Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa
File:                     60adbf7d-4503-31a4-a156-6bae4b601738.roa (raw, json)
Hash identifier:          YEW33tjd8LwkSGH6QDjaH87pORGn40x+pdON3G26Mas=
Subject key identifier:   85:A6:E6:B2:A7:19:DB:70:09:CE:ED:39:6F:B0:EB:EC:A4:26:04:71
Certificate issuer:       /CN=c66b7cab-031d-4c4c-8595-19848efd3058
Certificate serial:       010D0C9F4328584AF0F1344B28B877DBEE8A9DF0
Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     400339
IP address blocks:        147.136.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:34:4b:28:b8:77:db:ee:8a:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=e529324d-7f63-41d6-8c0a-359b1184f65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:a5:c5:a9:91:2b:ed:b5:28:39:c8:fc:1c:
                    46:47:8b:8d:f1:96:f3:b3:3f:e8:cf:2f:dc:0f:29:
                    eb:24:80:34:0d:8e:9a:c5:90:3a:e2:e6:86:ec:b7:
                    41:77:d7:b0:96:72:ed:f7:24:90:d3:dc:b1:74:30:
                    d5:70:7f:63:49:b6:d9:6b:23:30:1e:37:3e:fc:96:
                    61:b5:75:ff:69:30:c3:84:ca:de:1d:12:17:8d:cf:
                    8d:a8:06:0f:2a:6a:cd:c3:da:70:8c:2f:61:67:56:
                    3a:f8:46:cb:45:5a:e4:36:c4:51:20:2a:81:e5:f8:
                    7f:f3:2d:3c:3b:a7:1c:a0:16:35:6b:31:c9:e5:fb:
                    41:3f:18:51:93:a0:29:88:e6:a2:65:46:d5:ef:0f:
                    2b:a0:d3:b2:f2:0f:48:29:4b:74:4e:95:90:08:02:
                    79:c8:3e:43:5b:6e:5e:33:32:33:71:d7:41:bf:28:
                    65:75:b6:60:46:26:ad:66:9b:09:8f:51:c5:7f:a7:
                    c2:1d:e2:6d:05:5d:96:9d:cb:54:04:03:9f:8d:60:
                    51:5a:0b:47:34:8b:9e:af:e0:ad:1b:33:8a:f9:ec:
                    a3:fc:fa:63:74:11:2d:fe:87:d6:54:5a:8e:f6:eb:
                    28:21:d9:53:38:0c:ad:7e:59:79:c3:e7:c1:f6:ae:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:E6:B2:A7:19:DB:70:09:CE:ED:39:6F:B0:EB:EC:A4:26:04:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:fc:b9:9c:0e:00:06:f9:2f:15:66:be:9c:f0:29:d5:4c:
         34:31:43:57:3d:20:90:31:c7:28:ce:32:fb:cf:47:96:9f:11:
         09:9d:58:08:0b:fe:96:a7:b0:de:36:b3:cf:9d:aa:cb:28:35:
         cd:2e:d4:51:91:f2:de:bd:48:e7:20:b8:62:d3:61:fa:6f:d7:
         53:25:e1:8c:0f:94:bf:d1:51:3d:4c:f9:45:a8:2c:a3:b2:4d:
         ba:43:79:27:f1:d2:a9:97:2f:58:9d:c7:8c:87:4a:3d:f0:27:
         45:0d:29:54:69:de:68:f3:ec:a9:4a:6e:a4:76:2b:e8:de:5c:
         2d:4f:49:50:b8:23:44:63:49:21:0e:3a:e9:79:69:a4:b9:2d:
         65:f2:46:a9:a9:b2:df:57:4c:04:51:97:bc:b1:59:6a:c3:37:
         f2:f5:46:a5:ec:6b:6e:43:d5:00:2b:24:db:81:36:18:fc:71:
         20:38:a0:a0:10:e1:e6:f5:2c:41:e9:90:46:28:e5:bf:24:5a:
         13:6f:1c:06:27:eb:34:a1:9d:89:63:4b:76:30:4c:b2:6d:49:
         c0:34:2a:d4:4d:93:53:7d:f8:2e:55:97:89:a2:20:76:85:24:
         20:bf:46:76:db:15:0f:58:b7:c7:cf:4d:60:e0:b6:60:c8:10:
         3b:f0:ec:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TRLKLh32+6KnfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz
MDU4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTUyOTMyNGQtN2Y2My00MWQ2LThjMGEtMzU5YjExODRmNjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+2lxamRK+21KDnI/BxGR4uN8Zbzsz/ozy/c
DynrJIA0DY6axZA64uaG7LdBd9ewlnLt9ySQ09yxdDDVcH9jSbbZayMwHjc+/JZh
tXX/aTDDhMreHRIXjc+NqAYPKmrNw9pwjC9hZ1Y6+EbLRVrkNsRRICqB5fh/8y08
O6ccoBY1azHJ5ftBPxhRk6ApiOaiZUbV7w8roNOy8g9IKUt0TpWQCAJ5yD5DW25e
MzIzcddBvyhldbZgRiatZpsJj1HFf6fCHeJtBV2WnctUBAOfjWBRWgtHNIuer+Ct
GzOK+eyj/PpjdBEt/ofWVFqO9usoIdlTOAytfll5w+fB9q43mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWm5rKnGdtwCc7tOW+w6+ykJgRxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi
N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvNjBhZGJmN2QtNDUwMy0z
MWE0LWExNTYtNmJhZTRiNjAxNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1
OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk
MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0
OGVmZDMwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk4jwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnU/LmcDgAG+S8VZr6c8CnVTDQxQ1c9IJAxxyjOMvvPR5afEQmdWAgL
/pansN42s8+dqssoNc0u1FGR8t69SOcguGLTYfpv11Ml4YwPlL/RUT1M+UWoLKOy
TbpDeSfx0qmXL1idx4yHSj3wJ0UNKVRp3mjz7KlKbqR2K+jeXC1PSVC4I0RjSSEO
Oul5aaS5LWXyRqmpst9XTARRl7yxWWrDN/L1RqXsa25D1QArJNuBNhj8cSA4oKAQ
4eb1LEHpkEYo5b8kWhNvHAYn6zShnYljS3YwTLJtScA0KtRNk1N9+C5Vl4miIHaF
JCC/RnbbFQ9Yt8fPTWDgtmDIEDvw7A8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:31:38 2025 by rpki-client