Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa
File:                     d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa (raw, json)
Hash identifier:          mwn/eYlvpnqmA5gp1rEkWBBIXIpPd9zrGX/vQMsNku0=
Subject key identifier:   58:40:8B:39:E6:5D:54:3D:A7:93:E7:4D:68:61:A7:29:C5:03:52:1B
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F432858498B99D2FE4B3E80BC9191C490
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     12956
IP address blocks:        66.119.64.0/19 maxlen: 19
                          66.201.160.0/19 maxlen: 19
                          66.249.192.0/19 maxlen: 19
                          198.52.248.0/21 maxlen: 21
                          216.184.96.0/19 maxlen: 19
                          2001:1820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d2:fe:4b:3e:80:bc:91:91:c4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=fdd90c02-3286-449b-8436-4856fe4e5d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:f8:72:a7:68:da:6d:3f:4a:8a:25:b4:4e:
                    a0:0a:2a:f2:3a:a8:35:cb:4c:93:c4:d5:6a:eb:1f:
                    4a:13:b1:6f:a1:ce:4f:d4:69:fd:38:f6:27:4f:c8:
                    65:71:79:69:4e:4c:1d:cf:c9:07:31:bb:61:f0:fc:
                    19:eb:8e:34:70:18:c9:89:0d:65:70:48:b4:8f:dd:
                    72:fa:11:02:f1:91:11:01:e3:02:9c:f4:db:c8:a5:
                    32:7d:ce:69:a9:6e:ea:f2:e6:54:f2:b4:c3:5b:12:
                    08:30:3b:7c:16:a5:2c:52:1f:7e:6e:a1:ab:ef:21:
                    e7:46:5e:8f:d5:43:ad:ce:f4:8b:6e:49:72:58:77:
                    20:a2:6e:94:31:25:44:db:7e:08:b3:80:a1:23:80:
                    d7:db:7d:f6:f9:ff:97:07:57:22:72:3d:53:9c:42:
                    cc:4a:4f:fa:99:86:e3:65:1e:f6:5c:21:56:64:b0:
                    13:8e:3b:5f:9f:e7:44:b2:21:88:b1:4a:1b:ab:2b:
                    3f:4f:d3:cb:32:2f:67:5a:4b:54:67:c8:30:d9:10:
                    ca:11:3b:d0:56:ea:4f:fe:1f:b5:72:61:bc:9c:1c:
                    bc:97:5d:df:1e:73:96:d4:1d:20:ce:33:50:8c:4b:
                    92:a2:18:bb:dd:8e:33:c3:1b:ee:ef:9f:ca:ef:51:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:40:8B:39:E6:5D:54:3D:A7:93:E7:4D:68:61:A7:29:C5:03:52:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/d5ed1c68-c170-38bc-a6ec-5f8c2987fe4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.64.0/19
                  66.201.160.0/19
                  66.249.192.0/19
                  198.52.248.0/21
                  216.184.96.0/19
                IPv6:
                  2001:1820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:a1:fe:b4:2a:20:a2:ca:54:5d:a8:ca:d3:24:60:a7:86:
         fd:f1:0a:a4:ac:61:29:f8:3d:2b:bb:c0:4b:d2:0f:1c:f5:85:
         b8:59:25:89:54:4d:a4:89:54:b6:9b:34:ff:8b:07:c7:ca:04:
         36:90:48:e5:bd:fe:e0:54:78:4d:bd:73:2d:f0:04:2f:b6:19:
         96:37:f0:3d:3c:3a:68:2d:72:33:79:bc:ac:43:b8:f6:08:fe:
         ad:0f:0a:9e:61:c3:6d:a1:a4:42:34:b2:d2:d2:28:a3:a1:0a:
         52:bf:a7:63:89:c7:03:3d:db:2e:b8:90:65:21:ab:2f:05:62:
         93:63:92:93:5e:bb:de:bd:16:fd:63:6d:e3:5d:b7:ec:06:92:
         9a:1b:be:74:13:c8:be:7a:ab:b1:00:69:44:c1:5d:c6:5f:b0:
         a6:ae:ad:58:b8:13:e9:bf:5e:7d:46:bd:bd:4a:18:e4:3f:fd:
         38:a4:64:42:34:d1:fe:85:8b:fa:b8:cf:a2:79:c9:b7:66:af:
         63:2e:4f:bd:43:f5:73:87:6e:93:66:7a:8c:f0:eb:76:a5:e1:
         b4:95:1b:ba:67:78:fb:af:ba:f5:ca:7e:37:a2:7b:ee:96:fe:
         db:4b:51:89:9c:49:a9:d8:c7:92:40:5e:26:a2:86:82:88:17:
         90:c1:e1:8b
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEmLmdL+Sz6AvJGRxJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3
NjVjMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZmRkOTBjMDItMzI4Ni00NDliLTg0MzYtNDg1NmZlNGU1ZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iT4cqdo2m0/SooltE6gCiryOqg1y0yTxNVq
6x9KE7Fvoc5P1Gn9OPYnT8hlcXlpTkwdz8kHMbth8PwZ6440cBjJiQ1lcEi0j91y
+hEC8ZERAeMCnPTbyKUyfc5pqW7q8uZU8rTDWxIIMDt8FqUsUh9+bqGr7yHnRl6P
1UOtzvSLbklyWHcgom6UMSVE234Is4ChI4DX2332+f+XB1cicj1TnELMSk/6mYbj
ZR72XCFWZLATjjtfn+dEsiGIsUobqys/T9PLMi9nWktUZ8gw2RDKETvQVupP/h+1
cmG8nBy8l13fHnOW1B0gzjNQjEuSohi73Y4zwxvu75/K71FJCQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFFhAiznmXVQ9p5PnTWhhpynFA1IbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj
MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvZDVlZDFjNjgtYzE3MC0z
OGJjLWE2ZWMtNWY4YzI5ODdmZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj
MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi
NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl
MTFiYjc2NWMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFQndAAwQF
QsmgAwQFQvnAAwQDxjT4AwQF2LhgMA0EAgACMAcDBQAgARggMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD7T
of60KiCiylRdqMrTJGCnhv3xCqSsYSn4PSu7wEvSDxz1hbhZJYlUTaSJVLabNP+L
B8fKBDaQSOW9/uBUeE29cy3wBC+2GZY38D08OmgtcjN5vKxDuPYI/q0PCp5hw22h
pEI0stLSKKOhClK/p2OJxwM92y64kGUhqy8FYpNjkpNeu969Fv1jbeNdt+wGkpob
vnQTyL56q7EAaUTBXcZfsKaurVi4E+m/Xn1Gvb1KGOQ//TikZEI00f6Fi/q4z6J5
ybdmr2MuT71D9XOHbpNmeozw63al4bSVG7pnePuvuvXKfjeie+6W/ttLUYmcSanY
x5JAXiaihoKIF5DB4Ys=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:22:29 2025 by rpki-client