Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa
File:                     82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa (raw, json)
Hash identifier:          OuZkwuJyswpvcWxPLg6GeavqDe+WPT8La1wrGkmMvQc=
Subject key identifier:   36:3A:50:CB:7D:10:83:83:50:AD:AC:09:15:EA:9A:52:F7:05:38:83
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AF0F142EDA090FFE9C03A3040
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     19551
IP address blocks:        66.206.199.0/24 maxlen: 24
                          66.206.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:42:ed:a0:90:ff:e9:c0:3a:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=a6a89771-b77d-449f-be18-2075851f2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:27:b2:79:fb:9a:cb:59:13:81:d2:7b:7c:
                    d3:e6:4a:1b:d8:15:51:08:58:bd:6d:7c:89:e3:83:
                    19:c6:49:e2:c1:c8:67:18:5d:27:62:d4:fe:90:98:
                    b9:b9:33:a1:5f:c4:23:2b:6b:e7:88:c6:85:35:9d:
                    ac:80:f7:e0:6d:31:71:0e:e7:2a:03:db:fd:2f:ab:
                    9f:d7:f8:e9:75:12:60:f9:48:81:df:c1:96:7a:08:
                    b4:a2:c6:84:25:10:fa:de:6e:b9:ef:31:c0:c5:a0:
                    a7:fa:01:2a:a8:81:d9:c1:2b:dc:ed:f9:8c:fa:10:
                    fb:26:e4:74:a0:3f:eb:e2:29:f1:18:63:47:89:5f:
                    45:62:95:06:73:0e:77:ff:e4:4f:ba:02:aa:4e:3f:
                    17:25:b9:55:02:27:a7:a7:c8:62:e7:c0:17:03:be:
                    62:29:36:62:fb:5d:f2:ac:ba:6b:f3:6a:86:a9:9b:
                    25:21:08:b1:c2:d0:57:b8:1e:08:07:00:09:3c:40:
                    ce:80:90:0d:77:8c:fc:3f:4e:db:bd:30:30:d6:65:
                    e1:be:1f:96:eb:3b:8c:39:67:45:a6:ae:f3:d3:97:
                    92:eb:89:aa:1e:c6:a6:14:85:9e:13:d3:6c:84:ae:
                    72:ea:2c:15:67:5b:06:23:76:5c:bd:72:4b:8e:15:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:50:CB:7D:10:83:83:50:AD:AC:09:15:EA:9A:52:F7:05:38:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/82ba85af-c651-3d08-b75e-2ec240f0f1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.199.0/24
                  66.206.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:4d:33:1e:1a:35:93:f6:78:d2:ec:ab:2a:cb:d2:89:94:
         59:c6:2f:b8:8b:3b:03:24:7c:a9:13:6d:bd:e2:27:ef:5f:50:
         ce:73:b9:c1:78:bc:8f:31:79:50:ff:0b:69:6b:af:dd:67:06:
         c1:ce:02:ef:b9:09:62:c1:a1:2d:a7:1b:5b:14:e8:10:12:d4:
         1f:b5:88:7b:47:6e:68:ee:14:7c:91:93:d1:93:46:62:09:25:
         44:c9:b7:c7:e2:42:2d:ee:72:4b:7f:23:bd:8d:ed:bb:2e:f5:
         f8:c6:9c:76:d8:e9:70:24:8c:f9:1f:a3:0f:f1:00:ae:3b:12:
         6a:8e:f9:06:b7:e0:15:be:88:07:c8:46:6b:7c:74:2c:fc:51:
         03:9f:8f:c0:13:4c:a5:80:8e:45:19:13:02:55:c5:cb:6f:dc:
         98:91:53:81:f4:86:63:1d:69:60:26:7b:0c:0f:a6:7e:d7:81:
         6f:b2:7e:69:5b:46:27:86:1b:28:fd:41:37:8e:e1:40:30:9c:
         02:77:b8:c6:d7:d9:6a:61:18:17:09:cb:cb:b5:83:12:73:ea:
         5e:3d:60:25:54:b6:78:82:01:bc:22:8a:3b:87:21:55:46:07:
         84:c9:a4:26:8a:30:92:12:c4:38:97:ea:cf:7e:71:7d:58:75:
         09:4a:71:9b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErw8ULtoJD/6cA6MEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
YTZhODk3NzEtYjc3ZC00NDlmLWJlMTgtMjA3NTg1MWYyMTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS8nsnn7mstZE4HSe3zT5kob2BVRCFi9bXyJ
44MZxkniwchnGF0nYtT+kJi5uTOhX8QjK2vniMaFNZ2sgPfgbTFxDucqA9v9L6uf
1/jpdRJg+UiB38GWegi0osaEJRD63m657zHAxaCn+gEqqIHZwSvc7fmM+hD7JuR0
oD/r4inxGGNHiV9FYpUGcw53/+RPugKqTj8XJblVAienp8hi58AXA75iKTZi+13y
rLpr82qGqZslIQixwtBXuB4IBwAJPEDOgJANd4z8P07bvTAw1mXhvh+W6zuMOWdF
pq7z05eS64mqHsamFIWeE9NshK5y6iwVZ1sGI3ZcvXJLjhWAfwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDY6UMt9EIODUK2sCRXqmlL3BTiDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvODJiYTg1YWYtYzY1MS0z
ZDA4LWI3NWUtMmVjMjQwZjBmMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQs7HAwQA
Qs7JMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHqqTTMeGjWT9njS7Ksqy9KJlFnGL7iLOwMkfKkTbb3iJ+9f
UM5zucF4vI8xeVD/C2lrr91nBsHOAu+5CWLBoS2nG1sU6BAS1B+1iHtHbmjuFHyR
k9GTRmIJJUTJt8fiQi3uckt/I72N7bsu9fjGnHbY6XAkjPkfow/xAK47EmqO+Qa3
4BW+iAfIRmt8dCz8UQOfj8ATTKWAjkUZEwJVxctv3JiRU4H0hmMdaWAmewwPpn7X
gW+yfmlbRieGGyj9QTeO4UAwnAJ3uMbX2WphGBcJy8u1gxJz6l49YCVUtniCAbwi
ijuHIVVGB4TJpCaKMJISxDiX6s9+cX1YdQlKcZs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:41 2025 by rpki-client