Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/700bc023-2d86-3bd5-b3b6-9c9566a2b732.roa
File:                     700bc023-2d86-3bd5-b3b6-9c9566a2b732.roa (raw, json)
Hash identifier:          s8CKLB8tuBwYIpS7YggMeETxEYD4W9qf8OA292ueO0A=
Subject key identifier:   BE:E1:B8:9B:BF:B5:A9:B5:7F:2A:CC:00:14:F1:F2:57:2A:C4:D6:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBA3092FF6C4847ED31200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/700bc023-2d86-3bd5-b3b6-9c9566a2b732.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22258
IP address blocks:        66.208.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:a3:09:2f:f6:c4:84:7e:d3:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1d4b5fda-41f9-418a-90bd-c49027a23c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:34:db:dd:c3:43:cd:fe:60:1d:ca:70:46:
                    2e:ef:c0:b0:b8:d2:de:91:4b:ce:3f:d5:05:fd:17:
                    e5:dd:b2:7e:9d:2e:76:9a:45:b6:ae:81:97:40:d6:
                    c1:1f:91:5a:ab:af:2f:e5:99:80:66:42:b8:bb:c9:
                    54:68:73:ba:24:67:86:16:08:69:18:b2:e0:a3:de:
                    61:65:1c:c1:f0:db:bf:ac:94:90:ad:88:47:ff:c2:
                    3d:70:bf:38:38:90:8e:24:6d:81:9f:e1:8d:d9:cc:
                    08:83:d3:6b:3e:16:3f:0a:f1:37:3b:64:dc:cb:9e:
                    f1:c3:6c:6b:ed:f0:88:38:84:9e:bb:27:89:e2:83:
                    20:46:5c:fe:b2:c6:2d:31:b8:9d:30:6f:28:9a:a2:
                    e0:51:80:4a:78:ca:3c:25:53:57:21:08:49:ac:5f:
                    80:f5:a6:8d:38:af:54:3f:c5:83:62:9b:43:0b:80:
                    de:bc:16:a9:24:ae:ce:65:12:7c:a1:fb:1f:8c:17:
                    2f:2d:65:b7:78:62:60:e7:53:22:2b:c9:d8:ff:19:
                    02:8b:75:18:2f:a4:26:70:9c:f9:4b:64:b9:6c:8d:
                    29:b5:d3:45:4e:72:35:6e:fd:ac:33:8c:82:dd:6a:
                    70:bc:d9:37:ee:87:75:31:c9:9e:bb:c9:45:b1:fe:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:B8:9B:BF:B5:A9:B5:7F:2A:CC:00:14:F1:F2:57:2A:C4:D6:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/700bc023-2d86-3bd5-b3b6-9c9566a2b732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:9a:3d:9b:ad:17:2b:73:a0:09:13:6c:42:bf:b0:e9:62:
         9f:f8:a0:34:c9:38:82:86:6e:ac:cd:00:b5:75:b5:2f:61:dc:
         6c:ac:71:29:ee:4d:e8:c9:f2:4a:47:0d:a5:53:57:87:41:44:
         32:e7:58:b6:d3:24:cd:72:1b:c4:41:81:67:59:0e:ab:bc:1b:
         e8:45:75:e4:ac:a1:58:2f:16:4e:45:7e:fb:47:e0:99:53:c8:
         bd:cb:22:e4:a3:0f:0e:2c:da:af:90:2e:95:94:9a:b5:db:20:
         ca:36:59:6c:a6:76:eb:a3:f7:d3:70:7b:e6:45:cf:93:d2:87:
         6f:b1:8f:b9:30:b3:36:8f:43:6d:63:f8:01:6b:01:0e:8e:22:
         36:7c:cf:a0:97:2c:8d:5a:89:aa:6b:a5:b6:c7:cf:8b:c4:e0:
         b4:a9:a1:f7:c7:3c:64:eb:80:6d:46:7a:55:85:93:86:ce:9b:
         f1:ca:75:f3:5e:a4:dc:77:2f:8e:79:4c:0e:3a:c9:71:48:4c:
         88:20:29:50:8c:b5:a7:86:f8:db:cc:a6:25:d8:9d:c1:95:15:
         e2:b7:96:cd:9e:4f:d4:62:50:d1:a3:82:b2:46:ed:e2:ca:04:
         b9:85:9a:2f:f3:b3:4e:57:63:c6:0c:54:32:9f:d0:b2:5d:d2:
         10:10:5a:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+6MJL/bEhH7TEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MWQ0YjVmZGEtNDFmOS00MThhLTkwYmQtYzQ5MDI3YTIzYzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZM0293DQ83+YB3KcEYu78CwuNLekUvOP9UF
/Rfl3bJ+nS52mkW2roGXQNbBH5Faq68v5ZmAZkK4u8lUaHO6JGeGFghpGLLgo95h
ZRzB8Nu/rJSQrYhH/8I9cL84OJCOJG2Bn+GN2cwIg9NrPhY/CvE3O2Tcy57xw2xr
7fCIOISeuyeJ4oMgRlz+ssYtMbidMG8omqLgUYBKeMo8JVNXIQhJrF+A9aaNOK9U
P8WDYptDC4DevBapJK7OZRJ8ofsfjBcvLWW3eGJg51MiK8nY/xkCi3UYL6QmcJz5
S2S5bI0ptdNFTnI1bv2sM4yC3WpwvNk37od1Mcmeu8lFsf5TJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7huJu/tam1fyrMABTx8lcqxNa7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzAwYmMwMjMtMmQ4Ni0z
YmQ1LWIzYjYtOWM5NTY2YTJiNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtDEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+umj2brRcrc6AJE2xCv7DpYp/4oDTJOIKGbqzNALV1tS9h3GyscSnu
TejJ8kpHDaVTV4dBRDLnWLbTJM1yG8RBgWdZDqu8G+hFdeSsoVgvFk5FfvtH4JlT
yL3LIuSjDw4s2q+QLpWUmrXbIMo2WWymduuj99Nwe+ZFz5PSh2+xj7kwszaPQ21j
+AFrAQ6OIjZ8z6CXLI1aiaprpbbHz4vE4LSpoffHPGTrgG1GelWFk4bOm/HKdfNe
pNx3L455TA46yXFITIggKVCMtaeG+NvMpiXYncGVFeK3ls2eT9RiUNGjgrJG7eLK
BLmFmi/zs05XY8YMVDKf0LJd0hAQWkI=
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:06:43 2025 by rpki-client