Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12e947ec-50a4-378b-8061-44d381d9b318.roa
File:                     12e947ec-50a4-378b-8061-44d381d9b318.roa (raw, json)
Hash identifier:          atHlvXloC7/UjES6ngIgb3261mw3xAjFhjTInIQXrWg=
Subject key identifier:   95:89:E8:D4:DD:74:EC:0E:FA:6E:FE:63:F8:93:16:12:5D:77:A7:69
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B59A1CE0BBF60559DB0077A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12e947ec-50a4-378b-8061-44d381d9b318.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     203
IP address blocks:        66.54.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:ce:0b:bf:60:55:9d:b0:07:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=262a702c-0e70-45f0-bd25-4766d2b8102c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:c2:57:d8:4a:cf:05:b9:66:3a:59:5d:cd:
                    74:7f:c8:14:ea:d6:51:a9:f3:d9:a9:93:23:95:40:
                    e9:55:dd:28:7c:e1:da:1b:c8:c5:27:03:1c:52:56:
                    b7:74:de:8e:f9:f8:f4:69:0d:1d:c6:d5:b5:b4:8a:
                    76:5b:e0:40:f7:51:47:2a:c7:8a:89:5b:ea:95:5a:
                    9e:b4:15:0b:e4:ad:01:75:5a:f2:8d:4f:4a:42:78:
                    82:f9:f2:88:a9:50:61:51:23:b2:43:a1:6c:47:89:
                    c7:7a:07:a7:44:c2:0e:15:76:c6:a1:43:c6:85:83:
                    00:d6:d5:03:4b:7d:ef:ff:cb:2f:a3:2a:84:f9:1c:
                    bd:44:62:4a:02:3b:ba:61:f8:5c:e5:8f:2e:98:b2:
                    e7:6f:7b:5f:6b:cb:20:ed:ee:0b:68:d5:38:ac:55:
                    8c:e3:5b:c2:97:c2:d7:dc:33:b0:48:f7:96:57:8c:
                    30:37:fd:e4:b0:17:9c:aa:58:01:55:7e:36:c0:9b:
                    1b:0c:9a:fa:01:b1:a7:f9:ce:19:21:ce:0e:b5:37:
                    3a:84:42:a3:7c:26:7d:b8:17:50:c5:3f:86:f5:7a:
                    fb:75:0f:85:48:2c:d5:56:24:51:08:f8:38:d9:65:
                    8a:4d:ee:26:17:08:7f:0f:b2:22:37:54:d5:be:38:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:E8:D4:DD:74:EC:0E:FA:6E:FE:63:F8:93:16:12:5D:77:A7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12e947ec-50a4-378b-8061-44d381d9b318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:39:54:8d:26:8b:7a:b0:38:27:8e:d5:14:d5:8b:38:b6:
         5d:ec:7b:6b:0f:ce:77:42:59:1c:7e:9a:16:f3:5b:be:6d:53:
         bb:70:43:ce:4d:55:7c:86:2b:8e:38:eb:1b:7d:84:0a:51:8a:
         49:7f:04:f0:8c:7c:2a:2c:26:a6:e9:69:5b:cf:19:ea:d6:3d:
         0a:79:e7:84:8b:12:a8:73:0e:9b:7b:e3:75:b5:02:56:b9:81:
         bc:f0:7c:e2:d8:f6:0a:2c:f5:8a:3a:4e:4e:bf:2d:da:42:a4:
         89:bd:2a:4a:48:53:f1:37:ab:d8:eb:1f:c0:de:22:44:9b:87:
         a3:f6:09:6f:60:ed:d1:1d:ed:3b:52:9d:6b:d2:52:38:fc:c0:
         be:37:40:90:f3:89:d8:1d:a9:a3:50:96:85:47:17:92:5f:51:
         9f:a0:5f:2d:13:fd:5b:7e:a9:a6:ea:6a:84:4a:1b:80:72:89:
         ce:93:53:98:33:e3:0d:44:05:a8:67:9f:0a:a4:7e:38:76:98:
         e2:77:29:94:e5:d8:db:9a:94:82:67:88:92:c9:99:49:0e:6f:
         bb:0f:8c:f0:21:22:52:f1:19:a7:23:63:fa:6d:c3:11:71:df:
         35:83:6a:be:c8:22:3a:e5:12:60:c2:f4:ce:ed:50:eb:fc:c5:
         26:6d:d9:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoc4Lv2BVnbAHegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
MjYyYTcwMmMtMGU3MC00NWYwLWJkMjUtNDc2NmQyYjgxMDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK3CV9hKzwW5ZjpZXc10f8gU6tZRqfPZqZMj
lUDpVd0ofOHaG8jFJwMcUla3dN6O+fj0aQ0dxtW1tIp2W+BA91FHKseKiVvqlVqe
tBUL5K0BdVryjU9KQniC+fKIqVBhUSOyQ6FsR4nHegenRMIOFXbGoUPGhYMA1tUD
S33v/8svoyqE+Ry9RGJKAju6Yfhc5Y8umLLnb3tfa8sg7e4LaNU4rFWM41vCl8LX
3DOwSPeWV4wwN/3ksBecqlgBVX42wJsbDJr6AbGn+c4ZIc4OtTc6hEKjfCZ9uBdQ
xT+G9Xr7dQ+FSCzVViRRCPg42WWKTe4mFwh/D7IiN1TVvjj++wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWJ6NTddOwO+m7+Y/iTFhJdd6dpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTJlOTQ3ZWMtNTBhNC0z
NzhiLTgwNjEtNDRkMzgxZDliMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjY4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3hOVSNJot6sDgnjtUU1Ys4tl3se2sPzndCWRx+mhbzW75tU7twQ85N
VXyGK4446xt9hApRikl/BPCMfCosJqbpaVvPGerWPQp554SLEqhzDpt743W1Ala5
gbzwfOLY9gos9Yo6Tk6/LdpCpIm9KkpIU/E3q9jrH8DeIkSbh6P2CW9g7dEd7TtS
nWvSUjj8wL43QJDzidgdqaNQloVHF5JfUZ+gXy0T/Vt+qabqaoRKG4Byic6TU5gz
4w1EBahnnwqkfjh2mOJ3KZTl2NualIJniJLJmUkOb7sPjPAhIlLxGacjY/ptwxFx
3zWDar7IIjrlEmDC9M7tUOv8xSZt2ek=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:38 2025 by rpki-client