Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa
File:                     0ad1dded-4b94-3e11-872b-bcd15954c079.roa (raw, json)
Hash identifier:          k0N+tWFcaNkqKffnwoJC+4yYtfdx+qzMICikYPeVLa4=
Subject key identifier:   0B:23:6F:18:66:EA:09:56:02:C1:64:DE:F1:8E:21:A3:FE:0C:A9:14
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584ACB40E5AC78E4FD672A67B580
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     19224
IP address blocks:        66.103.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e5:ac:78:e4:fd:67:2a:67:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=ab9b3319-9407-4fbb-afde-67f615d00ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:ce:84:84:d1:ab:7b:61:04:b4:e7:30:cd:
                    af:aa:a7:01:82:dd:c4:4a:4f:2b:ff:50:d2:da:bf:
                    5d:d4:2f:1b:79:5d:d4:db:d1:9f:f9:f7:f1:a0:16:
                    7d:1e:c8:65:66:44:a0:19:fd:c8:95:25:e6:3e:7b:
                    4f:02:2a:5a:8d:93:e7:9f:4b:97:1b:d4:b9:1a:75:
                    6b:d9:6d:65:46:99:0c:e0:5a:1a:16:8b:d7:b7:80:
                    f9:0f:bf:b2:ec:d8:48:33:a2:ff:5c:e5:f7:12:d7:
                    14:68:9e:57:8b:6c:eb:28:7c:0d:74:02:10:f0:9d:
                    9f:d2:2e:15:85:2c:c1:64:79:ab:ff:29:8a:65:a8:
                    33:db:4f:3c:d2:61:26:46:1c:e2:5f:27:60:55:e0:
                    ad:b0:20:95:78:4d:db:52:57:54:a4:40:d9:f3:29:
                    e7:4c:f8:58:71:fa:59:15:2d:0c:5d:35:84:a1:c0:
                    d1:e8:ae:72:d6:f5:30:20:83:cf:04:20:4a:cb:0c:
                    73:e7:58:4c:a7:1c:16:03:58:45:48:4c:cb:46:36:
                    9c:0d:77:e3:33:12:9e:8d:2e:27:e3:f6:60:84:56:
                    98:94:1d:b9:4b:77:de:90:b2:5f:5e:81:5c:f1:9d:
                    49:3f:61:03:c8:75:03:b9:0a:b5:9e:f0:dd:48:f7:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:6F:18:66:EA:09:56:02:C1:64:DE:F1:8E:21:A3:FE:0C:A9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:5a:50:77:5d:b5:cb:cb:02:de:d0:53:b1:99:ea:d1:8b:
         4f:f4:04:10:d7:b5:af:16:c1:d1:2e:2c:76:3a:7f:ab:aa:40:
         72:8c:ec:8a:f5:21:d7:29:ce:91:aa:36:e8:14:fd:0a:68:74:
         d2:b4:f9:44:83:58:73:14:2f:37:6c:1a:f8:64:db:9c:df:62:
         d9:56:a5:dd:79:84:e1:75:2e:e9:38:f9:87:38:4e:05:26:73:
         f5:89:b6:7c:b6:cd:de:ec:cd:fd:eb:cc:d1:0c:2f:df:f0:94:
         a1:ba:ed:f4:d9:66:ca:89:bf:b2:7c:76:cf:a6:24:09:74:eb:
         8f:34:59:bd:f5:d4:a8:1b:b1:db:14:a2:3c:9f:67:a6:f0:b4:
         59:c7:07:f1:1d:e1:9a:d5:89:03:5f:8d:05:2b:03:8c:50:0d:
         e6:30:4d:9e:0f:df:04:5c:7b:fc:83:3b:d6:5b:d7:fc:3e:48:
         da:50:83:47:13:3f:a2:50:fd:c6:ac:f8:26:cd:4d:e9:d9:4f:
         50:1a:f7:d4:7c:62:dc:35:ef:d2:f7:ee:9a:95:b9:77:a8:27:
         a9:2a:80:03:f4:b1:84:0c:2a:25:93:dd:db:76:91:6f:e4:e2:
         89:50:18:d4:dd:d8:3c:0a:9b:47:26:a5:f9:ef:2f:95:87:25:
         42:83:29:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOWseOT9ZypntYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YWI5YjMzMTktOTQwNy00ZmJiLWFmZGUtNjdmNjE1ZDAwZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+XOhITRq3thBLTnMM2vqqcBgt3ESk8r/1DS
2r9d1C8beV3U29Gf+ffxoBZ9HshlZkSgGf3IlSXmPntPAipajZPnn0uXG9S5GnVr
2W1lRpkM4FoaFovXt4D5D7+y7NhIM6L/XOX3EtcUaJ5Xi2zrKHwNdAIQ8J2f0i4V
hSzBZHmr/ymKZagz20880mEmRhziXydgVeCtsCCVeE3bUldUpEDZ8ynnTPhYcfpZ
FS0MXTWEocDR6K5y1vUwIIPPBCBKywxz51hMpxwWA1hFSEzLRjacDXfjMxKejS4n
4/ZghFaYlB25S3fekLJfXoFc8Z1JP2EDyHUDuQq1nvDdSPeIiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsjbxhm6glWAsFk3vGOIaP+DKkUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMGFkMWRkZWQtNGI5NC0z
ZTExLTg3MmItYmNkMTU5NTRjMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmf1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8+WlB3XbXLywLe0FOxmerRi0/0BBDXta8WwdEuLHY6f6uqQHKM7Ir1
IdcpzpGqNugU/QpodNK0+USDWHMULzdsGvhk25zfYtlWpd15hOF1Luk4+Yc4TgUm
c/WJtny2zd7szf3rzNEML9/wlKG67fTZZsqJv7J8ds+mJAl06480Wb311KgbsdsU
ojyfZ6bwtFnHB/Ed4ZrViQNfjQUrA4xQDeYwTZ4P3wRce/yDO9Zb1/w+SNpQg0cT
P6JQ/cas+CbNTenZT1Aa99R8Ytw179L37pqVuXeoJ6kqgAP0sYQMKiWT3dt2kW/k
4olQGNTd2DwKm0cmpfnvL5WHJUKDKYI=
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:53:01 2025 by rpki-client