Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa
File:                     fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa (raw, json)
Hash identifier:          KFu3n/QgdiGemeMBZUx0BF1sVLOH6G7cLINmMSdBpn0=
Subject key identifier:   6A:56:F3:81:F4:3E:D2:E8:14:08:FE:BA:32:E1:F1:C2:A7:5D:5E:4A
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584B821CCAB9D30457DB94159A80
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     9505
IP address blocks:        66.171.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ca:b9:d3:04:57:db:94:15:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6eefcc28-ae43-43b4-8414-a38d20a6b99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5e:50:c2:7a:a9:74:a1:43:81:28:d9:09:6a:
                    34:38:66:e8:19:a7:d5:91:13:88:f0:ee:1b:be:bf:
                    64:df:e9:d6:63:00:fa:fb:0d:38:bd:87:cb:a4:a1:
                    61:22:a5:ee:fe:9e:a4:96:ae:cc:71:31:83:72:da:
                    81:a5:9b:ed:53:9f:c4:66:d1:1c:20:97:ad:20:68:
                    df:7c:00:cf:43:85:29:28:3a:7d:34:09:62:a0:78:
                    8d:31:cc:5a:8d:bb:92:0e:eb:4f:d5:81:96:8d:94:
                    f0:d9:18:c3:c7:f4:46:85:34:e8:cd:b1:23:4b:3f:
                    e6:a8:15:7a:53:ec:d1:02:f1:07:a8:fa:59:3e:ee:
                    c4:5d:9e:d8:ce:36:86:64:31:53:e5:0f:df:9a:cc:
                    37:0a:1c:31:ee:51:72:b6:7e:0f:ab:85:58:4d:5e:
                    55:9a:31:40:80:b7:12:a0:0c:4f:ef:13:57:e9:e9:
                    bd:75:0f:a3:dc:48:0f:31:62:21:5f:66:e1:04:be:
                    24:f4:d3:d5:bc:94:b9:da:32:de:54:22:93:17:70:
                    01:4e:07:ab:1b:dd:39:a2:a9:fd:a4:f0:6e:7c:94:
                    08:98:f7:e2:75:eb:d1:24:31:0f:c5:54:34:ed:83:
                    85:6b:46:a7:2e:61:1f:79:e2:18:3c:f2:de:51:ab:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:F3:81:F4:3E:D2:E8:14:08:FE:BA:32:E1:F1:C2:A7:5D:5E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/fc6a0523-b89c-3c3c-bcfc-8c1cf303fa3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:ca:3d:c2:30:e6:4c:3a:03:16:15:f3:df:9f:3e:d9:17:
         83:48:27:30:83:bc:bb:10:d0:c5:58:6e:34:b5:e1:0d:90:7d:
         6a:db:f6:8e:97:85:89:b3:bc:8f:7a:6f:4c:c3:44:5a:98:b5:
         ad:88:36:cc:66:40:fd:70:d7:ce:28:17:d4:5a:36:0a:7d:df:
         f5:3e:6d:e1:4f:8f:72:4d:9a:11:6c:12:df:99:61:50:18:6b:
         19:64:49:b4:8a:35:10:de:3a:2f:b1:4b:47:30:25:21:6b:f4:
         ae:8d:37:f8:71:8a:82:bf:82:66:3a:29:99:43:fa:b5:b2:c0:
         9c:7b:3f:51:1e:f3:92:fb:2c:a3:b1:06:92:e2:29:66:f6:b2:
         7c:fa:e8:01:a9:b3:0d:6e:a4:91:9f:52:d9:f7:f2:da:e0:76:
         c7:27:cf:fc:dd:e8:2b:47:4b:ae:0c:ca:3a:49:08:9e:d9:27:
         ab:f9:ce:89:4d:ca:e2:ce:93:4a:c6:33:72:3c:73:17:f8:29:
         ab:87:4a:cd:5f:01:96:0f:9d:82:f5:bc:fe:f0:a7:b2:20:8d:
         7a:a5:d4:14:84:e3:5c:d9:b1:5c:b6:99:e6:cb:95:1d:52:6c:
         68:27:97:00:8c:82:d7:6b:c1:43:66:c3:af:19:be:a9:3f:83:
         44:c7:1f:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMq50wRX25QVmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi
ZmQ2MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NmVlZmNjMjgtYWU0My00M2I0LTg0MTQtYTM4ZDIwYTZiOTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV5QwnqpdKFDgSjZCWo0OGboGafVkROI8O4b
vr9k3+nWYwD6+w04vYfLpKFhIqXu/p6klq7McTGDctqBpZvtU5/EZtEcIJetIGjf
fADPQ4UpKDp9NAlioHiNMcxajbuSDutP1YGWjZTw2RjDx/RGhTTozbEjSz/mqBV6
U+zRAvEHqPpZPu7EXZ7YzjaGZDFT5Q/fmsw3Chwx7lFytn4Pq4VYTV5VmjFAgLcS
oAxP7xNX6em9dQ+j3EgPMWIhX2bhBL4k9NPVvJS52jLeVCKTF3ABTgerG905oqn9
pPBufJQImPfidevRJDEPxVQ07YOFa0anLmEfeeIYPPLeUata/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpW84H0PtLoFAj+ujLh8cKnXV5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0
YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvZmM2YTA1MjMtYjg5Yy0z
YzNjLWJjZmMtOGMxY2YzMDNmYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi
ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj
YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2
MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6ayj3CMOZMOgMWFfPfnz7ZF4NIJzCDvLsQ0MVYbjS14Q2QfWrb9o6X
hYmzvI96b0zDRFqYta2INsxmQP1w184oF9RaNgp93/U+beFPj3JNmhFsEt+ZYVAY
axlkSbSKNRDeOi+xS0cwJSFr9K6NN/hxioK/gmY6KZlD+rWywJx7P1Ee85L7LKOx
BpLiKWb2snz66AGpsw1upJGfUtn38trgdscnz/zd6CtHS64MyjpJCJ7ZJ6v5zolN
yuLOk0rGM3I8cxf4KauHSs1fAZYPnYL1vP7wp7IgjXql1BSE41zZsVy2mebLlR1S
bGgnlwCMgtdrwUNmw68Zvqk/g0THH6I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:55 2025 by rpki-client