Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/768fe17a-2bdb-3221-adf3-c00d0b5bda5f.roa
File:                     768fe17a-2bdb-3221-adf3-c00d0b5bda5f.roa (raw, json)
Hash identifier:          AI0JG/ERlnCQkaL+RyNKDH+gvD81rCdbIJ7I75V49dU=
Subject key identifier:   C9:F7:DB:2A:33:8A:10:9B:50:66:B3:EB:C8:4C:FD:92:99:15:44:96
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584ADECBB7DDFF7F38BBC0478C00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/768fe17a-2bdb-3221-adf3-c00d0b5bda5f.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     35880
IP address blocks:        65.51.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b7:dd:ff:7f:38:bb:c0:47:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=adc82f93-017e-46bd-9f87-8a748427af59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9b:7f:f1:a1:be:b5:9f:f3:17:a9:d7:25:77:
                    8c:e5:fb:5a:a4:18:38:b2:e0:3f:e9:1a:c4:83:dc:
                    65:ec:36:22:05:8f:97:9e:28:37:6c:af:c2:d2:8c:
                    ec:c0:23:07:7d:44:ae:5e:ee:d4:ac:3e:a9:7f:57:
                    f8:b7:cd:71:c2:a8:29:0e:c7:0a:26:be:2a:db:f1:
                    41:cf:9e:3d:2b:ea:54:f7:e8:6d:26:be:93:c2:a1:
                    c3:7e:5b:8d:10:3c:2d:ae:10:9b:c2:74:03:b2:84:
                    cd:42:cd:75:d2:53:b9:a7:cf:0c:b9:11:c7:8e:dc:
                    00:b8:f6:70:34:06:8b:17:81:85:b3:5f:5c:93:91:
                    98:5b:f4:0f:d3:bb:71:64:ee:a3:fc:ff:42:61:e7:
                    93:99:9d:ea:4b:41:ab:7e:a7:6d:55:11:3e:13:eb:
                    35:46:8b:02:42:e8:b6:88:ee:0b:d4:40:17:41:7a:
                    ff:26:13:65:ee:ec:03:33:cb:f7:cd:62:3e:57:8f:
                    e7:89:dc:ff:1c:22:51:33:84:b3:bf:43:7f:f5:08:
                    6d:d1:9a:c2:71:1a:d6:00:9f:71:85:23:f3:fc:70:
                    54:13:68:80:93:6b:4c:5a:bf:79:13:30:bd:a6:65:
                    41:e0:bf:e0:f7:81:a3:62:2c:09:72:4c:26:be:98:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F7:DB:2A:33:8A:10:9B:50:66:B3:EB:C8:4C:FD:92:99:15:44:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/768fe17a-2bdb-3221-adf3-c00d0b5bda5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:eb:30:44:76:28:2e:c2:1e:37:e5:8b:b0:41:32:eb:f3:cd:
         27:67:09:a1:f0:7e:58:5e:52:30:a5:a6:77:99:74:3a:68:e5:
         a6:17:ab:14:84:fc:bc:a2:ef:0f:69:10:d8:0d:df:4e:1a:2e:
         b9:d1:7b:26:0d:42:6d:02:90:5a:bd:df:6f:90:b6:26:28:d1:
         5d:0e:5e:6c:d8:d4:cc:76:cf:78:f6:6a:77:46:43:fb:00:4c:
         b1:d6:87:c1:dd:0b:ba:59:79:fa:08:04:cd:75:64:4e:d1:e4:
         25:b9:5d:41:4d:a0:bd:eb:0e:03:8f:ff:60:2f:2e:ce:1e:21:
         19:19:17:7b:84:bd:39:d7:14:9b:4f:4e:fd:e6:87:ed:4c:83:
         2b:2b:e0:ad:d3:48:a8:21:b0:39:b1:5d:ac:be:97:26:fb:cd:
         f5:52:e8:70:2c:22:d1:7b:ae:90:a5:5c:fb:d7:2c:9f:f0:6a:
         e5:98:ad:88:e5:1f:1f:94:0e:2c:3f:6a:61:ed:c9:38:48:65:
         26:86:8a:4c:0a:d1:08:b2:3e:79:5a:a2:21:f7:3d:7b:57:6a:
         2b:05:b8:fd:81:62:8d:ac:df:24:7e:8f:11:b2:b1:00:14:98:
         80:03:76:27:05:b1:fe:1d:16:de:30:13:3e:5c:05:3d:f1:65:
         81:2e:b2:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7fd/384u8BHjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
YWRjODJmOTMtMDE3ZS00NmJkLTlmODctOGE3NDg0MjdhZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pt/8aG+tZ/zF6nXJXeM5ftapBg4suA/6RrE
g9xl7DYiBY+Xnig3bK/C0ozswCMHfUSuXu7UrD6pf1f4t81xwqgpDscKJr4q2/FB
z549K+pU9+htJr6TwqHDfluNEDwtrhCbwnQDsoTNQs110lO5p88MuRHHjtwAuPZw
NAaLF4GFs19ck5GYW/QP07txZO6j/P9CYeeTmZ3qS0GrfqdtVRE+E+s1RosCQui2
iO4L1EAXQXr/JhNl7uwDM8v3zWI+V4/nidz/HCJRM4Szv0N/9Qht0ZrCcRrWAJ9x
hSPz/HBUE2iAk2tMWr95EzC9pmVB4L/g94GjYiwJckwmvpge9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMn32yozihCbUGaz68hM/ZKZFUSWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNzY4ZmUxN2EtMmJkYi0z
MjIxLWFkZjMtYzAwZDBiNWJkYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTNCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7rMER2KC7CHjfli7BBMuvzzSdnCaHwflheUjClpneZdDpo5aYXqxSE
/Lyi7w9pENgN304aLrnReyYNQm0CkFq932+QtiYo0V0OXmzY1Mx2z3j2andGQ/sA
TLHWh8HdC7pZefoIBM11ZE7R5CW5XUFNoL3rDgOP/2AvLs4eIRkZF3uEvTnXFJtP
Tv3mh+1Mgysr4K3TSKghsDmxXay+lyb7zfVS6HAsItF7rpClXPvXLJ/wauWYrYjl
Hx+UDiw/amHtyThIZSaGikwK0QiyPnlaoiH3PXtXaisFuP2BYo2s3yR+jxGysQAU
mIADdicFsf4dFt4wEz5cBT3xZYEusi8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:26:57 2025 by rpki-client