Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
File:                     5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa (raw, json)
Hash identifier:          /xtZST1iZBdqxP5NtQuw+lVu++iuqzK7ee1Ulcnv64s=
Subject key identifier:   EE:8B:1D:D7:28:74:F6:5E:32:6E:75:E8:08:84:C8:29:C1:8D:35:2C
Certificate issuer:       /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial:       010D0C9F4328584A427584F1AB4F032A98F605C0
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     401338
IP address blocks:        67.22.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:84:f1:ab:4f:03:2a:98:f6:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=b676b48b-6fbc-4dd6-a540-01d8ffc07885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:53:1e:b5:3e:d1:0c:a7:12:5e:c5:55:bc:
                    6d:34:fc:83:c2:1b:00:c1:ac:d0:e2:f3:e0:d9:73:
                    f1:02:f0:77:ba:6c:ad:a6:08:94:61:93:bc:68:7f:
                    08:6d:ce:8b:94:a2:4f:f8:fc:25:e8:ee:6a:32:b1:
                    f2:18:a5:b1:b1:c8:01:3f:6c:46:9b:9f:d4:38:6b:
                    0f:34:2c:a9:3c:dc:9d:70:93:79:59:d0:27:f5:b1:
                    70:09:7a:9d:9f:81:cf:6a:97:df:09:fd:b0:17:8f:
                    2d:b3:3f:09:c6:df:b6:4f:15:58:cc:a8:41:04:e8:
                    65:96:52:39:17:ac:44:d1:c7:af:6b:ad:18:e9:4c:
                    ac:10:47:b8:f3:eb:fc:91:a3:45:2a:b5:27:86:50:
                    1f:ca:51:e3:95:44:1b:c4:4c:7c:3f:bf:32:61:78:
                    ba:07:e7:ea:ff:95:92:ac:13:02:1e:6c:ff:c0:ec:
                    8e:67:cc:0a:29:16:5b:da:86:3c:06:e0:3b:13:b9:
                    52:30:a7:7d:d0:5d:56:a8:23:d3:b8:54:72:5a:3f:
                    73:02:16:3b:b2:f4:fa:91:9a:3b:70:28:20:38:8d:
                    97:67:54:5b:23:fc:75:05:3e:8c:9f:b0:e9:cd:5b:
                    07:3f:d8:a1:b5:b6:80:a7:06:ba:05:11:70:54:93:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8B:1D:D7:28:74:F6:5E:32:6E:75:E8:08:84:C8:29:C1:8D:35:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:70:43:80:43:cb:eb:80:d1:f0:0c:70:2f:ae:75:b0:98:
         73:de:9f:c6:e4:14:38:7e:8b:3c:2b:ed:da:6e:1b:8c:bb:6b:
         c5:a7:c5:cb:23:b1:d4:06:3c:e5:2e:4a:de:10:36:fc:aa:c8:
         6f:7b:a4:96:a5:81:fb:65:9a:6a:38:eb:47:c3:2c:24:ec:19:
         d7:a2:b9:b8:28:c3:40:e7:32:50:94:ac:24:8f:59:40:06:7b:
         4b:6f:54:31:59:d8:cd:20:79:b2:93:5a:a6:d5:89:1f:7e:ec:
         48:2d:d3:01:77:e5:b0:60:d6:52:76:75:76:d8:f1:2a:2f:d4:
         ae:51:00:ee:32:65:63:8b:3c:22:c2:74:ce:69:7c:2b:f4:23:
         5e:d3:cf:56:12:45:26:98:a7:70:f5:b6:1f:4c:2f:bd:d6:8e:
         ec:ce:97:a5:b0:6c:46:87:a8:bf:b5:3f:2a:84:68:af:6a:1d:
         10:b7:4b:19:1d:97:7a:40:23:44:c2:58:1f:d4:39:eb:94:bd:
         1b:56:76:2a:61:1a:60:bb:c8:a9:53:46:b3:a6:ca:a4:d1:ef:
         89:d6:08:8c:aa:f5:da:f3:99:a3:68:57:a8:b9:43:fd:dd:32:
         1a:5b:e5:d4:6a:ee:f1:73:ac:fd:1e:c4:ab:ac:ed:7b:66:e6:
         37:ba:18:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYTxq08DKpj2BcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViNzM1MzUtZDBmYi00MzQwLThkNWUtNGMyNmQ2YTU5
ZGM3MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk
YjY3NmI0OGItNmZiYy00ZGQ2LWE1NDAtMDFkOGZmYzA3ODg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjpTHrU+0QynEl7FVbxtNPyDwhsAwazQ4vPg
2XPxAvB3umytpgiUYZO8aH8Ibc6LlKJP+Pwl6O5qMrHyGKWxscgBP2xGm5/UOGsP
NCypPNydcJN5WdAn9bFwCXqdn4HPapffCf2wF48tsz8Jxt+2TxVYzKhBBOhlllI5
F6xE0ceva60Y6UysEEe48+v8kaNFKrUnhlAfylHjlUQbxEx8P78yYXi6B+fq/5WS
rBMCHmz/wOyOZ8wKKRZb2oY8BuA7E7lSMKd90F1WqCPTuFRyWj9zAhY7svT6kZo7
cCggOI2XZ1RbI/x1BT6Mn7DpzVsHP9ihtbaApwa6BRFwVJN+QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6LHdcodPZeMm516AiEyCnBjTUsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZWI3
MzUzNS1kMGZiLTQzNDAtOGQ1ZS00YzI2ZDZhNTlkYzcvNWYwZjkyMjAtN2YxZC0z
YmMyLWE4YzYtYjU4ZDI3Y2Q1OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmViNzM1MzUtZDBmYi00MzQwLThk
NWUtNGMyNmQ2YTU5ZGM3L2JlYjczNTM1LWQwZmItNDM0MC04ZDVlLTRjMjZkNmE1
OWRjNy5jcmwwHwYDVR0jBBgwFoAUzPj3gdhZkFk/1CBNoGHtZSYeDIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZWI3MzUzNS1kMGZiLTQzNDAtOGQ1ZS00YzI2
ZDZhNTlkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQxZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADa0cEOAQ8vrgNHwDHAvrnWwmHPen8bkFDh+izwr7dpuG4y7a8Wnxcsj
sdQGPOUuSt4QNvyqyG97pJalgftlmmo460fDLCTsGdeiubgow0DnMlCUrCSPWUAG
e0tvVDFZ2M0gebKTWqbViR9+7Egt0wF35bBg1lJ2dXbY8Sov1K5RAO4yZWOLPCLC
dM5pfCv0I17Tz1YSRSaYp3D1th9ML73WjuzOl6WwbEaHqL+1PyqEaK9qHRC3Sxkd
l3pAI0TCWB/UOeuUvRtWdiphGmC7yKlTRrOmyqTR74nWCIyq9drzmaNoV6i5Q/3d
Mhpb5dRq7vFzrP0exKus7Xtm5je6GH4=
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:31:20 2025 by rpki-client