Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa
File:                     fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa (raw, json)
Hash identifier:          W7N4ligOaZ/CxLYEsvjctdpmA2jthjiAfAU/VsR9J1U=
Subject key identifier:   C0:5A:6E:D8:00:03:21:13:BC:E4:10:F8:D0:D0:85:39:77:F9:FF:16
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B1F01670694D943BAE8E44F00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        66.159.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:67:06:94:d9:43:ba:e8:e4:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=3653c60e-d02e-4622-aaf6-0d72fc3b1b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:f7:1a:8d:db:0b:a6:62:7c:91:2f:fc:56:
                    f9:31:c5:30:72:6a:d9:70:79:a2:3b:7e:0c:21:74:
                    90:be:a8:da:c9:99:d7:52:76:d1:a2:8b:10:71:8f:
                    19:f2:a8:30:42:e3:4b:32:75:dc:58:7f:ee:ef:27:
                    6c:66:90:16:ea:41:ab:32:2b:bd:b6:ee:e3:d3:6d:
                    2e:3b:31:60:20:6e:76:bb:eb:03:6e:ea:86:74:a4:
                    03:1a:c5:6f:9f:d8:0c:13:76:cf:11:f0:92:93:d8:
                    e0:0d:04:2d:40:14:82:0a:d5:d4:81:2e:0a:dc:ee:
                    a4:2d:d5:95:3f:5b:d3:64:31:c4:40:9e:e9:e0:e6:
                    50:90:94:6f:08:3e:4a:3e:7c:ff:51:4a:5e:a7:f0:
                    e8:79:a4:ce:94:16:36:91:13:52:f6:be:62:c0:3f:
                    a4:e3:75:4e:2f:c1:33:f2:f9:38:b9:b5:19:1b:da:
                    1c:31:2c:22:3c:f6:9f:d7:ee:64:7f:ac:c0:9f:0b:
                    4a:5c:89:d5:8d:ed:76:10:5e:8d:25:f4:0c:dd:f5:
                    e1:de:b2:68:41:19:97:79:07:d1:6e:cb:df:b1:a7:
                    4f:ed:dd:2a:0f:f4:73:40:4a:6f:ce:bf:09:9e:c0:
                    ef:57:02:92:34:dc:16:a2:f4:f3:58:a3:ee:01:54:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:6E:D8:00:03:21:13:BC:E4:10:F8:D0:D0:85:39:77:F9:FF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:d9:b7:bf:81:68:12:27:9f:2e:6d:b8:e0:d0:b8:fa:ab:
         fc:ca:a4:28:6a:c2:d3:b2:ff:a9:cc:36:95:33:48:cc:d0:ce:
         59:85:35:db:7d:9b:b7:56:98:aa:6d:ee:87:f1:8e:41:c5:74:
         71:dd:a7:ed:de:6f:2e:92:8f:1f:52:c3:2f:0f:df:8c:ba:84:
         dd:07:50:0a:ec:75:94:f3:64:8a:fe:8f:56:e8:43:71:59:b9:
         19:b9:dd:29:c4:9b:84:20:ef:4d:7f:d4:f7:ed:f2:8d:2e:4c:
         82:48:9b:82:87:21:de:53:56:90:29:7f:dd:72:d5:b6:e3:e9:
         85:69:2b:5e:64:f1:b8:95:75:60:54:d3:2f:16:00:ca:d4:ee:
         10:5e:31:4d:0a:c3:26:0f:cb:6a:17:10:cd:07:a5:7b:39:fd:
         15:12:8f:4c:75:83:c6:3d:c6:c2:4d:fd:54:7c:4b:6e:40:d1:
         99:8c:9d:da:97:9d:84:88:f3:df:05:d0:1e:b0:a6:0c:39:fe:
         d8:5e:e6:bd:59:cf:a7:85:f8:f4:2f:33:46:72:a5:c1:45:45:
         5e:25:3d:12:e8:04:8f:4a:64:22:d5:d3:25:5f:83:10:84:d5:
         50:ae:82:71:e9:1e:35:49:ee:00:7d:8f:99:03:9f:1a:15:47:
         38:c3:80:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWcGlNlDuujkTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
MzY1M2M2MGUtZDAyZS00NjIyLWFhZjYtMGQ3MmZjM2IxYjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW/3Go3bC6ZifJEv/Fb5McUwcmrZcHmiO34M
IXSQvqjayZnXUnbRoosQcY8Z8qgwQuNLMnXcWH/u7ydsZpAW6kGrMiu9tu7j020u
OzFgIG52u+sDbuqGdKQDGsVvn9gME3bPEfCSk9jgDQQtQBSCCtXUgS4K3O6kLdWV
P1vTZDHEQJ7p4OZQkJRvCD5KPnz/UUpep/DoeaTOlBY2kRNS9r5iwD+k43VOL8Ez
8vk4ubUZG9ocMSwiPPaf1+5kf6zAnwtKXInVje12EF6NJfQM3fXh3rJoQRmXeQfR
bsvfsadP7d0qD/RzQEpvzr8JnsDvVwKSNNwWovTzWKPuAVQmWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBabtgAAyETvOQQ+NDQhTl3+f8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZmExYzYzMDItM2NiZi0z
Zjk1LTlkZTgtZjFiNWM5MjMxMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQp/mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDl2be/gWgSJ58ubbjg0Lj6q/zKpChqwtOy/6nMNpUzSMzQzlmFNdt9
m7dWmKpt7ofxjkHFdHHdp+3eby6Sjx9Swy8P34y6hN0HUArsdZTzZIr+j1boQ3FZ
uRm53SnEm4Qg701/1Pft8o0uTIJIm4KHId5TVpApf91y1bbj6YVpK15k8biVdWBU
0y8WAMrU7hBeMU0KwyYPy2oXEM0HpXs5/RUSj0x1g8Y9xsJN/VR8S25A0ZmMndqX
nYSI898F0B6wpgw5/the5r1Zz6eF+PQvM0ZypcFFRV4lPRLoBI9KZCLV0yVfgxCE
1VCugnHpHjVJ7gB9j5kDnxoVRzjDgJc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:21 2025 by rpki-client