Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
File:                     bef55cf1-33ca-3581-b5d2-c162378fe467.roa (raw, json)
Hash identifier:          Abk463qS004qZj3D7ksU9zfVF7ugfDUp8BN/jDffpLg=
Subject key identifier:   81:29:15:E5:4A:6E:7F:EF:84:B9:DD:8E:44:5D:33:88:29:FA:5B:B5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0E3F42D8464557021E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        66.8.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0e:3f:42:d8:46:45:57:02:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=638d8ccd-967b-449f-9552-3f974b248060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:c5:cb:49:3c:69:96:46:a6:5e:63:9c:92:
                    87:ff:93:74:9e:25:82:b0:f0:87:8a:fc:14:a4:aa:
                    14:f3:7f:65:29:cf:38:12:da:02:2b:5b:7d:80:d3:
                    1d:59:95:80:4d:d3:7c:de:4b:6e:d1:bb:8a:db:e6:
                    e5:1c:e6:9d:d6:bd:6c:9b:56:80:c0:16:aa:5e:95:
                    cc:05:4b:cb:2f:ec:34:3b:4f:c5:50:64:42:16:4f:
                    a5:da:d7:d0:62:64:c2:5a:a5:a3:33:e3:57:29:2a:
                    a3:e6:1d:5c:eb:35:b9:f2:b3:38:b5:d7:bd:28:f6:
                    50:4b:c2:94:a2:46:3f:52:eb:87:d3:f0:d6:12:ec:
                    62:36:4e:af:f6:61:62:cf:fb:9e:e7:81:2a:94:1c:
                    fa:03:23:16:5f:32:e1:6a:67:85:75:08:45:6f:fa:
                    24:89:27:4a:53:e2:1f:4e:f6:b4:be:d7:d2:7c:8d:
                    ba:de:b0:47:a1:d6:4a:76:7d:30:ef:93:43:85:84:
                    a6:00:93:05:ba:0e:27:87:fd:30:6d:69:bd:ce:27:
                    63:df:19:73:bb:6a:0d:c4:4c:10:06:9a:38:b9:de:
                    e4:c0:06:95:ab:a7:5b:73:a1:0c:4d:bc:d7:5b:37:
                    0d:99:c8:38:97:58:92:c1:84:5e:2c:d6:ef:93:68:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:29:15:E5:4A:6E:7F:EF:84:B9:DD:8E:44:5D:33:88:29:FA:5B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.8.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:65:95:53:96:7a:2e:38:02:f8:cb:ca:ad:b6:0c:8c:45:69:
         f8:13:a5:1d:1d:8b:d6:ab:54:a6:7b:a6:bf:c3:ee:9d:67:f8:
         80:7f:bc:e3:21:1e:5b:54:4d:49:09:91:5d:95:31:18:1a:c4:
         37:47:e9:c9:f6:de:8f:ea:ff:64:be:b6:d7:4f:47:79:53:ad:
         3e:01:88:89:d9:75:ee:75:fa:c2:56:06:41:3d:29:4f:e8:85:
         ca:56:4c:66:a2:1f:55:ae:0f:77:eb:80:60:72:ca:96:a9:57:
         4f:e2:81:49:ad:c5:a3:20:4e:e0:f8:d5:85:bd:61:d4:60:a4:
         92:2c:21:63:95:b3:42:dd:53:e6:de:a5:0f:69:59:b4:eb:3c:
         61:31:45:db:f1:e6:95:d9:46:ba:e9:b0:08:d8:19:63:94:66:
         e9:30:8b:0d:6b:3f:1d:21:11:38:df:82:92:56:a6:23:5d:9d:
         fd:ce:36:34:0f:78:3b:dd:95:dd:c0:07:5c:1e:3a:4a:3d:e8:
         2c:9c:f3:fd:bd:0e:08:98:cf:00:4a:20:dc:de:55:84:72:1d:
         8d:af:8c:68:d5:a0:75:a5:8d:0e:a3:7f:52:b6:0b:81:e9:a9:
         2b:e4:cd:5a:21:a3:9f:67:d6:5c:c2:e0:ea:db:cd:a0:4f:b0:
         cb:88:37:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHQ4/QthGRVcCHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NjM4ZDhjY2QtOTY3Yi00NDlmLTk1NTItM2Y5NzRiMjQ4MDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR3Fy0k8aZZGpl5jnJKH/5N0niWCsPCHivwU
pKoU839lKc84EtoCK1t9gNMdWZWATdN83ktu0buK2+blHOad1r1sm1aAwBaqXpXM
BUvLL+w0O0/FUGRCFk+l2tfQYmTCWqWjM+NXKSqj5h1c6zW58rM4tde9KPZQS8KU
okY/UuuH0/DWEuxiNk6v9mFiz/ue54EqlBz6AyMWXzLhameFdQhFb/okiSdKU+If
Tva0vtfSfI263rBHodZKdn0w75NDhYSmAJMFug4nh/0wbWm9zidj3xlzu2oNxEwQ
Bpo4ud7kwAaVq6dbc6EMTbzXWzcNmcg4l1iSwYReLNbvk2jhywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEpFeVKbn/vhLndjkRdM4gp+lu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmVmNTVjZjEtMzNjYS0z
NTgxLWI1ZDItYzE2MjM3OGZlNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQgiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJllVOWei44AvjLyq22DIxFafgTpR0di9arVKZ7pr/D7p1n+IB/vOMh
HltUTUkJkV2VMRgaxDdH6cn23o/q/2S+ttdPR3lTrT4BiInZde51+sJWBkE9KU/o
hcpWTGaiH1WuD3frgGByypapV0/igUmtxaMgTuD41YW9YdRgpJIsIWOVs0LdU+be
pQ9pWbTrPGExRdvx5pXZRrrpsAjYGWOUZukwiw1rPx0hETjfgpJWpiNdnf3ONjQP
eDvdld3AB1weOko96Cyc8/29DgiYzwBKINzeVYRyHY2vjGjVoHWljQ6jf1K2C4Hp
qSvkzVoho59n1lzC4OrbzaBPsMuIN8s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:00 2025 by rpki-client