Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
File:                     e7f8b070-b54d-345a-99c3-6754564c0672.roa (raw, json)
Hash identifier:          mzt+BLtZrhv69EZG04ppMffr2VjP7ekGV1D9+PnMaJA=
Subject key identifier:   9A:81:CF:A1:BD:7F:3F:10:37:F2:37:9F:28:4E:13:BF:57:55:75:4B
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F4328584AE46121F5746F0B1A04CD3580
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     8075
IP address blocks:        67.210.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:21:f5:74:6f:0b:1a:04:cd:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=dc2167be-a802-44b5-8895-fae818c0ed88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:38:c8:6c:e8:24:6e:62:73:26:36:03:2c:
                    51:64:14:dd:71:95:7e:2a:da:12:f7:f0:ea:b3:81:
                    66:3c:0e:55:c3:83:45:01:31:e0:c2:f8:0a:d6:ae:
                    a7:33:da:fd:65:ad:e6:a6:d1:3f:81:63:4d:e5:c2:
                    ca:e1:58:93:ee:a4:92:c7:df:6e:cd:4c:39:e7:b2:
                    52:7b:c3:5f:f0:dc:20:6d:35:c8:5e:cf:b0:a0:d1:
                    c6:71:14:f9:47:de:bb:ff:bf:6f:13:27:09:21:02:
                    58:dc:8e:36:6b:ae:eb:96:e4:07:ab:c5:58:a9:3a:
                    bd:b3:c0:8a:63:24:52:c2:9b:ae:b1:ce:45:70:c4:
                    45:fe:92:22:1b:e0:a1:3e:ae:a5:6c:84:61:fa:b4:
                    63:54:64:03:51:4c:d0:73:80:8d:a2:41:05:ec:94:
                    18:6f:5f:3d:eb:c9:a9:ac:69:d8:18:6a:81:79:09:
                    7d:72:a2:6d:93:03:6c:6d:be:a1:b8:75:e1:c4:b4:
                    70:ce:97:87:c0:9f:d1:76:66:74:d1:15:37:ac:9d:
                    11:12:bf:42:50:9b:94:9c:a3:a4:e7:a9:bf:6f:a3:
                    bd:dc:6e:3d:bb:a1:f4:00:df:6f:13:9a:96:2c:f9:
                    9e:ca:46:45:74:90:38:43:4e:66:df:5e:c9:95:f9:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:81:CF:A1:BD:7F:3F:10:37:F2:37:9F:28:4E:13:BF:57:55:75:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:b3:9b:8a:61:0f:7d:e7:ad:37:4f:9c:77:e6:30:39:01:
         c3:ce:9c:22:5f:ef:12:25:fb:a7:6f:0b:06:18:5f:30:d7:dc:
         5b:3c:51:5f:b2:99:38:65:3a:a0:30:0d:f6:f7:e6:d3:a1:78:
         ce:81:af:17:c5:c6:41:31:de:7b:41:e8:6a:e9:ed:97:5b:09:
         37:23:74:7c:33:97:bb:f0:aa:ef:72:99:2b:39:3d:9b:8b:3f:
         8f:8a:91:0d:e9:89:f6:24:84:8a:03:11:64:27:fa:9d:34:dc:
         d0:c2:94:ea:c6:c8:82:a3:af:b2:ed:42:ec:a8:88:0f:34:e3:
         2e:02:2c:c8:69:81:f1:dd:37:3d:7b:66:a8:dd:9e:6b:c9:65:
         bc:aa:d6:74:e7:65:65:33:44:62:11:07:c9:b2:6b:9a:8a:6c:
         e0:ef:39:b9:8c:88:e2:7f:c4:14:eb:2e:41:1c:6b:ca:8a:26:
         f5:76:d3:b3:ff:b1:ac:bf:72:8f:91:e0:30:44:9d:cc:c9:c7:
         10:56:7b:ca:eb:04:7f:8e:61:e2:7e:28:58:0a:a9:8d:08:6d:
         05:98:f5:1a:ce:5b:49:26:78:55:82:a1:ce:74:3e:4c:e2:fb:
         bd:c6:24:4a:0f:61:41:6a:a0:d0:c2:92:46:13:b7:af:0e:17:
         84:ba:6d:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSH1dG8LGgTNNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODY2YjJkZjQtMGYwYS00Yjg0LTllYjctYzE4NTI1OGY1
Mjk0MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZGMyMTY3YmUtYTgwMi00NGI1LTg4OTUtZmFlODE4YzBlZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZU4yGzoJG5icyY2AyxRZBTdcZV+KtoS9/Dq
s4FmPA5Vw4NFATHgwvgK1q6nM9r9Za3mptE/gWNN5cLK4ViT7qSSx99uzUw557JS
e8Nf8NwgbTXIXs+woNHGcRT5R967/79vEycJIQJY3I42a67rluQHq8VYqTq9s8CK
YyRSwpuusc5FcMRF/pIiG+ChPq6lbIRh+rRjVGQDUUzQc4CNokEF7JQYb18968mp
rGnYGGqBeQl9cqJtkwNsbb6huHXhxLRwzpeHwJ/RdmZ00RU3rJ0REr9CUJuUnKOk
56m/b6O93G49u6H0AN9vE5qWLPmeykZFdJA4Q05m317JlfnzHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqBz6G9fz8QN/I3nyhOE79XVXVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NjZi
MmRmNC0wZjBhLTRiODQtOWViNy1jMTg1MjU4ZjUyOTQvZTdmOGIwNzAtYjU0ZC0z
NDVhLTk5YzMtNjc1NDU2NGMwNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODY2YjJkZjQtMGYwYS00Yjg0LTll
YjctYzE4NTI1OGY1Mjk0Lzg2NmIyZGY0LTBmMGEtNGI4NC05ZWI3LWMxODUyNThm
NTI5NC5jcmwwHwYDVR0jBBgwFoAUlXZb8dwS0UD6rVvU62UXQha+WnswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84NjZiMmRmNC0wZjBhLTRiODQtOWViNy1jMTg1
MjU4ZjUyOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9KBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEn2s5uKYQ995603T5x35jA5AcPOnCJf7xIl+6dvCwYYXzDX3Fs8UV+y
mThlOqAwDfb35tOheM6BrxfFxkEx3ntB6Grp7ZdbCTcjdHwzl7vwqu9ymSs5PZuL
P4+KkQ3pifYkhIoDEWQn+p003NDClOrGyIKjr7LtQuyoiA804y4CLMhpgfHdNz17
ZqjdnmvJZbyq1nTnZWUzRGIRB8mya5qKbODvObmMiOJ/xBTrLkEca8qKJvV207P/
say/co+R4DBEnczJxxBWe8rrBH+OYeJ+KFgKqY0IbQWY9RrOW0kmeFWCoc50Pkzi
+73GJEoPYUFqoNDCkkYTt68OF4S6bSU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:56 2025 by rpki-client