Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/66f75ba9-003e-34dc-a4bc-f550c61baac1.roa
File:                     66f75ba9-003e-34dc-a4bc-f550c61baac1.roa (raw, json)
Hash identifier:          nH8dwlwTQUFM+r2zKQmQ80QPKLBLSA0/dUsvUGgcIDU=
Subject key identifier:   A8:5C:3D:3C:15:F5:63:80:D2:23:F4:C7:14:5A:EE:9C:2F:11:3E:DF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85FA54A3AED510128424480
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/66f75ba9-003e-34dc-a4bc-f550c61baac1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     395006
IP address blocks:        208.184.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a5:4a:3a:ed:51:01:28:42:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=dcf73bea-a35b-4dcc-9d77-e39d2a2affec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:30:35:8f:f3:66:0e:d4:cc:15:46:5e:8a:
                    d1:89:03:ff:cd:2f:35:63:2d:c6:fd:fe:78:db:0d:
                    36:af:f1:36:83:8d:21:7a:2d:63:e3:ac:71:80:95:
                    86:da:22:32:8a:86:fa:ba:65:4c:63:a5:a7:ca:ea:
                    c8:a9:77:e1:b1:4e:0b:16:a2:f4:c0:bc:5f:15:54:
                    81:53:eb:2b:81:e2:c3:36:28:70:3d:8a:fa:44:53:
                    d7:b4:3f:b7:b4:5c:17:a7:fb:72:b8:ca:ed:4a:7b:
                    1e:2d:ad:6f:b5:c5:ab:52:e6:4c:28:21:99:7b:1d:
                    80:3e:04:5a:2f:00:ed:9b:08:e2:4c:e1:2d:3f:49:
                    0e:88:8e:c1:20:80:6e:a8:e9:11:ef:ad:78:bd:f2:
                    d3:f8:75:19:24:5e:d0:8f:16:4e:6b:42:76:ca:9a:
                    b7:ae:ce:49:f4:43:79:cc:91:40:41:d2:8e:a9:23:
                    43:a5:5b:75:2b:d6:b8:89:a5:c0:f4:00:39:a1:58:
                    0e:84:f2:fa:1d:c5:00:05:9f:fe:5c:c6:6b:7a:0f:
                    0c:99:f2:f4:2a:c3:78:48:a6:1d:84:2d:3b:e6:a5:
                    88:8a:8e:04:5b:ca:01:f8:8d:79:fc:4c:a9:c1:f6:
                    3c:67:6c:79:52:50:ac:a4:39:2d:95:7b:11:be:d5:
                    61:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5C:3D:3C:15:F5:63:80:D2:23:F4:C7:14:5A:EE:9C:2F:11:3E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/66f75ba9-003e-34dc-a4bc-f550c61baac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:92:67:88:87:07:aa:cf:5d:6b:76:c5:62:11:71:1d:41:dd:
         3f:53:5d:a2:3a:12:5b:6d:1d:a3:cf:06:6c:a6:3b:df:cf:be:
         c5:d6:19:83:d5:5c:f6:3a:4f:95:e4:a7:6c:63:1b:b7:f6:03:
         af:ec:5a:69:5a:42:ba:33:ee:7c:18:27:82:99:b0:e6:01:a5:
         f0:90:bb:ec:43:e2:b2:84:a4:ed:47:d6:a8:86:c3:aa:5c:27:
         6a:e2:af:b1:e1:3a:a1:7a:ab:56:a7:3e:16:d1:5b:1b:b3:01:
         32:c8:64:b1:67:f6:9b:77:c1:e2:6c:05:a9:07:08:29:41:ec:
         58:b6:d4:9a:94:39:5a:7a:8b:c7:06:38:e3:77:ee:b6:f9:9a:
         88:40:17:37:12:18:9c:fc:94:dd:15:41:17:b7:ca:49:a9:67:
         12:97:a3:90:c8:af:a8:c3:9d:a0:77:19:dc:c4:62:53:07:e6:
         96:d3:2e:2e:32:32:6e:de:00:1a:96:d2:50:6c:51:dd:de:32:
         69:70:57:07:fc:4f:d8:92:ca:ab:27:3c:fd:bb:ee:8f:ae:62:
         a2:e6:d9:04:b9:b7:d4:e9:10:27:08:37:de:6c:bb:3c:c9:79:
         e1:d1:20:44:68:5f:79:a3:3c:54:04:01:d8:5d:a2:24:7b:84:
         f3:dc:70:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6VKOu1RAShCRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZGNmNzNiZWEtYTM1Yi00ZGNjLTlkNzctZTM5ZDJhMmFmZmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBYwNY/zZg7UzBVGXorRiQP/zS81Yy3G/f54
2w02r/E2g40hei1j46xxgJWG2iIyiob6umVMY6WnyurIqXfhsU4LFqL0wLxfFVSB
U+srgeLDNihwPYr6RFPXtD+3tFwXp/tyuMrtSnseLa1vtcWrUuZMKCGZex2APgRa
LwDtmwjiTOEtP0kOiI7BIIBuqOkR7614vfLT+HUZJF7QjxZOa0J2ypq3rs5J9EN5
zJFAQdKOqSNDpVt1K9a4iaXA9AA5oVgOhPL6HcUABZ/+XMZreg8MmfL0KsN4SKYd
hC075qWIio4EW8oB+I15/EypwfY8Z2x5UlCspDktlXsRvtVhLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhcPTwV9WOA0iP0xxRa7pwvET7fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNjZmNzViYTktMDAzZS0z
NGRjLWE0YmMtZjU1MGM2MWJhYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LgVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiSZ4iHB6rPXWt2xWIRcR1B3T9TXaI6ElttHaPPBmymO9/PvsXWGYPV
XPY6T5Xkp2xjG7f2A6/sWmlaQroz7nwYJ4KZsOYBpfCQu+xD4rKEpO1H1qiGw6pc
J2rir7HhOqF6q1anPhbRWxuzATLIZLFn9pt3weJsBakHCClB7Fi21JqUOVp6i8cG
OON37rb5mohAFzcSGJz8lN0VQRe3ykmpZxKXo5DIr6jDnaB3GdzEYlMH5pbTLi4y
Mm7eABqW0lBsUd3eMmlwVwf8T9iSyqsnPP277o+uYqLm2QS5t9TpECcIN95suzzJ
eeHRIERoX3mjPFQEAdhdoiR7hPPccNM=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:17:32 2025 by rpki-client