Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
File:                     f8da808f-47b5-34dd-b483-f75e9c99551c.roa (raw, json)
Hash identifier:          bwmNr5EEhBeBvrEVdqmD6orJqE+FUVE0riPKZgPvcxM=
Subject key identifier:   8A:04:09:C4:5A:C1:2E:CE:FB:81:D0:09:0E:B8:16:2D:0D:9D:B4:50
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F4328584A374AD3F0242FECB79FD50100
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     16992
IP address blocks:        66.37.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d3:f0:24:2f:ec:b7:9f:d5:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=a606571b-918c-4f5d-992a-a29d16fd0a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:07:52:6e:ff:ef:7f:15:31:6a:8c:10:b8:
                    a2:d0:fc:64:3e:02:14:38:47:3a:d9:8d:57:0a:6c:
                    d0:84:74:fb:4b:bc:f5:11:a0:0b:94:46:fb:7e:88:
                    ff:70:15:82:76:38:4f:49:d1:2c:4e:3c:b1:4e:3f:
                    56:e2:63:dd:23:74:a1:33:52:8c:22:3f:61:a7:81:
                    b3:2c:8d:5b:af:9c:fd:8b:6e:fc:07:c6:a8:c4:e2:
                    e3:b3:ad:dc:ac:b8:00:e4:37:c9:dd:c2:ee:12:6b:
                    83:1c:89:ba:03:8e:3c:2f:d7:46:19:d9:71:de:60:
                    ff:ad:87:cb:16:d3:6c:1b:87:88:0f:9b:0c:4b:15:
                    58:05:7b:b1:68:a0:f0:f4:c0:19:bd:83:b7:00:dc:
                    f9:2d:d6:5b:cb:1c:b5:66:83:84:72:ce:c0:df:75:
                    06:e8:a8:89:28:be:da:8e:0c:77:60:ac:f0:ab:1a:
                    86:0a:dd:0a:b4:15:f8:bc:92:ae:ca:9d:0c:1f:a6:
                    af:80:f9:1c:90:6a:fe:80:7b:a6:f6:a2:45:b7:d3:
                    71:b5:fc:a5:09:c3:d7:a0:db:0d:b0:a0:65:1f:83:
                    ab:79:fa:ad:bf:02:e5:f3:87:05:a2:ce:d8:de:1d:
                    ef:81:73:65:e8:6f:68:68:19:c5:63:41:2f:ed:51:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:04:09:C4:5A:C1:2E:CE:FB:81:D0:09:0E:B8:16:2D:0D:9D:B4:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/f8da808f-47b5-34dd-b483-f75e9c99551c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:ee:ea:2c:9f:94:9e:a7:3c:9b:b9:96:2f:17:af:e6:f6:
         c4:61:ea:e1:21:2f:63:65:02:f4:f6:a8:ab:2c:40:c9:bf:5d:
         90:d5:b0:f4:19:aa:94:dc:52:6e:26:0a:96:4d:64:55:56:cc:
         7b:a8:83:f5:7d:f1:3a:30:ad:e0:ff:18:59:3f:43:b9:6f:10:
         34:9e:08:c3:24:16:e9:b3:4f:86:0d:58:43:eb:77:e3:57:da:
         25:37:c9:dc:f2:1e:9f:a2:03:1e:84:ca:bd:67:df:5a:fb:fe:
         30:a0:97:66:00:a5:f2:58:07:ab:11:07:5b:ae:a0:18:c6:7b:
         f4:f5:58:9b:9d:e0:3b:82:1f:ea:4a:a0:53:f5:bd:19:e1:7f:
         f0:ea:9c:51:37:6c:ed:43:3e:ca:c0:0c:b0:95:52:5f:ca:82:
         5e:81:70:ce:e4:cd:46:b0:ae:40:e5:3d:5d:0a:15:d5:23:1d:
         0d:0c:c8:7b:9c:2a:a5:25:50:53:3f:6a:9f:68:64:e0:95:0f:
         9b:ae:72:ef:15:75:39:01:48:5d:43:56:b9:a0:c9:5e:7f:e7:
         93:72:c5:c9:1e:6c:b8:95:be:65:01:9e:45:fe:50:52:56:b0:
         72:c7:40:be:81:52:02:4b:c2:72:1c:c9:96:41:a2:19:bb:41:
         92:80:cb:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StPwJC/st5/VAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ1NTg1NTMtYjI1OC00ODRhLWJkNmYtNWU4YjM2Yzk4
MDY1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
YTYwNjU3MWItOTE4Yy00ZjVkLTk5MmEtYTI5ZDE2ZmQwYTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks0HUm7/738VMWqMELii0PxkPgIUOEc62Y1X
CmzQhHT7S7z1EaALlEb7foj/cBWCdjhPSdEsTjyxTj9W4mPdI3ShM1KMIj9hp4Gz
LI1br5z9i278B8aoxOLjs63crLgA5DfJ3cLuEmuDHIm6A448L9dGGdlx3mD/rYfL
FtNsG4eID5sMSxVYBXuxaKDw9MAZvYO3ANz5LdZbyxy1ZoOEcs7A33UG6KiJKL7a
jgx3YKzwqxqGCt0KtBX4vJKuyp0MH6avgPkckGr+gHum9qJFt9NxtfylCcPXoNsN
sKBlH4OrefqtvwLl84cFos7Y3h3vgXNl6G9oaBnFY0Ev7VEAhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoECcRawS7O+4HQCQ64Fi0NnbRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNDU1
ODU1My1iMjU4LTQ4NGEtYmQ2Zi01ZThiMzZjOTgwNjUvZjhkYTgwOGYtNDdiNS0z
NGRkLWI0ODMtZjc1ZTljOTk1NTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjQ1NTg1NTMtYjI1OC00ODRhLWJk
NmYtNWU4YjM2Yzk4MDY1LzI0NTU4NTUzLWIyNTgtNDg0YS1iZDZmLTVlOGIzNmM5
ODA2NS5jcmwwHwYDVR0jBBgwFoAUngHV5PeFJU3DQyrilOlDO0l69YswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNDU1ODU1My1iMjU4LTQ4NGEtYmQ2Zi01ZThi
MzZjOTgwNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiWfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtx7uosn5SepzybuZYvF6/m9sRh6uEhL2NlAvT2qKssQMm/XZDVsPQZ
qpTcUm4mCpZNZFVWzHuog/V98TowreD/GFk/Q7lvEDSeCMMkFumzT4YNWEPrd+NX
2iU3ydzyHp+iAx6Eyr1n31r7/jCgl2YApfJYB6sRB1uuoBjGe/T1WJud4DuCH+pK
oFP1vRnhf/DqnFE3bO1DPsrADLCVUl/Kgl6BcM7kzUawrkDlPV0KFdUjHQ0MyHuc
KqUlUFM/ap9oZOCVD5uucu8VdTkBSF1DVrmgyV5/55NyxckebLiVvmUBnkX+UFJW
sHLHQL6BUgJLwnIcyZZBohm7QZKAy8c=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:25:50 2025 by rpki-client