:71:E1:22:EF:24:7A:43:27:47:57:15:09:6C:81:61:AA:3D:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/14acf770-1afa-3855-b9be-f52cb675541a.roa
Signing time:             Thu 28 Aug 2025 22:26:40 +0000
ROA not before:           Thu 28 Aug 2025 22:26:40 +0000
ROA not after:            Wed 26 Nov 2025 23:26:40 +0000
asID:                     25668
IP address blocks:        65.110.0.0/19 maxlen: 19
                          66.51.128.0/20 maxlen: 20
                          172.103.128.0/17 maxlen: 17
                          208.110.96.0/19 maxlen: 19
                          209.205.64.0/19 maxlen: 19
                          209.205.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/2c0d6631-d953-4646-a85e-78cc1e2ef97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/2c0d6631-d953-4646-a85e-78cc1e2ef97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:02:ca:2b:60:f1:5e:29:32:7b:5c:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c0d6631-d953-4646-a85e-78cc1e2ef97f
        Validity
            Not Before: Aug 28 22:26:40 2025 GMT
            Not After : Nov 26 23:26:40 2025 GMT
        Subject: CN=b3e70a47-e1ff-46e1-8994-c5545462f34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:a0:03:c0:d0:c3:d6:f5:32:74:9a:9a:ce:
                    2f:59:8b:f5:99:6d:57:cf:c5:a6:fb:4d:f7:62:cd:
                    3e:db:a5:e9:3c:1f:e5:bc:73:b8:c6:f9:07:f6:32:
                    92:74:22:f0:ad:b3:44:db:76:ef:58:66:a3:29:fc:
                    49:28:6e:c9:06:b3:f0:0e:e0:59:39:52:fb:71:b7:
                    41:e1:30:71:4d:97:29:6a:6c:d4:da:b7:3d:c2:db:
                    47:6a:0b:2e:d8:c8:ee:99:44:bc:a2:6a:7f:52:7f:
                    7d:3f:5b:bd:66:ce:b9:5b:53:c1:d3:22:53:7e:40:
                    5f:fb:d4:e8:78:73:30:01:3b:fb:ec:d7:c1:a1:86:
                    fa:13:37:8a:33:66:94:cc:9e:ba:e5:cf:c8:00:3d:
                    f4:76:4a:ce:e6:8e:12:61:a5:30:8c:3d:b6:5d:ff:
                    1b:55:5f:12:f8:ab:ec:d7:0e:65:a4:34:e9:c5:89:
                    13:9c:bc:8f:b6:be:f7:0a:f3:e9:8e:c2:e5:24:79:
                    6f:a5:86:dd:bb:56:3c:34:33:e2:4c:b9:f2:47:ab:
                    da:01:8b:85:2e:39:48:e1:de:9e:75:23:38:10:59:
                    5b:1c:81:6e:ec:21:a4:43:f8:f3:eb:ea:2c:5d:73:
                    d7:43:f6:1a:71:64:6c:e7:f4:62:ae:39:fb:27:4f:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:9B:82:4F:E3:66:A2:94:80:58:77:53:82:D3:C6:EE:C4:AB:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/14acf770-1afa-3855-b9be-f52cb675541a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/2c0d6631-d953-4646-a85e-78cc1e2ef97f.crl

            X509v3 Authority Key Identifier:
                keyid:C6:36:71:E1:22:EF:24:7A:43:27:47:57:15:09:6C:81:61:AA:3D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.0.0/19
                  66.51.128.0/20
