Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4c6eedaf-1a1d-3692-9eb6-7bfe7f2ac37e.roa
File:                     4c6eedaf-1a1d-3692-9eb6-7bfe7f2ac37e.roa (raw, json)
Hash identifier:          1m/uq2lPBe6z0X1jfzfq6nJkpktxFVToODaJ5m5F/LA=
Subject key identifier:   93:54:16:E6:F3:45:33:14:F0:44:65:3F:D8:75:92:9B:FA:29:B4:41
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A8FD9634D2894B0931B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4c6eedaf-1a1d-3692-9eb6-7bfe7f2ac37e.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     19092
IP address blocks:        66.62.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8f:d9:63:4d:28:94:b0:93:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=a9a4ea3d-e070-4f54-bdc4-3f96a71bcb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:25:ae:e5:77:b9:8d:1a:80:be:9b:00:57:
                    ab:ed:bb:23:00:bd:c1:60:28:50:ae:7e:e0:2e:ad:
                    8d:34:7e:92:30:81:dc:e8:15:4f:4e:9b:38:d6:b9:
                    f6:a3:27:ac:d4:ab:d3:85:3f:ef:c6:61:b7:6c:e8:
                    a3:64:60:53:31:26:e3:e6:6c:78:09:a9:f4:c0:8b:
                    df:3e:2a:52:00:99:b0:6e:1c:bf:b1:87:49:0b:06:
                    e1:e6:d2:d9:bd:05:b5:8c:b1:d1:ef:f6:cd:ca:f1:
                    59:a5:a5:13:d4:36:cf:3a:f1:f2:46:55:ad:42:25:
                    13:e6:1c:d5:08:98:50:39:25:59:7e:36:0c:23:88:
                    ea:4b:ec:7e:42:e9:29:ca:de:67:43:d8:5b:ff:6f:
                    9d:65:3e:1e:ac:80:92:a6:cd:3a:f8:44:8e:78:7e:
                    f0:51:eb:0e:e4:cf:c7:05:c1:16:18:7a:c1:b6:97:
                    34:66:73:ad:6d:ce:02:88:7f:28:f0:f8:2f:e6:6c:
                    8c:66:a2:1f:62:4d:d8:c3:01:ea:d4:9f:04:7f:8c:
                    13:05:3b:11:ce:81:fa:79:26:f0:f2:cb:80:41:ac:
                    90:64:3d:16:01:ab:f8:62:a8:d5:58:84:a4:37:b6:
                    29:a3:a3:59:1c:ca:38:7b:a9:14:85:e8:ee:3d:40:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:16:E6:F3:45:33:14:F0:44:65:3F:D8:75:92:9B:FA:29:B4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4c6eedaf-1a1d-3692-9eb6-7bfe7f2ac37e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:71:8f:92:9a:46:12:c6:fe:21:68:e8:26:e2:8e:26:31:32:
         e4:4b:49:72:be:90:dd:70:0a:ee:44:b4:d8:30:b4:98:65:51:
         70:e5:76:fb:cb:5e:7d:61:f0:11:7f:7d:a9:64:20:0a:ff:21:
         6c:f5:f7:f4:7c:34:b7:73:88:90:37:ac:90:75:6f:10:2a:06:
         4c:26:76:19:0e:43:79:8a:e2:be:17:cf:09:72:81:ba:7d:33:
         7c:3b:35:8f:0e:9f:06:ed:18:c0:ad:14:28:75:09:02:75:92:
         4b:f8:96:47:3a:95:b9:17:b8:08:c7:18:bf:97:22:86:16:63:
         2b:05:a7:4f:5e:8c:b2:51:53:88:44:a7:0a:69:33:cd:85:ed:
         32:a1:94:e2:dd:66:9f:4d:6c:21:88:c9:49:b5:db:34:62:d6:
         f9:8b:f6:9e:de:6a:ad:22:0e:48:f9:a6:69:58:5b:69:0e:b2:
         62:4d:b7:71:b1:8f:a2:fc:e3:24:01:1b:fa:f5:ef:30:9e:8b:
         75:2f:40:88:cf:ec:58:0e:e5:51:36:7e:12:94:0f:b2:23:e4:
         78:70:1d:83:cb:5f:15:ee:d4:d4:5b:35:8e:a4:7d:48:6b:7c:
         e2:d0:97:f0:f2:ca:a1:30:6e:20:79:48:6f:c4:eb:bc:af:8e:
         65:3d:16:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eo/ZY00olLCTG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
YTlhNGVhM2QtZTA3MC00ZjU0LWJkYzQtM2Y5NmE3MWJjYjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1AlruV3uY0agL6bAFer7bsjAL3BYChQrn7g
Lq2NNH6SMIHc6BVPTps41rn2oyes1KvThT/vxmG3bOijZGBTMSbj5mx4Can0wIvf
PipSAJmwbhy/sYdJCwbh5tLZvQW1jLHR7/bNyvFZpaUT1DbPOvHyRlWtQiUT5hzV
CJhQOSVZfjYMI4jqS+x+Qukpyt5nQ9hb/2+dZT4erICSps06+ESOeH7wUesO5M/H
BcEWGHrBtpc0ZnOtbc4CiH8o8Pgv5myMZqIfYk3YwwHq1J8Ef4wTBTsRzoH6eSbw
8suAQayQZD0WAav4YqjVWISkN7Ypo6NZHMo4e6kUhejuPUC/hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNUFubzRTMU8ERlP9h1kpv6KbRBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNGM2ZWVkYWYtMWExZC0z
NjkyLTllYjYtN2JmZTdmMmFjMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQj6IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMBxj5KaRhLG/iFo6CbijiYxMuRLSXK+kN1wCu5EtNgwtJhlUXDldvvL
Xn1h8BF/falkIAr/IWz19/R8NLdziJA3rJB1bxAqBkwmdhkOQ3mK4r4Xzwlygbp9
M3w7NY8OnwbtGMCtFCh1CQJ1kkv4lkc6lbkXuAjHGL+XIoYWYysFp09ejLJRU4hE
pwppM82F7TKhlOLdZp9NbCGIyUm12zRi1vmL9p7eaq0iDkj5pmlYW2kOsmJNt3Gx
j6L84yQBG/r17zCei3UvQIjP7FgO5VE2fhKUD7Ij5HhwHYPLXxXu1NRbNY6kfUhr
fOLQl/DyyqEwbiB5SG/E67yvjmU9FiM=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:52:19 2025 by rpki-client