Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa
File:                     f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (raw, json)
Hash identifier:          fQEjXuIrmLxwPLiglcY3Lv1L8IFbKLenLawAg0CiMTQ=
Subject key identifier:   B5:E5:3D:0B:EF:20:56:26:DF:76:29:53:49:2F:93:DB:A9:7F:73:90
Certificate issuer:       /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial:       010D0C9F43285849DB2A282FEFB09E9656BE1480
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     54309
IP address blocks:        66.33.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:28:2f:ef:b0:9e:96:56:be:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=7cbe643c-c3af-48ee-aa6f-4ad111d00829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:82:c7:b3:e5:d1:a2:62:ba:de:3f:bb:6e:
                    85:11:97:71:dd:64:2f:46:3e:57:7e:38:79:59:ed:
                    39:c0:2f:16:8a:79:c0:cf:9c:59:bf:4f:6b:dd:e3:
                    c6:ed:a9:f5:63:11:ba:9b:0d:1f:c4:37:4c:79:13:
                    9c:fa:2a:d1:c7:00:47:00:e0:d8:d5:e5:c1:23:5a:
                    a8:10:9c:01:4b:df:e2:45:41:28:7e:a0:c0:33:cd:
                    65:1b:89:b5:84:c5:1e:02:37:63:a7:16:ad:9c:7b:
                    cd:21:64:37:09:52:37:7c:68:d9:61:32:9f:58:f0:
                    d6:78:6d:43:f8:19:ba:4e:2d:79:20:20:28:29:16:
                    81:7a:6c:47:0c:3f:ce:6f:9c:99:24:b9:dc:ad:73:
                    3e:10:01:11:ea:a3:d2:b8:a6:eb:62:ba:25:26:d7:
                    8e:a6:00:66:5a:79:b5:2e:ac:98:0e:41:24:5e:fa:
                    93:b1:31:79:81:ba:b9:43:02:55:36:f9:f1:9b:38:
                    90:45:63:bd:40:e4:00:23:fa:15:a6:97:7e:d7:a5:
                    0c:78:dc:40:81:2d:ac:9f:8c:b5:ca:7f:e4:56:31:
                    aa:0f:dd:88:a9:9d:0f:67:82:d9:16:61:cd:5e:e9:
                    79:06:02:3d:05:9e:7e:b9:0a:d7:bb:99:d3:6f:be:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E5:3D:0B:EF:20:56:26:DF:76:29:53:49:2F:93:DB:A9:7F:73:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl

            X509v3 Authority Key Identifier:
                keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fa:af:71:4d:c8:d3:29:66:84:25:94:12:38:15:c0:e3:25:
         1a:8d:10:07:0c:de:4f:a6:84:77:dc:81:be:f5:22:f8:a4:8d:
         c2:83:8b:0e:f8:31:4b:46:0a:63:3e:8c:a0:cc:c8:3a:ee:b6:
         ca:b5:67:2b:e8:09:b3:e9:e3:03:d5:2f:c0:17:3d:4b:c1:3d:
         05:7e:0b:4f:95:29:2d:1f:c4:99:eb:81:e8:49:b2:d3:0b:e9:
         b8:7f:78:b9:3c:98:38:ec:53:2b:58:2d:c5:a8:25:9a:a4:63:
         2c:1d:c7:27:72:f3:11:b6:a8:93:69:eb:77:53:8d:b7:86:6a:
         5b:75:75:20:23:63:35:b6:9d:5b:14:02:67:7d:61:9a:56:46:
         f0:df:0c:e3:08:ff:9d:df:08:63:f8:a5:e3:df:aa:ab:a0:44:
         9d:15:5a:b0:65:f8:d6:7b:76:cd:8a:e8:fc:c7:a7:75:7e:51:
         52:76:a3:d6:53:9d:b3:f2:4a:48:49:5f:53:df:af:ea:25:18:
         ab:e0:32:30:34:ae:cc:35:05:48:d4:b8:db:3d:b9:82:7e:68:
         ac:ce:5c:ef:b1:6c:83:81:cf:75:a8:18:50:e1:a8:3b:f8:a5:
         b7:47:e2:49:58:11:ec:d1:89:91:9d:2e:8c:0b:c1:59:8d:1c:
         7c:37:1e:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKigv77Cella+FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm
MDkxMB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk
N2NiZTY0M2MtYzNhZi00OGVlLWFhNmYtNGFkMTExZDAwODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDmCx7Pl0aJiut4/u26FEZdx3WQvRj5Xfjh5
We05wC8WinnAz5xZv09r3ePG7an1YxG6mw0fxDdMeROc+irRxwBHAODY1eXBI1qo
EJwBS9/iRUEofqDAM81lG4m1hMUeAjdjpxatnHvNIWQ3CVI3fGjZYTKfWPDWeG1D
+Bm6Ti15ICAoKRaBemxHDD/Ob5yZJLncrXM+EAER6qPSuKbrYrolJteOpgBmWnm1
LqyYDkEkXvqTsTF5gbq5QwJVNvnxmziQRWO9QOQAI/oVppd+16UMeNxAgS2sn4y1
yn/kVjGqD92IqZ0PZ4LZFmHNXul5BgI9BZ5+uQrXu5nTb76ECwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXlPQvvIFYm33YpU0kvk9upf3OQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5
ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZjVhOGZjYzMtYmM3Zi0z
NjhmLWI1YTgtMDVjMWM5MjhhY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm
NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5
ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk
MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADH6r3FNyNMpZoQllBI4FcDjJRqNEAcM3k+mhHfcgb71IvikjcKDiw74
MUtGCmM+jKDMyDrutsq1ZyvoCbPp4wPVL8AXPUvBPQV+C0+VKS0fxJnrgehJstML
6bh/eLk8mDjsUytYLcWoJZqkYywdxydy8xG2qJNp63dTjbeGalt1dSAjYzW2nVsU
Amd9YZpWRvDfDOMI/53fCGP4pePfqqugRJ0VWrBl+NZ7ds2K6PzHp3V+UVJ2o9ZT
nbPySkhJX1Pfr+olGKvgMjA0rsw1BUjUuNs9uYJ+aKzOXO+xbIOBz3WoGFDhqDv4
pbdH4klYEezRiZGdLowLwVmNHHw3Hp0=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:31:52 2025 by rpki-client