                  172.103.128.0/17
                  208.110.96.0/19
                  209.205.64.0-209.205.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:04:83:1a:38:9e:4d:54:5b:90:58:36:78:a8:2c:ee:86:
         b0:0b:46:a4:a5:a8:07:0a:20:7e:ca:12:5f:29:60:47:c2:f4:
         54:8c:25:9f:2f:af:e7:a2:bf:d7:ec:f2:b0:66:a7:c6:45:dc:
         50:99:ca:cf:99:f9:2b:aa:6f:4e:3e:be:d1:af:9b:06:09:b2:
         00:b1:46:38:ea:75:98:06:a4:76:0c:97:81:29:ad:ac:f8:d0:
         5b:3d:02:87:dc:f6:93:50:42:c3:8e:c0:a2:aa:43:a6:2a:e4:
         05:f0:97:d3:24:0e:c0:a2:c5:09:6f:5e:c7:f1:78:95:21:89:
         e1:45:75:ac:c3:01:bb:80:99:70:2d:e9:50:50:9a:54:ba:61:
         df:c6:cc:f8:b7:28:2c:d9:a3:f5:64:bf:a8:04:8a:0a:c5:83:
         90:9d:a8:e3:a5:96:e9:bb:84:45:43:a6:9a:5a:01:7c:eb:ca:
         6d:a0:9c:36:d8:75:b5:0a:a5:6a:59:9d:a5:08:aa:a4:c7:2e:
         5e:06:04:50:6b:2e:c9:71:de:3e:b0:28:1e:95:24:50:7c:b1:
         b6:29:0c:37:5f:06:58:3e:6e:68:b6:88:ca:56:fa:f9:ca:d5:
         6d:09:52:be:f4:13:7c:96:21:dc:53:4d:56:69:26:c6:94:9c:
         47:85:48:e0
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEsCyitg8V4pMntcq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmMwZDY2MzEtZDk1My00NjQ2LWE4NWUtNzhjYzFlMmVm
OTdmMB4XDTI1MDgyODIyMjY0MFoXDTI1MTEyNjIzMjY0MFowLzEtMCsGA1UEAxMk
YjNlNzBhNDctZTFmZi00NmUxLTg5OTQtYzU1NDU0NjJmMzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyGgA8DQw9b1MnSams4vWYv1mW1Xz8Wm+033
Ys0+26XpPB/lvHO4xvkH9jKSdCLwrbNE23bvWGajKfxJKG7JBrPwDuBZOVL7cbdB
4TBxTZcpamzU2rc9wttHagsu2MjumUS8omp/Un99P1u9Zs65W1PB0yJTfkBf+9To
eHMwATv77NfBoYb6EzeKM2aUzJ665c/IAD30dkrO5o4SYaUwjD22Xf8bVV8S+Kvs
1w5lpDTpxYkTnLyPtr73CvPpjsLlJHlvpYbdu1Y8NDPiTLnyR6vaAYuFLjlI4d6e
dSM4EFlbHIFu7CGkQ/jz6+osXXPXQ/YacWRs5/Rirjn7J09rkwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFHm+m4JP42ailIBYd1OC08buxKuLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzBk
NjYzMS1kOTUzLTQ2NDYtYTg1ZS03OGNjMWUyZWY5N2YvMTRhY2Y3NzAtMWFmYS0z
ODU1LWI5YmUtZjUyY2I2NzU1NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwZDY2MzEtZDk1My00NjQ2LWE4
NWUtNzhjYzFlMmVmOTdmLzJjMGQ2NjMxLWQ5NTMtNDY0Ni1hODVlLTc4Y2MxZTJl
Zjk3Zi5jcmwwHwYDVR0jBBgwFoAUxjZx4SLvJHpDJ0dXFQlsgWGqPXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzBkNjYzMS1kOTUzLTQ2NDYtYTg1ZS03OGNj
MWUyZWY5N2YuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQFQW4AAwQE
QjOAAwQHrGeAAwQF0G5gMAwDBAbRzUADBATRzWAwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMbUEgxo4nk1U
W5BYNnioLO6GsAtGpKWoBwogfsoSXylgR8L0VIwlny+v56K/1+zysGanxkXcUJnK
z5n5K6pvTj6+0a+bBgmyALFGOOp1mAakdgyXgSmtrPjQWz0Ch9z2k1BCw47AoqpD
pirkBfCX0yQOwKLFCW9ex/F4lSGJ4UV1rMMBu4CZcC3pUFCaVLph38bM+LcoLNmj
9WS/qASKCsWDkJ2o46WW6buERUOmmloBfOvKbaCcNth1tQqlalmdpQiqpMcuXgYE
UGsuyXHePrAoHpUkUHyxtikMN18GWD5uaLaIylb6+crVbQlSvvQTfJYh3FNNVmkm
xpScR4VI4A==
-----END CERTIFICATE-----
Generated at Thu Sep 18 02:49:15 2025 by rpki-client