Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa
File:                     7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa (raw, json)
Hash identifier:          PCFcteb70oE+z026otctsaC7EscybSg+5IpjiqkiNb0=
Subject key identifier:   74:BE:4D:65:AB:5B:0E:A1:B2:E4:63:7C:F3:18:04:7B:51:15:4B:33
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584ADA9BD572895C444CB201C580
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d5:72:89:5c:44:4c:b2:01:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=eef92490-28bd-4204-bd8a-7a3368e8bfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:0a:5c:23:dd:c0:bf:77:08:a8:cf:83:09:
                    d6:5f:4d:0d:c2:0e:f1:f8:f9:76:3b:b7:2f:f6:b7:
                    f8:a3:86:f0:fd:51:c9:aa:00:93:fa:e4:33:f2:22:
                    4b:0c:d1:45:b2:b1:e5:51:a9:0f:0d:37:f9:33:b0:
                    14:8f:2c:2c:a1:65:c7:0b:93:a8:59:19:ed:8b:9a:
                    09:0c:f1:5d:f5:e6:e5:66:34:b5:ed:9b:db:09:05:
                    75:b4:f7:a4:c7:83:05:d4:ef:3d:0a:95:e0:7c:25:
                    22:5c:b4:1d:69:b5:04:13:db:db:38:da:d0:85:a9:
                    a3:47:34:3c:9b:94:75:8e:a2:cb:94:bf:a0:ae:4b:
                    60:80:88:2d:32:40:b5:a4:87:85:e5:3f:ed:a5:94:
                    d5:cf:a3:ef:92:66:5f:be:bd:2b:f8:aa:b9:50:f7:
                    ae:d5:2f:c6:f1:22:8f:31:7c:35:cc:67:d0:13:70:
                    e2:23:e0:ff:c4:52:a5:4c:df:40:4e:f3:18:c0:99:
                    80:26:72:2b:55:c3:14:28:7e:ee:a6:bc:17:4d:ab:
                    4e:53:4d:6f:73:98:9f:35:91:5f:c0:4b:6f:a7:d5:
                    cc:67:58:3e:3b:8e:87:dc:c2:d3:2f:aa:e0:28:f6:
                    7d:53:5f:fb:52:b4:98:d1:04:ff:8d:fd:78:93:eb:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:4D:65:AB:5B:0E:A1:B2:E4:63:7C:F3:18:04:7B:51:15:4B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:93:1c:17:1e:f4:94:9a:99:06:a9:4b:7d:a6:13:74:fd:
         fd:42:56:df:bb:df:38:a0:2c:07:6e:db:60:8f:c9:c6:55:b3:
         cc:2b:97:24:cb:2c:24:5c:46:df:a2:d4:c4:dd:14:d0:75:5b:
         12:78:64:2d:d1:2d:bd:24:ef:17:5a:71:27:d9:69:cd:09:b1:
         95:56:e9:0e:66:46:bd:e2:e0:e0:6f:c2:ce:06:f6:8b:b1:21:
         83:7d:f0:07:d6:12:c3:ce:b0:27:f3:47:46:8a:b0:03:b6:e4:
         27:e4:e8:5d:3d:47:4d:f1:58:54:b8:bb:26:d5:32:35:ac:d8:
         1e:c3:62:c9:f2:2b:8d:f2:7e:aa:8b:1a:68:9a:ba:29:63:7b:
         c3:b7:35:9c:df:8e:af:62:d5:7b:25:8a:78:61:fe:fe:9e:0d:
         7d:13:59:60:a3:8c:f0:a6:c7:39:cc:8c:86:b2:c6:25:0a:b6:
         a4:4d:80:27:3d:a5:fb:b0:ab:d8:b7:3e:21:22:73:c9:5f:88:
         67:b4:35:0b:88:b2:b7:56:9f:2f:75:87:4e:38:6b:47:5d:08:
         73:71:67:de:55:ae:22:60:ff:f2:0e:45:c4:8a:98:2f:2e:65:
         7c:7c:db:f4:e2:23:25:0e:92:11:f2:ce:c5:b0:2d:8b:1d:21:
         24:e5:e6:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram9VyiVxETLIBxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
ZWVmOTI0OTAtMjhiZC00MjA0LWJkOGEtN2EzMzY4ZThiZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQKXCPdwL93CKjPgwnWX00Nwg7x+Pl2O7cv
9rf4o4bw/VHJqgCT+uQz8iJLDNFFsrHlUakPDTf5M7AUjywsoWXHC5OoWRnti5oJ
DPFd9eblZjS17ZvbCQV1tPekx4MF1O89CpXgfCUiXLQdabUEE9vbONrQhamjRzQ8
m5R1jqLLlL+grktggIgtMkC1pIeF5T/tpZTVz6PvkmZfvr0r+Kq5UPeu1S/G8SKP
MXw1zGfQE3DiI+D/xFKlTN9ATvMYwJmAJnIrVcMUKH7uprwXTatOU01vc5ifNZFf
wEtvp9XMZ1g+O46H3MLTL6rgKPZ9U1/7UrSY0QT/jf14k+tkfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHS+TWWrWw6hsuRjfPMYBHtRFUszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvNzc0N2E3ZjEtY2Q5Ny0z
M2IzLWI2NDktNjVkNDlhMmVkNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/vkxwXHvSUmpkGqUt9phN0/f1CVt+73zigLAdu22CPycZVs8wrlyTL
LCRcRt+i1MTdFNB1WxJ4ZC3RLb0k7xdacSfZac0JsZVW6Q5mRr3i4OBvws4G9oux
IYN98AfWEsPOsCfzR0aKsAO25Cfk6F09R03xWFS4uybVMjWs2B7DYsnyK43yfqqL
Gmiauilje8O3NZzfjq9i1Xslinhh/v6eDX0TWWCjjPCmxznMjIayxiUKtqRNgCc9
pfuwq9i3PiEic8lfiGe0NQuIsrdWny91h044a0ddCHNxZ95VriJg//IORcSKmC8u
ZXx82/TiIyUOkhHyzsWwLYsdISTl5t8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:32 2025 by rpki-client