Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f7719eb6-7bf7-3c39-a49e-c08b56551137.roa
File:                     f7719eb6-7bf7-3c39-a49e-c08b56551137.roa (raw, json)
Hash identifier:          xt3pX+oaD35oxC+XIJDrQrNt79UiHpy8PuRlp9e+QQw=
Subject key identifier:   2D:A1:4B:69:27:31:4F:6E:DA:0A:59:3B:B2:42:9C:13:D1:F4:C0:34
Certificate issuer:       /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Certificate serial:       010D0C9F4328584B84E77E0BBB58A8A6349BA3C0
Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f7719eb6-7bf7-3c39-a49e-c08b56551137.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     133499
IP address blocks:        66.118.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7e:0b:bb:58:a8:a6:34:9b:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=1a58b8d8-e831-4181-94e7-61396c3648e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:67:ab:db:7d:8e:c6:45:f0:54:74:de:72:
                    46:b6:36:5d:5b:64:b4:99:b6:7d:d0:4b:a8:28:f2:
                    e3:2a:eb:82:d1:07:5d:d9:ff:05:db:a7:d9:84:61:
                    e4:1f:b2:5b:68:64:af:fa:68:3c:10:97:fa:bd:b2:
                    73:6b:42:ed:2b:ec:7b:05:46:2f:53:05:21:ad:a8:
                    40:47:86:47:a7:19:83:fa:7f:d6:ed:07:cd:a7:ea:
                    90:44:40:8c:af:6a:18:8f:19:6c:91:2a:b4:e7:4d:
                    20:4d:e1:45:e2:c2:81:8e:4b:0c:69:22:0f:9e:7c:
                    7c:05:8b:40:88:66:01:7f:d6:2e:4f:c4:2c:75:a7:
                    82:dc:a2:1c:23:c4:5d:85:ee:2e:d4:2d:03:1e:a7:
                    7e:81:00:2c:8d:0f:36:f0:3a:36:09:a4:df:af:a0:
                    35:f1:28:95:f3:35:1c:49:7d:3c:7f:ea:f4:b5:ca:
                    59:dd:f6:3d:da:b6:dd:ac:b2:94:f6:85:7f:8b:ff:
                    20:b5:c1:c3:88:cd:a3:ce:64:79:c4:ff:34:85:60:
                    d2:7b:e5:57:8c:cb:86:61:64:7a:05:c9:8f:f1:4c:
                    96:77:a7:0c:fb:3d:f2:82:bc:a0:5e:5a:54:77:db:
                    62:b2:11:79:ef:b7:57:1e:00:70:08:04:2a:38:02:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:4B:69:27:31:4F:6E:DA:0A:59:3B:B2:42:9C:13:D1:F4:C0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f7719eb6-7bf7-3c39-a49e-c08b56551137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl

            X509v3 Authority Key Identifier:
                keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:a5:84:3f:d2:1c:06:e5:d3:30:e0:14:4e:a7:db:ed:f5:
         10:59:2c:57:67:cd:d1:13:8a:ed:55:e6:cf:c0:97:0b:37:33:
         f9:87:c2:5d:3e:40:65:5b:0a:07:45:e4:8d:fe:10:e4:6e:34:
         c9:a1:9f:02:49:e6:48:05:fa:bc:78:70:a2:b2:41:71:a9:06:
         ed:e2:b4:4a:8c:1a:bb:b1:ed:d3:d0:d5:63:69:97:13:aa:d5:
         f9:9b:64:60:61:a9:e0:e1:69:80:75:2d:6c:99:2c:8a:cc:02:
         84:a7:2e:0f:2e:86:bf:8c:fb:52:63:d7:c0:b3:b9:ad:54:4e:
         b0:bf:b1:2a:7a:5d:ef:53:cd:01:c0:25:70:38:91:29:c7:30:
         fd:f8:83:5f:b6:5d:76:7f:65:3b:64:65:b1:f6:10:a0:19:5e:
         23:64:7b:63:67:01:37:39:02:b7:a3:e5:20:32:7f:c4:e8:ff:
         db:ff:bc:80:a9:e9:c8:0f:e0:b4:07:9a:ce:5a:f5:59:5d:1b:
         91:69:1e:c7:fe:d6:16:20:eb:04:61:2a:75:7d:d9:e6:b2:65:
         56:49:a2:a8:70:0d:58:37:c6:4d:5d:93:17:7e:0e:96:87:86:
         26:5a:68:98:57:05:aa:4c:16:a8:3f:4e:33:eb:c8:5b:fb:f8:
         d8:c2:b1:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE534Lu1iopjSbo8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgzMjZlYWEtNWFkMi00NmMxLTg0MjMtYmNmMThiNmQ0
MjgzMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
MWE1OGI4ZDgtZTgzMS00MTgxLTk0ZTctNjEzOTZjMzY0OGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/tnq9t9jsZF8FR03nJGtjZdW2S0mbZ90Euo
KPLjKuuC0Qdd2f8F26fZhGHkH7JbaGSv+mg8EJf6vbJza0LtK+x7BUYvUwUhrahA
R4ZHpxmD+n/W7QfNp+qQRECMr2oYjxlskSq0500gTeFF4sKBjksMaSIPnnx8BYtA
iGYBf9YuT8QsdaeC3KIcI8Rdhe4u1C0DHqd+gQAsjQ828Do2CaTfr6A18SiV8zUc
SX08f+r0tcpZ3fY92rbdrLKU9oV/i/8gtcHDiM2jzmR5xP80hWDSe+VXjMuGYWR6
BcmP8UyWd6cM+z3ygrygXlpUd9tishF577dXHgBwCAQqOAK6IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2hS2knMU9u2gpZO7JCnBPR9MA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ODMy
NmVhYS01YWQyLTQ2YzEtODQyMy1iY2YxOGI2ZDQyODMvZjc3MTllYjYtN2JmNy0z
YzM5LWE0OWUtYzA4YjU2NTUxMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDgzMjZlYWEtNWFkMi00NmMxLTg0
MjMtYmNmMThiNmQ0MjgzLzQ4MzI2ZWFhLTVhZDItNDZjMS04NDIzLWJjZjE4YjZk
NDI4My5jcmwwHwYDVR0jBBgwFoAULuF8x2a3birw8/zUbjH4M+xRvF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ODMyNmVhYS01YWQyLTQ2YzEtODQyMy1iY2Yx
OGI2ZDQyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnY4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkapYQ/0hwG5dMw4BROp9vt9RBZLFdnzdETiu1V5s/Alws3M/mHwl0+
QGVbCgdF5I3+EORuNMmhnwJJ5kgF+rx4cKKyQXGpBu3itEqMGrux7dPQ1WNplxOq
1fmbZGBhqeDhaYB1LWyZLIrMAoSnLg8uhr+M+1Jj18Czua1UTrC/sSp6Xe9TzQHA
JXA4kSnHMP34g1+2XXZ/ZTtkZbH2EKAZXiNke2NnATc5Arej5SAyf8To/9v/vICp
6cgP4LQHms5a9VldG5FpHsf+1hYg6wRhKnV92eayZVZJoqhwDVg3xk1dkxd+DpaH
hiZaaJhXBapMFqg/TjPryFv7+NjCsXE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:47 2025 by rpki-client