Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa
File:                     d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa (raw, json)
Hash identifier:          Jc2ywWV2CjZRiXa5Ctgs4izTEoPnHymFpKka+iGq4sQ=
Subject key identifier:   BC:AF:B9:AB:CA:3E:E6:31:C5:A1:69:73:9A:B8:88:DC:A3:1F:1D:E9
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584B92DCDC186E9C01A4D76C0F00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     11259
IP address blocks:        66.110.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:dc:18:6e:9c:01:a4:d7:6c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=a94eb2b7-ed61-44d7-8f5e-6c1ab50c4763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:23:7f:be:d2:03:15:ee:2a:a8:92:2a:cf:
                    c7:3b:69:78:8e:b6:db:00:9f:bf:5c:99:4e:0f:87:
                    57:30:eb:8d:7f:29:4c:7d:a8:7d:3f:df:01:e7:ba:
                    f0:60:0f:d8:8a:38:2f:f6:90:a1:9f:84:d0:20:7a:
                    6a:eb:de:b6:6a:b7:bd:2c:18:8c:a7:2e:a4:92:62:
                    89:74:e5:63:89:b1:7f:b6:ff:a5:22:33:01:ef:70:
                    46:8c:5f:4a:62:c6:9d:e2:e7:6f:3a:63:83:31:4d:
                    0c:03:20:d0:07:bb:00:1b:26:3c:6b:5b:b5:90:94:
                    4e:34:dd:17:a3:a2:5e:80:69:96:4f:e5:81:e5:b5:
                    dc:ad:e3:3e:79:f5:f1:69:b4:2f:02:04:5f:19:20:
                    10:7a:19:32:99:bf:db:45:28:25:67:dc:5d:c7:ea:
                    15:48:e2:9a:63:48:c3:94:b7:1b:e1:c8:c6:e5:20:
                    d3:3a:07:b0:d1:53:8c:e7:0c:31:ca:73:fd:a4:c3:
                    7c:48:f0:ba:38:96:67:dd:71:25:51:8e:78:cd:97:
                    f4:2d:b5:38:40:1d:2e:1b:ef:c2:89:c2:8f:68:c8:
                    b0:7a:64:ab:33:75:ec:35:c9:6e:43:20:03:63:13:
                    fb:2b:65:24:68:0c:42:e4:21:41:e1:48:ad:36:3d:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:B9:AB:CA:3E:E6:31:C5:A1:69:73:9A:B8:88:DC:A3:1F:1D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d27025d9-66fe-3bfc-ad41-005a0dabb4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:26:12:ff:14:82:87:e7:70:bc:0a:f4:b3:28:f6:89:ed:
         c4:99:f8:2a:56:a1:f4:bb:06:60:f2:4e:d5:de:41:16:8d:8e:
         19:b9:b4:11:e7:87:5c:f2:00:ca:a6:17:b8:fc:0c:ea:1e:55:
         60:8d:e1:e2:83:34:af:31:b5:11:9d:35:64:9e:48:73:4b:86:
         ed:e6:fe:c7:b2:de:8d:db:34:78:88:c2:8f:01:90:47:be:cd:
         00:69:39:20:a9:47:ac:1d:46:53:a3:8b:06:bd:cd:00:25:2b:
         4d:9a:ec:a4:5a:87:16:0f:d6:46:0c:1b:a4:58:cc:30:b2:19:
         84:60:49:aa:52:d0:e8:23:fc:a6:e0:1d:a2:f8:d5:7c:82:d1:
         8a:32:29:9f:fb:19:15:df:b5:64:28:47:f5:e5:b3:13:f5:23:
         d4:bd:4d:7a:d3:12:8d:2c:41:6c:7e:4c:80:df:5a:39:a5:57:
         f5:08:51:40:2d:0b:1e:74:e7:e4:06:7e:a5:38:f6:31:66:88:
         34:6c:d6:58:16:3e:9c:f4:4b:66:89:c7:ff:39:6e:d9:9a:8f:
         4c:24:b6:7e:da:37:15:c3:cb:5c:0a:4b:dd:88:9b:ab:90:42:
         71:5e:22:f3:70:e1:4d:e6:7f:53:0d:76:29:b2:fe:c4:e3:83:
         5e:e0:39:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3NwYbpwBpNdsDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
YTk0ZWIyYjctZWQ2MS00NGQ3LThmNWUtNmMxYWI1MGM0NzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolcjf77SAxXuKqiSKs/HO2l4jrbbAJ+/XJlO
D4dXMOuNfylMfah9P98B57rwYA/Yijgv9pChn4TQIHpq6962are9LBiMpy6kkmKJ
dOVjibF/tv+lIjMB73BGjF9KYsad4udvOmODMU0MAyDQB7sAGyY8a1u1kJRONN0X
o6JegGmWT+WB5bXcreM+efXxabQvAgRfGSAQehkymb/bRSglZ9xdx+oVSOKaY0jD
lLcb4cjG5SDTOgew0VOM5wwxynP9pMN8SPC6OJZn3XElUY54zZf0LbU4QB0uG+/C
icKPaMiwemSrM3XsNcluQyADYxP7K2UkaAxC5CFB4UitNj2KOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLyvuavKPuYxxaFpc5q4iNyjHx3pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZDI3MDI1ZDktNjZmZS0z
YmZjLWFkNDEtMDA1YTBkYWJiNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQm5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8TJhL/FIKH53C8CvSzKPaJ7cSZ+CpWofS7BmDyTtXeQRaNjhm5tBHn
h1zyAMqmF7j8DOoeVWCN4eKDNK8xtRGdNWSeSHNLhu3m/sey3o3bNHiIwo8BkEe+
zQBpOSCpR6wdRlOjiwa9zQAlK02a7KRahxYP1kYMG6RYzDCyGYRgSapS0Ogj/Kbg
HaL41XyC0YoyKZ/7GRXftWQoR/XlsxP1I9S9TXrTEo0sQWx+TIDfWjmlV/UIUUAt
Cx505+QGfqU49jFmiDRs1lgWPpz0S2aJx/85btmaj0wktn7aNxXDy1wKS92Im6uQ
QnFeIvNw4U3mf1MNdimy/sTjg17gORg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:57:17 2025 by rpki-client