Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/b5655fc8-1d89-3634-9563-5f5462c59041.roa
File:                     b5655fc8-1d89-3634-9563-5f5462c59041.roa (raw, json)
Hash identifier:          I6BkfMFBMZiuWou55QjF7OkqQRjEugWFnpdpL9wN9ic=
Subject key identifier:   0B:85:B4:3A:56:F4:7C:20:AC:8D:48:43:3D:F6:A6:81:69:3D:B6:3C
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584A51D0698CB28D06C445EA1D80
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/b5655fc8-1d89-3634-9563-5f5462c59041.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     50131
IP address blocks:        65.75.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:69:8c:b2:8d:06:c4:45:ea:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=66823f81-11d6-402b-b318-5574180836e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:c6:79:55:53:64:47:b3:b4:96:0c:18:0d:
                    e8:4c:62:69:f6:a3:f1:64:92:31:36:dd:98:ec:5d:
                    31:e5:88:cf:75:c9:5f:ee:b2:5c:63:ce:82:67:e9:
                    20:7c:12:45:ad:fe:b9:62:a8:c8:9e:68:99:7f:4f:
                    54:55:fd:9e:fb:a2:04:a3:f8:d4:3e:ce:61:95:81:
                    96:98:7e:fa:99:18:87:5e:c7:a8:ed:7a:e0:c5:5d:
                    fc:e6:db:63:8b:71:49:fb:f5:37:77:73:26:cf:50:
                    78:c8:eb:7a:58:20:d6:7e:f5:d5:12:4a:a6:d4:b1:
                    54:73:e1:14:11:b4:34:89:04:da:81:cb:6c:13:fa:
                    9b:c0:46:98:6f:a4:cc:ff:1b:e8:c4:28:70:7c:4f:
                    43:74:35:77:01:99:d5:0e:67:ac:54:1d:ea:73:26:
                    4e:e0:a0:f3:75:59:54:bf:9b:11:20:fa:d7:27:8c:
                    8d:6c:ca:cc:a6:11:37:18:a8:ce:19:ce:76:86:45:
                    6c:27:36:a4:b5:73:f5:58:1f:c1:e8:20:f0:6d:ad:
                    e5:b4:ab:24:9a:44:b6:07:35:ff:a0:5a:5c:f7:e8:
                    eb:8e:52:26:aa:2b:59:d4:9e:c8:cc:64:fd:ce:83:
                    35:73:2c:e3:79:4e:f9:cc:8f:3e:f5:a1:8b:7c:14:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:B4:3A:56:F4:7C:20:AC:8D:48:43:3D:F6:A6:81:69:3D:B6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/b5655fc8-1d89-3634-9563-5f5462c59041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:d7:16:3e:ad:ec:08:89:73:ed:fa:fd:9d:6f:d4:19:f2:
         dd:63:29:0c:01:7f:61:aa:e8:e4:16:8d:17:8f:a4:4c:a8:a6:
         a9:ae:47:92:4e:6b:de:46:ea:41:c1:fe:f2:ae:f6:24:8a:a8:
         0c:46:0b:09:14:32:8a:72:31:b3:cd:b9:5a:83:75:58:90:f3:
         f9:6c:3f:57:11:3e:15:9f:84:f3:f8:f3:7a:bc:77:f4:45:03:
         53:86:8b:05:05:5b:3f:2f:82:ef:24:39:d1:36:bf:3d:50:03:
         3c:e4:b2:fe:fb:80:88:93:55:59:da:aa:76:15:09:18:cc:3b:
         65:6f:ea:96:62:53:80:cd:f0:10:c4:e1:9b:a3:c9:72:12:c6:
         11:55:f4:1a:10:2c:cd:49:28:51:ff:7b:b7:e8:05:4a:40:8d:
         d2:92:53:c3:75:51:ca:ad:e9:ec:21:d4:fb:c2:1f:4f:22:ef:
         8b:9c:f6:d0:40:e7:4b:89:29:14:1b:bd:fd:5c:69:f4:7f:e2:
         51:bc:2f:03:3b:ce:69:d8:a8:cc:96:cb:e6:d6:e1:1f:53:b4:
         0f:9b:08:a6:70:5d:8e:12:e5:b2:6a:f6:d6:0a:38:6c:e0:7c:
         71:6d:7e:c2:ff:05:a9:49:1c:7e:6e:bd:0d:d1:ce:f1:80:8f:
         1f:71:97:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GmMso0GxEXqHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDEwNmEyNDctOTMwOC00NmU5LTlkODgtYWU5ODdhNmJk
YWNlMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
NjY4MjNmODEtMTFkNi00MDJiLWIzMTgtNTU3NDE4MDgzNmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XHGeVVTZEeztJYMGA3oTGJp9qPxZJIxNt2Y
7F0x5YjPdclf7rJcY86CZ+kgfBJFrf65YqjInmiZf09UVf2e+6IEo/jUPs5hlYGW
mH76mRiHXseo7XrgxV385ttji3FJ+/U3d3Mmz1B4yOt6WCDWfvXVEkqm1LFUc+EU
EbQ0iQTagctsE/qbwEaYb6TM/xvoxChwfE9DdDV3AZnVDmesVB3qcyZO4KDzdVlU
v5sRIPrXJ4yNbMrMphE3GKjOGc52hkVsJzaktXP1WB/B6CDwba3ltKskmkS2BzX/
oFpc9+jrjlImqitZ1J7IzGT9zoM1cyzjeU75zI8+9aGLfBQ9lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuFtDpW9HwgrI1IQz32poFpPbY8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2
YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4N2E2YmRhY2UvYjU2NTVmYzgtMWQ4OS0z
NjM0LTk1NjMtNWY1NDYyYzU5MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDEwNmEyNDctOTMwOC00NmU5LTlk
ODgtYWU5ODdhNmJkYWNlL2QxMDZhMjQ3LTkzMDgtNDZlOS05ZDg4LWFlOTg3YTZi
ZGFjZS5jcmwwHwYDVR0jBBgwFoAU59w75Vb/HV/fyvRlHD0ubP3+gjowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4
N2E2YmRhY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQUvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJ91xY+rewIiXPt+v2db9QZ8t1jKQwBf2Gq6OQWjRePpEyopqmuR5JO
a95G6kHB/vKu9iSKqAxGCwkUMopyMbPNuVqDdViQ8/lsP1cRPhWfhPP483q8d/RF
A1OGiwUFWz8vgu8kOdE2vz1QAzzksv77gIiTVVnaqnYVCRjMO2Vv6pZiU4DN8BDE
4ZujyXISxhFV9BoQLM1JKFH/e7foBUpAjdKSU8N1Ucqt6ewh1PvCH08i74uc9tBA
50uJKRQbvf1cafR/4lG8LwM7zmnYqMyWy+bW4R9TtA+bCKZwXY4S5bJq9tYKOGzg
fHFtfsL/BalJHH5uvQ3RzvGAjx9xlz8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:15:21 2025 by rpki-client