Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
File:                     0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json)
Hash identifier:          ahxhpM5WjmOZVtRg+99dv18MYOjwWhtZKCZTJOYBmqc=
Subject key identifier:   21:F0:22:92:C8:AC:BE:48:2B:21:22:03:C8:31:D8:9F:6F:FF:5E:EC
Certificate issuer:       /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial:       010D0C9F4328584A4F05D0BEF0E1B079AAC16140
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     25661
IP address blocks:        199.119.140.0/22 maxlen: 24
                          207.167.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d0:be:f0:e1:b0:79:aa:c1:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=feb29f8e-a499-4e92-9c6e-020cb0cd70e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:a0:18:ba:27:56:59:b7:84:bc:16:81:c3:
                    46:4b:50:3e:46:4d:18:78:4b:fa:1d:26:36:3e:98:
                    62:cd:19:a6:57:02:42:77:67:3e:85:ec:9e:35:11:
                    45:0c:70:37:07:bb:59:94:db:c8:5e:90:62:d9:90:
                    c8:9b:eb:17:c3:70:b8:50:ee:60:a0:d7:27:d5:84:
                    70:c6:41:cb:df:18:2d:9b:bb:23:91:52:c3:e2:85:
                    13:35:b9:10:d8:42:ef:69:3a:b6:be:23:d0:26:82:
                    de:36:11:a3:41:7c:df:a6:f1:6c:cc:5c:1b:a5:a6:
                    2e:5e:25:65:13:4a:dd:8b:ab:65:0a:cd:98:f0:8b:
                    0a:b2:2a:2c:0a:6d:c9:ba:c9:9b:9b:6b:04:17:3a:
                    33:35:e4:5c:51:2b:7a:d7:a8:96:29:6e:a5:b7:9b:
                    40:5b:12:4e:3c:47:e5:c0:76:7b:c3:7d:1c:da:8c:
                    19:28:bb:96:db:11:2d:55:eb:76:f9:d5:96:80:6d:
                    c9:ae:9f:d2:16:94:fd:55:30:f5:eb:a4:96:73:d3:
                    f7:49:5d:87:a3:07:e4:49:f8:89:ee:01:47:20:1d:
                    0b:4b:5d:1e:bd:58:16:5f:e0:f3:92:ed:e3:68:70:
                    8a:0a:a7:e8:72:da:d7:6a:27:88:d9:e0:1f:c8:fd:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F0:22:92:C8:AC:BE:48:2B:21:22:03:C8:31:D8:9F:6F:FF:5E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.140.0/22
                  207.167.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:64:01:56:b6:ad:de:77:b5:53:dc:ef:c8:4b:f3:df:60:0c:
         a7:05:66:22:8e:3d:c2:80:e0:fb:5d:72:ac:ad:2b:9b:8a:d6:
         f1:f8:e1:a2:fc:e8:fc:8e:07:c6:64:81:04:4f:9f:c1:cc:bc:
         7a:a2:e1:cd:c6:dc:66:51:5d:3c:42:40:fc:cf:99:d6:80:1c:
         b4:09:b0:9e:aa:04:45:f6:0d:1e:9b:8f:ea:2e:66:60:24:81:
         a7:80:f3:4a:a5:73:83:5b:52:c0:f4:c4:d4:b9:86:3e:be:cc:
         c3:d0:78:45:89:01:aa:62:6b:fe:fd:7e:b0:42:9e:13:7e:f3:
         21:27:ed:be:9f:8b:13:f3:84:b3:30:4b:57:bf:6f:2b:2b:16:
         59:de:18:8c:85:8e:f9:37:12:f1:37:70:f8:82:c5:40:4e:60:
         72:0d:34:ed:13:7e:1d:a8:3b:63:d9:e7:aa:2a:4f:3c:ed:72:
         9a:dd:2e:09:9b:90:4e:b4:5e:b6:73:a3:e6:c2:23:9b:ed:b4:
         f6:17:7c:4c:d2:0f:5b:ca:c8:ba:26:7d:1c:42:40:0f:19:a1:
         e6:ba:e2:14:2a:f5:3b:98:67:35:cc:df:d2:fe:33:c6:61:08:
         6d:1e:05:6b:31:19:b4:59:ca:90:f6:78:47:01:e8:83:39:f9:
         40:e8:f8:5f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpPBdC+8OGwearBYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI2NjZiYTctYTIxNS00ZjA4LTgyMDQtYzViMTY4YjMz
NjBjMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZmViMjlmOGUtYTQ5OS00ZTkyLTljNmUtMDIwY2IwY2Q3MGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq+gGLonVlm3hLwWgcNGS1A+Rk0YeEv6HSY2
PphizRmmVwJCd2c+heyeNRFFDHA3B7tZlNvIXpBi2ZDIm+sXw3C4UO5goNcn1YRw
xkHL3xgtm7sjkVLD4oUTNbkQ2ELvaTq2viPQJoLeNhGjQXzfpvFszFwbpaYuXiVl
E0rdi6tlCs2Y8IsKsiosCm3Jusmbm2sEFzozNeRcUSt616iWKW6lt5tAWxJOPEfl
wHZ7w30c2owZKLuW2xEtVet2+dWWgG3Jrp/SFpT9VTD166SWc9P3SV2HowfkSfiJ
7gFHIB0LS10evVgWX+Dzku3jaHCKCqfoctrXaieI2eAfyP0LsQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCHwIpLIrL5IKyEiA8gx2J9v/17sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYjY2
NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIxNjhiMzM2MGMvMGU4NmRkY2EtZTgwMy0z
NDlmLTllMWUtZDU1NjA1OTZmNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmI2NjZiYTctYTIxNS00ZjA4LTgy
MDQtYzViMTY4YjMzNjBjLzJiNjY2YmE3LWEyMTUtNGYwOC04MjA0LWM1YjE2OGIz
MzYwYy5jcmwwHwYDVR0jBBgwFoAUrMOhT+x9JgaLiuSTjSvGRetwf0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYjY2NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIx
NjhiMzM2MGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx3eMAwQA
z6d8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAlkAVa2rd53tVPc78hL899gDKcFZiKOPcKA4PtdcqytK5uK
1vH44aL86PyOB8ZkgQRPn8HMvHqi4c3G3GZRXTxCQPzPmdaAHLQJsJ6qBEX2DR6b
j+ouZmAkgaeA80qlc4NbUsD0xNS5hj6+zMPQeEWJAapia/79frBCnhN+8yEn7b6f
ixPzhLMwS1e/bysrFlneGIyFjvk3EvE3cPiCxUBOYHINNO0Tfh2oO2PZ56oqTzzt
cprdLgmbkE60XrZzo+bCI5vttPYXfEzSD1vKyLomfRxCQA8Zoea64hQq9TuYZzXM
39L+M8ZhCG0eBWsxGbRZypD2eEcB6IM5+UDo+F8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:01:59 2025 by rpki-client