Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa
File:                     f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (raw, json)
Hash identifier:          R7USJNrtvs20rbfT79QszynWwXK6o0PFVhgld7JVFek=
Subject key identifier:   AB:09:19:7F:3C:21:30:25:73:C7:F9:B5:92:22:B6:DB:2E:55:77:DD
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F432858497F09A7EF06443938ED3B1580
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     22611
IP address blocks:        66.33.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a7:ef:06:44:39:38:ed:3b:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=c18713c8-0f08-4777-a0bc-6c90c8aca426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:c4:f9:17:d8:50:fd:dc:5a:5c:70:da:95:
                    d5:60:43:fc:45:64:06:d9:99:54:60:a4:18:62:7f:
                    50:d4:46:9b:a2:1c:7e:6d:32:f7:5a:1e:c0:8d:0c:
                    1a:70:44:bc:8e:0d:ce:6c:73:91:68:39:97:10:03:
                    12:cb:b3:f3:b9:52:49:9e:97:3a:69:90:6c:88:a5:
                    2f:6f:fa:4f:95:8f:0d:76:11:2c:64:2a:c8:3b:1e:
                    a5:71:77:04:22:21:8d:56:d7:e9:4c:3e:7b:eb:f7:
                    59:09:a7:02:76:e3:e3:00:61:bf:55:5e:84:83:3e:
                    b4:fe:f9:c0:5a:8a:2a:e5:8b:a8:f0:dc:c8:e8:eb:
                    9b:71:5e:db:08:28:10:9a:67:aa:1f:4d:07:4d:7c:
                    c1:c9:7d:53:d3:69:74:a0:db:9a:07:e0:40:5c:46:
                    30:cf:8c:ae:90:0a:51:d2:b5:fe:e5:e5:dd:2c:9d:
                    d9:0e:9f:2b:c0:da:59:40:01:03:fc:ce:21:31:4c:
                    2b:8f:4a:08:da:e3:85:a4:8a:ea:cc:8c:68:db:f1:
                    03:ae:cf:fa:d6:90:c5:12:64:1d:5d:8a:9f:2b:af:
                    53:7f:0c:0c:6a:70:dd:d3:a8:0f:42:66:5c:2c:f8:
                    5b:68:2d:ce:4d:a9:2e:ad:a0:13:b9:18:61:56:9d:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:09:19:7F:3C:21:30:25:73:C7:F9:B5:92:22:B6:DB:2E:55:77:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:bf:57:68:35:8d:38:5b:a3:4d:03:f6:29:f7:62:fa:09:
         a5:1b:19:e7:d3:f5:c0:99:3a:fe:63:87:12:9a:2e:24:3b:e2:
         9e:6c:cb:3b:ce:ba:8b:da:48:4e:65:2f:6a:75:0a:34:be:7d:
         af:9e:62:b5:69:5e:f0:69:1d:36:1b:17:89:90:14:82:16:e1:
         cb:bc:08:97:5c:c3:ac:47:b2:9a:be:e0:e6:b4:d9:1f:9b:8d:
         c0:c7:be:dc:e8:dc:3c:c8:90:67:69:b7:6d:4f:a6:e0:bc:10:
         6f:e2:c1:e6:f6:4d:cf:cb:2c:35:44:38:ee:15:22:48:df:71:
         d7:75:35:17:48:a2:6b:0a:72:5c:cb:47:5a:b1:8a:02:6d:9a:
         a9:1f:50:81:c0:9f:a4:10:82:4d:6a:0c:1c:92:81:c6:1a:d2:
         cd:07:61:ee:04:fe:3a:93:63:0c:b0:63:d2:e1:57:03:9b:a5:
         7f:99:03:23:8e:4a:e1:ec:d5:63:0e:e2:b4:70:ac:d0:8c:17:
         95:25:30:66:b1:96:ce:49:bd:2e:cb:47:97:2d:45:85:6c:b2:
         cf:da:90:95:61:95:92:d6:b3:07:fb:9c:01:99:1b:55:c1:a3:
         77:a6:a2:f8:68:31:1c:a8:05:94:b2:2f:b9:05:3a:70:79:14:
         29:cd:40:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CafvBkQ5OO07FYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0
YmUwMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
YzE4NzEzYzgtMGYwOC00Nzc3LWEwYmMtNmM5MGM4YWNhNDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bTE+RfYUP3cWlxw2pXVYEP8RWQG2ZlUYKQY
Yn9Q1Eabohx+bTL3Wh7AjQwacES8jg3ObHORaDmXEAMSy7PzuVJJnpc6aZBsiKUv
b/pPlY8NdhEsZCrIOx6lcXcEIiGNVtfpTD576/dZCacCduPjAGG/VV6Egz60/vnA
Wooq5Yuo8NzI6OubcV7bCCgQmmeqH00HTXzByX1T02l0oNuaB+BAXEYwz4yukApR
0rX+5eXdLJ3ZDp8rwNpZQAED/M4hMUwrj0oI2uOFpIrqzIxo2/EDrs/61pDFEmQd
XYqfK69TfwwManDd06gPQmZcLPhbaC3OTakuraATuRhhVp0j9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsJGX88ITAlc8f5tZIittsuVXfdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl
MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvZjBlMDgyMWMtYmJmMy0z
NGViLTgyNjYtNTU1ZjQ2YzljOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk
NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj
NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl
ZTZkYzRiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECxv1doNY04W6NNA/Yp92L6CaUbGefT9cCZOv5jhxKaLiQ74p5syzvO
uovaSE5lL2p1CjS+fa+eYrVpXvBpHTYbF4mQFIIW4cu8CJdcw6xHspq+4Oa02R+b
jcDHvtzo3DzIkGdpt21PpuC8EG/iweb2Tc/LLDVEOO4VIkjfcdd1NRdIomsKclzL
R1qxigJtmqkfUIHAn6QQgk1qDBySgcYa0s0HYe4E/jqTYwywY9LhVwObpX+ZAyOO
SuHs1WMO4rRwrNCMF5UlMGaxls5JvS7LR5ctRYVsss/akJVhlZLWswf7nAGZG1XB
o3emovhoMRyoBZSyL7kFOnB5FCnNQB0=
-----END CERTIFICATE-----
Generated at Thu May 8 17:40:52 2025 by rpki-client