Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8bc1641a-4fd2-36b9-ae6c-108388ddca55.roa
File:                     8bc1641a-4fd2-36b9-ae6c-108388ddca55.roa (raw, json)
Hash identifier:          z+cQei7CQSiGUSKSs+Vtbgx3YY9qCcc0UzIRbJHeL/I=
Subject key identifier:   44:1D:3A:FA:BF:EF:57:9D:CF:7E:45:BF:6B:CD:ED:20:BC:C8:AD:87
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A869157B33AB8825F7080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8bc1641a-4fd2-36b9-ae6c-108388ddca55.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     19092
IP address blocks:        66.62.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:86:91:57:b3:3a:b8:82:5f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=97db5283-c600-4203-90f2-e4ab2f902e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:1f:0d:44:b7:a0:5c:5d:e1:f5:79:75:ee:
                    b8:81:bd:3b:23:ac:b0:89:a1:3f:99:05:08:09:a3:
                    33:10:9e:5d:6e:0f:07:87:c9:8b:c5:d3:44:ec:e8:
                    a8:5b:51:1a:32:6e:07:43:d1:48:97:16:d2:f8:fa:
                    6b:b9:ff:7c:55:dd:c2:7a:dc:05:93:d8:94:36:16:
                    06:9a:22:39:12:19:c0:20:6f:ae:29:dd:9d:bd:30:
                    65:39:67:4a:30:17:30:36:f7:a5:f4:27:26:4b:77:
                    7f:3f:21:08:18:64:21:f2:f3:03:65:c5:e2:5e:3d:
                    44:1d:24:3f:0c:21:c3:0a:d6:39:04:73:5b:31:e9:
                    91:92:fc:11:3c:62:7a:95:72:30:77:54:0d:af:01:
                    4b:9b:49:4d:90:40:c4:a5:b0:d7:67:41:b6:99:4c:
                    61:a9:3e:e2:29:f4:8c:a8:c8:44:60:d0:b3:d4:29:
                    62:ac:72:34:64:d8:63:6e:2b:5c:c2:76:b3:9f:d7:
                    db:9f:7f:e3:d9:ac:d7:42:f5:10:37:2f:c1:50:bb:
                    4e:b3:95:00:44:4a:3c:ce:af:3a:5e:63:3a:09:e7:
                    ac:aa:0b:b1:0c:57:a1:dd:41:1e:3c:1d:0d:cd:ea:
                    eb:ee:fa:bc:77:ea:0c:32:aa:77:dc:f4:0a:20:20:
                    05:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:3A:FA:BF:EF:57:9D:CF:7E:45:BF:6B:CD:ED:20:BC:C8:AD:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8bc1641a-4fd2-36b9-ae6c-108388ddca55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:02:94:48:8e:90:c6:d0:75:b7:64:a6:0e:4f:74:b8:8f:
         fa:9e:00:5a:00:99:b6:ca:ed:f6:ee:93:c9:06:b8:2b:3e:c3:
         a6:4a:7e:5a:e0:b1:e0:73:05:24:9b:40:31:0d:42:b3:fe:57:
         a5:c2:7e:e5:62:92:96:3e:84:50:be:fb:5c:bf:2e:b9:22:85:
         1e:23:99:17:ca:44:15:8f:5c:58:35:49:41:5f:04:4d:37:a2:
         cc:5f:f2:ca:88:da:79:a9:35:b8:4f:ec:bb:78:48:48:ce:a9:
         6c:7d:ea:9a:c7:a3:93:28:87:85:2b:8a:da:8c:f3:24:7a:a8:
         d3:d6:04:5e:13:c0:38:74:c4:56:fd:17:93:90:ea:d8:0d:3c:
         52:76:f7:11:5b:15:2c:66:21:1c:9c:76:53:a4:a7:0e:26:ec:
         3c:75:d2:38:4c:1e:3e:89:81:d4:45:98:b6:12:02:fe:15:c0:
         53:0e:96:a7:14:9f:40:62:fb:11:7c:36:f7:92:ac:dc:58:d5:
         5e:6c:52:b1:d4:cc:5d:a6:49:cb:f7:e9:1a:5e:7d:15:83:9e:
         1f:f1:d0:7f:df:e3:ab:36:69:e6:dd:98:de:8e:1a:dd:f8:e5:
         1f:ba:0e:e4:06:16:9d:00:f8:52:2a:39:57:99:b5:6e:88:3c:
         85:6c:d4:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoaRV7M6uIJfcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
OTdkYjUyODMtYzYwMC00MjAzLTkwZjItZTRhYjJmOTAyZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV8fDUS3oFxd4fV5de64gb07I6ywiaE/mQUI
CaMzEJ5dbg8Hh8mLxdNE7OioW1EaMm4HQ9FIlxbS+Ppruf98Vd3CetwFk9iUNhYG
miI5EhnAIG+uKd2dvTBlOWdKMBcwNvel9CcmS3d/PyEIGGQh8vMDZcXiXj1EHSQ/
DCHDCtY5BHNbMemRkvwRPGJ6lXIwd1QNrwFLm0lNkEDEpbDXZ0G2mUxhqT7iKfSM
qMhEYNCz1ClirHI0ZNhjbitcwnazn9fbn3/j2azXQvUQNy/BULtOs5UAREo8zq86
XmM6CeesqguxDFeh3UEePB0Nzerr7vq8d+oMMqp33PQKICAFfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQdOvq/71edz35Fv2vN7SC8yK2HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOGJjMTY0MWEtNGZkMi0z
NmI5LWFlNmMtMTA4Mzg4ZGRjYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQj4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRuApRIjpDG0HW3ZKYOT3S4j/qeAFoAmbbK7fbuk8kGuCs+w6ZKflrg
seBzBSSbQDENQrP+V6XCfuVikpY+hFC++1y/LrkihR4jmRfKRBWPXFg1SUFfBE03
osxf8sqI2nmpNbhP7Lt4SEjOqWx96prHo5Moh4UritqM8yR6qNPWBF4TwDh0xFb9
F5OQ6tgNPFJ29xFbFSxmIRycdlOkpw4m7Dx10jhMHj6JgdRFmLYSAv4VwFMOlqcU
n0Bi+xF8NveSrNxY1V5sUrHUzF2mScv36RpefRWDnh/x0H/f46s2aebdmN6OGt34
5R+6DuQGFp0A+FIqOVeZtW6IPIVs1ME=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:17:23 2025 by rpki-client