Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b496f08a-b066-3f9f-9cdc-9338c34ceaf6.roa
File:                     b496f08a-b066-3f9f-9cdc-9338c34ceaf6.roa (raw, json)
Hash identifier:          a5yxlPgiZxPdru8BBATIcNCAEJfxYX8q4pGnbec30Dw=
Subject key identifier:   76:FB:A8:3A:E8:BC:E4:25:47:1A:06:E2:05:30:49:ED:39:18:5F:F8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A86E442284B77981BFE30
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b496f08a-b066-3f9f-9cdc-9338c34ceaf6.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     21632
IP address blocks:        66.62.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:86:e4:42:28:4b:77:98:1b:fe:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=afc2b195-fce9-4fce-add3-a94b12d43e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:be:7e:60:ae:48:ae:1d:e8:2d:05:f3:84:
                    cb:d2:3e:0f:0a:32:9e:d4:39:d4:f1:0b:83:3a:75:
                    9b:15:6d:6d:f1:9d:6e:52:b4:3e:aa:ea:72:9e:97:
                    57:d4:b4:e8:fd:c9:ba:a6:0f:92:7d:76:d5:92:90:
                    3a:da:ee:e7:16:fb:79:32:0c:ad:ef:85:2c:60:d1:
                    dd:a6:cb:62:6e:d7:79:21:be:04:fc:2a:08:35:10:
                    34:95:f2:e9:86:19:b8:02:b2:b9:a4:9f:7e:18:81:
                    0d:50:cf:dd:88:6b:5a:00:e6:e2:8b:f6:f9:05:36:
                    51:64:69:36:16:46:4d:21:89:ff:79:f0:44:f2:70:
                    cf:38:89:ae:0a:4a:4f:09:bb:dc:f2:28:ba:bb:c3:
                    ad:66:51:17:11:3c:68:48:df:a8:a4:c0:f0:56:03:
                    3c:42:29:3b:d5:d9:ad:6a:7e:4a:b4:bc:8e:f0:71:
                    5b:af:bd:18:b6:bd:21:12:90:52:93:8a:71:e6:c0:
                    77:18:a5:22:55:b5:a5:dd:23:19:94:ce:14:27:41:
                    05:46:1c:00:51:a6:dc:a5:ae:b0:1e:ac:46:c3:02:
                    b1:92:34:03:b8:09:df:46:71:83:a4:02:b9:c7:c2:
                    69:55:bb:2c:eb:22:de:ef:5b:cb:ba:9d:74:71:54:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:A8:3A:E8:BC:E4:25:47:1A:06:E2:05:30:49:ED:39:18:5F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b496f08a-b066-3f9f-9cdc-9338c34ceaf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:b4:3e:85:dd:81:78:3d:fe:34:e9:a7:31:53:73:ec:8d:
         d3:bb:5f:f8:7c:82:8b:00:18:5e:8e:c6:69:77:4c:e7:74:25:
         3f:c9:01:24:12:ea:0f:90:2e:88:55:b0:f7:ab:7d:3f:60:37:
         ad:68:0c:ba:9b:87:e7:bf:5d:42:70:9c:3d:f0:e5:f9:c1:16:
         24:9a:20:ef:b5:83:41:07:eb:17:84:8e:47:85:c6:5d:4d:70:
         85:c0:15:3a:b2:47:5c:93:f8:8a:dd:14:02:1e:aa:70:44:5f:
         4a:15:41:b5:4f:54:27:5b:a9:16:96:4b:27:63:c4:ed:30:b6:
         d2:8c:ce:ec:31:79:df:29:a6:14:d8:a7:c7:bd:ad:e1:21:1c:
         30:d7:26:db:fb:98:12:30:64:0e:a9:2d:17:9f:77:c9:7e:d5:
         e6:0f:37:df:d3:f8:5f:2d:42:cf:20:c1:74:6e:b4:98:ad:40:
         9a:e9:c9:a4:5c:85:b4:17:b8:dc:41:b0:ae:d2:3d:38:89:80:
         65:c9:76:a2:77:79:90:29:87:0b:c8:09:62:de:a0:78:22:a7:
         d2:90:c8:1d:ad:38:16:e7:33:77:32:54:25:bb:07:79:7b:de:
         85:9c:f8:b9:3b:c5:a5:b9:d2:0f:2a:90:e8:33:10:59:4f:75:
         f7:89:16:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eobkQihLd5gb/jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
YWZjMmIxOTUtZmNlOS00ZmNlLWFkZDMtYTk0YjEyZDQzZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN++fmCuSK4d6C0F84TL0j4PCjKe1DnU8QuD
OnWbFW1t8Z1uUrQ+qupynpdX1LTo/cm6pg+SfXbVkpA62u7nFvt5Mgyt74UsYNHd
pstibtd5Ib4E/CoINRA0lfLphhm4ArK5pJ9+GIENUM/diGtaAObii/b5BTZRZGk2
FkZNIYn/efBE8nDPOImuCkpPCbvc8ii6u8OtZlEXETxoSN+opMDwVgM8Qik71dmt
an5KtLyO8HFbr70Ytr0hEpBSk4px5sB3GKUiVbWl3SMZlM4UJ0EFRhwAUabcpa6w
HqxGwwKxkjQDuAnfRnGDpAK5x8JpVbss6yLe71vLup10cVTqlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHb7qDrovOQlRxoG4gUwSe05GF/4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYjQ5NmYwOGEtYjA2Ni0z
ZjlmLTljZGMtOTMzOGMzNGNlYWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj5dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABd6tD6F3YF4Pf406acxU3PsjdO7X/h8gosAGF6Oxml3TOd0JT/JASQS
6g+QLohVsPerfT9gN61oDLqbh+e/XUJwnD3w5fnBFiSaIO+1g0EH6xeEjkeFxl1N
cIXAFTqyR1yT+IrdFAIeqnBEX0oVQbVPVCdbqRaWSydjxO0wttKMzuwxed8pphTY
p8e9reEhHDDXJtv7mBIwZA6pLRefd8l+1eYPN9/T+F8tQs8gwXRutJitQJrpyaRc
hbQXuNxBsK7SPTiJgGXJdqJ3eZAphwvICWLeoHgip9KQyB2tOBbnM3cyVCW7B3l7
3oWc+Lk7xaW50g8qkOgzEFlPdfeJFjg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:30:39 2025 by rpki-client