Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/476f5b90-82c6-365a-a786-904a39975ba8.roa
File:                     476f5b90-82c6-365a-a786-904a39975ba8.roa (raw, json)
Hash identifier:          +z8/55389kf/iNobLiaRrQKS+DUVbU7oGI1R+nBx5ME=
Subject key identifier:   AA:EF:75:9D:8E:0A:35:9E:F7:C7:A5:0A:CD:25:30:EF:8E:6E:73:8F
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584A7A4B4DD6CF640350660D2680
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/476f5b90-82c6-365a-a786-904a39975ba8.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     394437
IP address blocks:        66.249.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4d:d6:cf:64:03:50:66:0d:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=aeeb318e-ca9f-4a06-936f-a1a76cbfec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dd:ca:93:ba:7d:96:93:6c:3d:6b:93:c9:03:
                    ec:8a:e2:85:5b:8e:c1:93:34:a9:09:0e:2b:79:76:
                    03:75:a9:46:5f:01:33:e8:7d:a3:3e:ef:25:9f:1b:
                    ea:72:0e:12:4f:0b:33:eb:a5:3b:e7:8e:d9:f3:7b:
                    80:dd:37:10:ea:f2:52:5c:b8:3c:df:62:20:6f:4e:
                    5f:73:19:2f:a2:ac:5b:48:44:48:b4:6d:1b:b6:0b:
                    be:2d:52:ee:0f:4f:c5:79:a0:0e:93:80:e5:b0:f8:
                    8a:2b:06:56:41:9f:4c:45:0d:4b:a7:b5:fd:ac:dc:
                    c7:e3:24:5e:eb:e4:2f:cc:38:bc:21:ef:26:49:70:
                    94:84:48:0d:93:ba:97:76:a7:25:00:86:27:de:3d:
                    e8:dd:c2:75:fb:ee:c1:5d:78:19:22:1a:03:7f:f7:
                    34:7e:35:81:ca:f8:18:8f:12:a7:5d:2e:20:39:3b:
                    30:18:eb:fb:98:95:48:52:20:2b:78:de:c4:1e:00:
                    1c:f5:a2:fa:4b:c5:b0:a0:ea:8f:61:21:1e:ca:5c:
                    a8:c7:dc:a0:54:74:63:52:8e:56:e5:e7:d6:5e:c2:
                    16:19:5c:01:0b:6d:8d:ac:b6:44:c1:c0:37:38:0c:
                    fb:ba:79:b4:ec:45:6b:61:5e:aa:92:64:70:20:7f:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EF:75:9D:8E:0A:35:9E:F7:C7:A5:0A:CD:25:30:EF:8E:6E:73:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/476f5b90-82c6-365a-a786-904a39975ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:b6:a9:a2:8a:87:d3:0a:69:61:16:82:aa:6e:c0:02:07:
         c5:d1:d8:7c:75:b4:44:69:5b:12:ac:da:07:15:50:ab:ca:1c:
         59:5e:56:a2:cf:ad:d9:18:b0:8f:24:a7:e8:0b:fb:ae:54:5f:
         22:67:06:46:55:ca:4e:c0:48:57:6c:35:f0:46:d8:85:b5:b9:
         7f:34:12:90:cb:18:64:9f:2b:53:a2:b1:14:06:93:4f:4f:d9:
         e1:f1:b3:a5:31:9d:06:d5:52:51:4d:87:83:8e:92:f7:60:d2:
         1a:03:40:07:42:20:59:ca:cf:28:e3:70:36:77:40:80:1e:2e:
         b8:95:38:cc:2c:78:32:f0:a3:f6:1e:95:99:4d:6f:57:64:98:
         4b:e7:fe:30:5d:76:bf:d9:03:d4:be:a3:5b:d4:09:35:17:fa:
         43:03:1f:c1:03:34:41:ed:a0:5f:a0:b4:7f:7d:fc:b8:d6:82:
         2f:4f:e0:e5:0f:81:7a:e2:8e:11:91:ce:2d:fd:e3:89:4d:28:
         bd:f8:9c:74:d4:e5:3f:18:e7:86:5c:b4:e1:a8:42:dc:91:12:
         27:49:63:be:fb:51:d6:71:9d:63:0a:c3:df:22:5b:bc:a0:c9:
         94:ce:7a:60:61:1f:be:f4:32:98:7c:7e:87:52:30:8d:d2:ea:
         f5:0c:9a:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S03Wz2QDUGYNJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
YWVlYjMxOGUtY2E5Zi00YTA2LTkzNmYtYTFhNzZjYmZlYzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit3Kk7p9lpNsPWuTyQPsiuKFW47BkzSpCQ4r
eXYDdalGXwEz6H2jPu8lnxvqcg4STwsz66U7547Z83uA3TcQ6vJSXLg832Igb05f
cxkvoqxbSERItG0btgu+LVLuD0/FeaAOk4DlsPiKKwZWQZ9MRQ1Lp7X9rNzH4yRe
6+QvzDi8Ie8mSXCUhEgNk7qXdqclAIYn3j3o3cJ1++7BXXgZIhoDf/c0fjWByvgY
jxKnXS4gOTswGOv7mJVIUiAreN7EHgAc9aL6S8WwoOqPYSEeylyox9ygVHRjUo5W
5efWXsIWGVwBC22NrLZEwcA3OAz7unm07EVrYV6qkmRwIH8jHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrvdZ2OCjWe98elCs0lMO+ObnOPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNDc2ZjViOTAtODJjNi0z
NjVhLWE3ODYtOTA0YTM5OTc1YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvlxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0qtqmiiofTCmlhFoKqbsACB8XR2Hx1tERpWxKs2gcVUKvKHFleVqLP
rdkYsI8kp+gL+65UXyJnBkZVyk7ASFdsNfBG2IW1uX80EpDLGGSfK1OisRQGk09P
2eHxs6UxnQbVUlFNh4OOkvdg0hoDQAdCIFnKzyjjcDZ3QIAeLriVOMwseDLwo/Ye
lZlNb1dkmEvn/jBddr/ZA9S+o1vUCTUX+kMDH8EDNEHtoF+gtH99/LjWgi9P4OUP
gXrijhGRzi3944lNKL34nHTU5T8Y54ZctOGoQtyREidJY777UdZxnWMKw98iW7yg
yZTOemBhH770Mph8fodSMI3S6vUMmlc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:08:28 2025 by rpki-client