Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
File:                     ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa (raw, json)
Hash identifier:          0kNm15fVsseYXrGxbP5CvCSJgSZoMUKXkAp3gB0OAi8=
Subject key identifier:   25:5C:A6:AA:8D:D9:52:83:21:E6:C2:C1:B3:0B:6D:46:7D:B8:7E:51
Certificate issuer:       /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial:       010D0C9F43285849B9AA08B358E30C0AAF548280
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     21723
IP address blocks:        66.163.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:08:b3:58:e3:0c:0a:af:54:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=0c4a63a1-ba75-421e-a4a0-29ee1dd54f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:91:89:e5:0a:ac:9d:12:40:46:56:55:c5:
                    ec:5a:c9:e8:2d:42:35:39:66:23:92:4d:5e:94:96:
                    de:b3:dc:f5:31:83:9c:94:08:4d:96:5d:c7:a2:5f:
                    bb:22:e1:79:05:fb:a9:79:5b:da:49:e2:62:37:5e:
                    f2:05:3e:83:17:be:2f:00:a2:04:7e:a8:15:a4:ea:
                    56:f0:01:57:84:31:f0:61:4f:be:bc:84:d3:b4:87:
                    95:f7:0f:e0:32:26:7e:f3:86:14:66:f4:68:c7:a4:
                    ba:60:67:34:6e:6c:09:85:9a:f9:81:fa:42:77:42:
                    1e:34:25:9c:45:ad:ac:50:0d:86:d7:1a:75:f5:21:
                    ac:3f:60:41:41:97:c0:80:00:0b:bc:1e:54:14:e9:
                    53:7e:eb:78:88:d0:70:03:a7:14:c3:77:51:9a:7f:
                    d8:b9:c1:45:d7:a4:68:74:2d:bf:d3:1f:7e:54:12:
                    17:2d:75:0a:22:62:0f:b9:5c:78:3e:94:10:ba:e5:
                    3c:0a:27:47:b9:64:ef:7a:f5:32:f7:d2:2b:5b:e8:
                    6c:55:b0:c8:ec:56:62:5e:aa:eb:cb:36:fb:b3:81:
                    94:3c:fb:c1:39:d6:d9:aa:6a:df:1d:8a:07:94:a5:
                    8f:6f:b1:0f:9a:19:f9:26:66:57:16:fd:a9:67:34:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:A6:AA:8D:D9:52:83:21:E6:C2:C1:B3:0B:6D:46:7D:B8:7E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:33:29:89:46:c1:ce:21:15:a8:04:25:02:4a:60:69:07:
         4e:cb:35:ad:8d:cf:57:f3:44:63:10:bc:19:85:7a:75:19:4a:
         e1:e9:48:0c:f9:7b:ed:2f:e1:67:02:86:79:a0:60:88:8a:b6:
         55:04:97:6d:20:d4:34:ea:eb:a7:83:b8:85:d1:9c:eb:06:fc:
         e2:87:12:38:02:94:57:00:35:77:e5:c6:0e:ea:26:78:9c:f3:
         13:c2:d7:ca:40:53:90:68:18:9c:0c:a7:2c:2f:46:c7:dc:6c:
         0d:79:88:0c:aa:df:9d:b6:74:b6:05:75:7d:08:be:06:71:fe:
         8f:c8:35:7c:e8:91:78:41:9c:47:33:62:5f:fd:72:63:42:a6:
         72:08:7f:b8:2c:26:3c:7a:a7:96:18:50:d3:f0:45:5c:44:06:
         f1:7d:00:24:4a:a1:58:5b:83:3b:8d:c9:82:24:81:28:da:3a:
         ae:2a:40:e9:b7:59:4b:fa:7c:e3:56:8f:ac:cc:fb:8e:55:21:
         10:3c:08:da:3d:d8:34:4c:9c:9c:2d:e7:9f:0f:6b:45:6a:35:
         c1:cc:0f:c9:32:f8:51:50:3f:94:c0:31:d8:b2:c8:1d:20:42:
         7c:b5:1b:85:eb:1e:99:6d:c5:ba:f0:7c:c7:d8:1c:94:2b:f2:
         de:14:a8:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgizWOMMCq9UgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh
MzJjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
MGM0YTYzYTEtYmE3NS00MjFlLWE0YTAtMjllZTFkZDU0ZjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAORieUKrJ0SQEZWVcXsWsnoLUI1OWYjkk1e
lJbes9z1MYOclAhNll3Hol+7IuF5BfupeVvaSeJiN17yBT6DF74vAKIEfqgVpOpW
8AFXhDHwYU++vITTtIeV9w/gMiZ+84YUZvRox6S6YGc0bmwJhZr5gfpCd0IeNCWc
Ra2sUA2G1xp19SGsP2BBQZfAgAALvB5UFOlTfut4iNBwA6cUw3dRmn/YucFF16Ro
dC2/0x9+VBIXLXUKImIPuVx4PpQQuuU8CidHuWTvevUy99IrW+hsVbDI7FZiXqrr
yzb7s4GUPPvBOdbZqmrfHYoHlKWPb7EPmhn5JmZXFv2pZzQNKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVcpqqN2VKDIebCwbMLbUZ9uH5RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4
ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvZmYxZjdkMjctYzdkMi0z
ZmEzLTg5MzQtYjg3MTcxZGFjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh
NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2
YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0
MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqsMymJRsHOIRWoBCUCSmBpB07LNa2Nz1fzRGMQvBmFenUZSuHpSAz5
e+0v4WcChnmgYIiKtlUEl20g1DTq66eDuIXRnOsG/OKHEjgClFcANXflxg7qJnic
8xPC18pAU5BoGJwMpywvRsfcbA15iAyq3522dLYFdX0IvgZx/o/INXzokXhBnEcz
Yl/9cmNCpnIIf7gsJjx6p5YYUNPwRVxEBvF9ACRKoVhbgzuNyYIkgSjaOq4qQOm3
WUv6fONWj6zM+45VIRA8CNo92DRMnJwt558Pa0VqNcHMD8ky+FFQP5TAMdiyyB0g
Qny1G4XrHpltxbrwfMfYHJQr8t4UqH0=
-----END CERTIFICATE-----
Generated at Sun May 11 14:51:16 2025 by rpki-client