Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa
File:                     bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa (raw, json)
Hash identifier:          3tNhpxfsFsPrsFFudSHoeXK91u7WB2lS+K8gxN8DH6A=
Subject key identifier:   56:FE:A5:D5:6F:0D:DA:59:85:E4:74:29:35:30:33:5C:C6:26:EE:9D
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584B8EACC01EAAA1CC4B13820300
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     8038
IP address blocks:        67.221.240.0/24 maxlen: 24
                          67.221.242.0/24 maxlen: 24
                          67.221.244.0/24 maxlen: 24
                          67.221.245.0/24 maxlen: 24
                          67.221.250.0/24 maxlen: 24
                          67.221.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c0:1e:aa:a1:cc:4b:13:82:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=9e5c473d-118c-4a82-910b-848cbc098386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:5c:23:09:cb:4f:04:fc:95:cb:59:ca:3d:
                    df:e8:ac:71:91:04:ae:a4:31:d9:35:24:8d:6a:51:
                    19:94:50:c6:cd:cc:5d:db:46:af:1b:8c:0a:54:69:
                    f2:9e:83:9e:c5:a9:f7:20:7f:bb:07:9b:c0:20:6f:
                    c8:93:c0:11:9b:f2:30:77:2a:e9:cc:c7:d5:88:18:
                    8a:4c:3f:cc:0d:df:61:9e:7f:ad:17:44:d6:81:81:
                    2e:99:e8:39:87:fe:0d:28:54:80:f7:07:4a:b6:7f:
                    e9:a7:f4:9e:70:51:30:a9:7a:53:87:6e:35:21:e3:
                    8f:98:ff:00:5b:bf:60:f3:3a:7d:fb:13:5e:48:77:
                    6d:a3:d0:a7:ce:2b:63:f8:d8:5b:b3:f2:6a:60:61:
                    5b:e9:cf:e4:12:6a:a3:24:4e:60:d4:9e:02:b9:12:
                    99:a1:3d:e7:f1:24:86:05:67:db:72:0f:8e:98:bf:
                    14:65:af:9a:2e:43:2a:ee:67:63:d0:72:d8:5f:ea:
                    cd:82:29:66:35:dc:40:df:8e:2c:ea:14:e0:2d:b4:
                    e7:88:d3:55:58:d1:fe:9d:7d:c1:1b:e8:8b:80:3f:
                    1a:e2:9b:fa:51:da:1e:d3:60:36:28:c3:4c:20:f2:
                    e1:75:90:d3:cb:ae:7d:67:e7:ef:97:24:12:e8:00:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FE:A5:D5:6F:0D:DA:59:85:E4:74:29:35:30:33:5C:C6:26:EE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.240.0/24
                  67.221.242.0/24
                  67.221.244.0/23
                  67.221.250.0/24
                  67.221.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:92:e6:81:18:59:9c:22:12:5e:cb:54:9e:03:fb:b9:cc:14:
         57:36:d8:d5:8a:eb:3d:c3:f5:f9:cf:42:34:e3:76:58:00:6a:
         c5:61:32:59:ea:d6:48:65:27:4e:cf:64:ba:d2:1b:ef:0d:9a:
         fd:bb:02:c8:0d:00:93:18:74:a3:c2:62:62:b6:8b:a6:7a:41:
         f3:45:89:4d:93:72:8b:46:e4:cb:68:4b:d3:1e:b6:51:fb:a1:
         91:17:e5:9b:f0:4c:15:ef:5a:b4:67:d9:31:2c:83:99:63:d5:
         2b:9c:11:e1:15:db:d4:a6:f6:83:51:3b:ea:74:82:94:79:eb:
         e6:96:31:88:a9:54:fe:26:3e:c4:07:72:a4:a0:0f:ba:27:0d:
         38:1c:95:37:22:6d:23:07:61:b6:8f:d3:54:7d:44:9c:bc:4f:
         f7:7a:61:64:cb:09:a7:07:c7:b6:34:20:e2:e3:fa:ae:aa:f0:
         be:ba:a1:0e:ca:35:b9:73:50:fa:36:53:9d:5c:24:ab:76:80:
         8d:29:98:57:a8:bb:63:46:db:cd:f4:47:4a:6c:48:14:c4:c8:
         3a:70:12:9a:59:62:90:68:34:25:13:49:20:8a:63:df:4d:ef:
         be:d5:48:79:e3:9e:f4:24:53:06:57:34:20:90:30:0b:1b:f3:
         40:51:c8:a5
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEuOrMAeqqHMSxOCAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQzMTNjYTctODFlNy00MmUyLWJmMzgtYzk2YmI4Mzll
Y2Y0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
OWU1YzQ3M2QtMTE4Yy00YTgyLTkxMGItODQ4Y2JjMDk4Mzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmdcIwnLTwT8lctZyj3f6KxxkQSupDHZNSSN
alEZlFDGzcxd20avG4wKVGnynoOexan3IH+7B5vAIG/Ik8ARm/IwdyrpzMfViBiK
TD/MDd9hnn+tF0TWgYEumeg5h/4NKFSA9wdKtn/pp/SecFEwqXpTh241IeOPmP8A
W79g8zp9+xNeSHdto9Cnzitj+Nhbs/JqYGFb6c/kEmqjJE5g1J4CuRKZoT3n8SSG
BWfbcg+OmL8UZa+aLkMq7mdj0HLYX+rNgilmNdxA344s6hTgLbTniNNVWNH+nX3B
G+iLgD8a4pv6Udoe02A2KMNMIPLhdZDTy659Z+fvlyQS6AChQwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFb+pdVvDdpZheR0KTUwM1zGJu6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMx
M2NhNy04MWU3LTQyZTItYmYzOC1jOTZiYjgzOWVjZjQvYmI5M2MwNGUtN2VmMy0z
NjM2LWIwOWEtZjgzMDM5ZmE0YWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWQzMTNjYTctODFlNy00MmUyLWJm
MzgtYzk2YmI4MzllY2Y0L2VkMzEzY2E3LTgxZTctNDJlMi1iZjM4LWM5NmJiODM5
ZWNmNC5jcmwwHwYDVR0jBBgwFoAUXZd2euVa2pUu/hSsnovu5Oj9kt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMxM2NhNy04MWU3LTQyZTItYmYzOC1jOTZi
YjgzOWVjZjQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQ93wAwQA
Q93yAwQBQ930AwQAQ936AwQAQ93+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACWS5oEYWZwiEl7LVJ4D+7nM
FFc22NWK6z3D9fnPQjTjdlgAasVhMlnq1khlJ07PZLrSG+8Nmv27AsgNAJMYdKPC
YmK2i6Z6QfNFiU2TcotG5MtoS9MetlH7oZEX5ZvwTBXvWrRn2TEsg5lj1SucEeEV
29Sm9oNRO+p0gpR56+aWMYipVP4mPsQHcqSgD7onDTgclTcibSMHYbaP01R9RJy8
T/d6YWTLCacHx7Y0IOLj+q6q8L66oQ7KNblzUPo2U51cJKt2gI0pmFeou2NG2830
R0psSBTEyDpwEppZYpBoNCUTSSCKY99N777VSHnjnvQkUwZXNCCQMAsb80BRyKU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:37 2025 by rpki-client