Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6deada48-45e3-3eb7-864c-4d4cd636c00d.roa
File:                     6deada48-45e3-3eb7-864c-4d4cd636c00d.roa (raw, json)
Hash identifier:          u4NSWW/FeC5w0TT/eUwOgn0gkpAlKhU12ai+cGrJxLE=
Subject key identifier:   96:B1:91:B4:65:EC:91:A1:A2:34:CB:65:FA:C0:BE:D4:FD:5D:E9:70
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B2496D9FBD701BC9367519780
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6deada48-45e3-3eb7-864c-4d4cd636c00d.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     262415
IP address blocks:        66.35.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d9:fb:d7:01:bc:93:67:51:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=3a4b3111-119d-4325-a1a2-ec4905733839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d3:75:9b:e4:18:7f:56:53:e5:f6:03:12:1e:
                    ab:35:08:c3:86:04:f1:75:1d:be:30:0f:fc:48:d2:
                    84:64:45:63:c8:10:69:72:af:02:33:65:c8:a2:51:
                    89:d0:4c:83:3a:07:89:a0:fa:30:55:25:7f:19:23:
                    ca:b0:91:18:3b:be:89:3f:40:1f:a1:be:9c:85:9d:
                    6c:6b:c1:99:de:eb:3b:e5:e2:a1:bd:17:18:45:e1:
                    6f:f1:6d:80:3a:fb:21:ab:1f:16:1c:2a:00:2e:57:
                    08:0f:c5:f9:0b:69:8a:4c:fd:b9:d1:e7:57:d8:4f:
                    eb:49:54:ee:33:ff:85:f3:90:07:07:83:15:d1:3a:
                    60:17:ce:aa:6b:5c:e6:9c:e1:fb:69:8a:74:0f:fb:
                    0d:85:8b:7e:7b:a8:f4:e0:a5:e9:2b:54:85:f5:07:
                    ae:77:c9:f8:dc:be:fc:c8:9b:88:ea:f6:80:23:21:
                    0a:27:54:45:91:8a:1b:1b:21:2d:f2:03:e1:59:2c:
                    67:d2:56:69:11:83:08:d0:67:9b:de:33:1b:ff:24:
                    5c:2b:30:d1:9c:39:b8:a3:1c:70:55:d5:c8:48:fb:
                    46:99:3f:e3:71:43:81:93:aa:0a:45:c8:83:75:43:
                    19:40:7a:ba:dc:80:00:ac:88:dd:9a:0e:62:1a:1d:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B1:91:B4:65:EC:91:A1:A2:34:CB:65:FA:C0:BE:D4:FD:5D:E9:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6deada48-45e3-3eb7-864c-4d4cd636c00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:09:48:75:a0:02:78:9b:d0:e3:e7:01:27:b0:37:d4:67:1f:
         07:a1:2f:4c:66:fe:df:2b:0e:d3:1d:c6:e8:8f:b6:c8:31:58:
         02:a5:d0:26:a9:03:c9:04:56:60:f4:ad:74:3c:39:c3:6e:5e:
         50:1c:21:c5:af:4c:aa:13:5a:60:f4:eb:e1:a3:d9:96:85:ba:
         fb:ea:a6:f6:f7:f1:28:d6:cd:90:8e:f0:8c:d5:b5:76:57:50:
         f4:f2:2d:84:09:aa:96:43:f3:ab:b0:2c:61:2f:e7:55:42:78:
         17:8f:cc:30:81:8f:9a:32:bb:b7:b5:04:ac:f0:7c:0d:a8:fd:
         97:89:d6:15:89:89:0e:56:7a:4d:7e:7c:ea:ef:13:5b:ef:a4:
         89:c4:c2:31:f5:ab:f2:d5:8f:ad:5e:43:0d:75:94:fb:8e:61:
         69:eb:35:0a:85:5a:82:24:31:9f:4f:a5:83:52:4b:39:e2:e0:
         4a:5b:64:16:68:6e:15:f5:26:fe:c5:98:d7:1c:ea:0d:67:33:
         6a:36:59:3d:5f:ad:09:48:66:91:32:15:96:5e:69:96:92:b4:
         e9:e6:86:8c:f2:7b:ac:9f:bf:2c:02:9d:a8:1e:23:1b:1a:59:
         24:ba:c8:11:cc:1c:03:5c:a0:bb:5d:e5:7d:c6:61:dd:6e:6a:
         b9:8d:78:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltn71wG8k2dRl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
M2E0YjMxMTEtMTE5ZC00MzI1LWExYTItZWM0OTA1NzMzODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidN1m+QYf1ZT5fYDEh6rNQjDhgTxdR2+MA/8
SNKEZEVjyBBpcq8CM2XIolGJ0EyDOgeJoPowVSV/GSPKsJEYO76JP0Afob6chZ1s
a8GZ3us75eKhvRcYReFv8W2AOvshqx8WHCoALlcID8X5C2mKTP250edX2E/rSVTu
M/+F85AHB4MV0TpgF86qa1zmnOH7aYp0D/sNhYt+e6j04KXpK1SF9Qeud8n43L78
yJuI6vaAIyEKJ1RFkYobGyEt8gPhWSxn0lZpEYMI0Geb3jMb/yRcKzDRnDm4oxxw
VdXISPtGmT/jcUOBk6oKRciDdUMZQHq63IAArIjdmg5iGh0XIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJaxkbRl7JGhojTLZfrAvtT9XelwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvNmRlYWRhNDgtNDVlMy0z
ZWI3LTg2NGMtNGQ0Y2Q2MzZjMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMJSHWgAnib0OPnASewN9RnHwehL0xm/t8rDtMdxuiPtsgxWAKl0Cap
A8kEVmD0rXQ8OcNuXlAcIcWvTKoTWmD06+Gj2ZaFuvvqpvb38SjWzZCO8IzVtXZX
UPTyLYQJqpZD86uwLGEv51VCeBePzDCBj5oyu7e1BKzwfA2o/ZeJ1hWJiQ5Wek1+
fOrvE1vvpInEwjH1q/LVj61eQw11lPuOYWnrNQqFWoIkMZ9PpYNSSzni4EpbZBZo
bhX1Jv7FmNcc6g1nM2o2WT1frQlIZpEyFZZeaZaStOnmhozye6yfvywCnageIxsa
WSS6yBHMHANcoLtd5X3GYd1uarmNeGE=
-----END CERTIFICATE-----
Generated at Fri Oct 17 20:41:10 2025 by rpki-client