Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/037efb5e-f4cf-39d0-ad31-a7b5ed50664a.roa
File:                     037efb5e-f4cf-39d0-ad31-a7b5ed50664a.roa (raw, json)
Hash identifier:          3bANOXjhZ+jTL8ac56nZHtMcOklDOA7QxGzxzju0rxg=
Subject key identifier:   23:4A:F4:CF:23:37:BE:81:58:04:5A:E6:D6:44:00:4D:0A:30:08:73
Certificate issuer:       /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
Certificate serial:       010D0C9F4328584B85EA61783F82D60861DE2200
Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/037efb5e-f4cf-39d0-ad31-a7b5ed50664a.roa
Signing time:             Tue 14 Oct 2025 21:42:28 +0000
ROA not before:           Tue 14 Oct 2025 21:42:28 +0000
ROA not after:            Mon 12 Jan 2026 22:42:28 +0000
asID:                     401319
IP address blocks:        66.51.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:ea:61:78:3f:82:d6:08:61:de:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
        Validity
            Not Before: Oct 14 21:42:28 2025 GMT
            Not After : Jan 12 22:42:28 2026 GMT
        Subject: CN=d50b01f9-75b1-4a15-8c89-99afc3224908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:9e:2c:5d:ec:23:d3:1b:24:f8:88:ba:7f:
                    f6:a8:aa:52:7d:a2:d9:1e:f4:ee:e0:02:15:34:0d:
                    e9:9b:9c:2f:cb:cc:9b:8e:68:14:12:ab:35:ae:06:
                    a3:48:0f:55:15:74:04:3e:a3:9a:98:ab:58:a0:cf:
                    92:fe:30:e0:0c:cb:36:af:8f:d1:d3:c4:61:74:bb:
                    b0:ae:ca:6e:bc:7c:e0:ee:ad:de:1a:17:f2:0f:22:
                    bd:f6:f3:2e:2b:14:48:d9:4f:a0:9a:b5:dc:ae:ab:
                    20:56:de:46:34:22:76:b4:49:6f:d3:30:81:72:16:
                    12:6e:72:e9:3e:f6:f9:40:d3:27:80:a3:ee:e1:9a:
                    66:1e:56:7f:07:3b:06:ef:be:2c:1d:7f:2e:62:fc:
                    0d:d2:34:b7:4b:94:f5:e3:14:ac:de:0b:6e:d9:14:
                    ad:f6:6f:34:e5:2d:de:38:fd:e4:bc:fc:43:dd:9b:
                    5b:8a:99:c0:2d:08:c1:ab:f7:fa:a9:c7:b0:c6:08:
                    55:e0:49:cb:34:c8:16:c5:e9:1a:60:73:b9:78:14:
                    99:e5:54:d9:e6:f2:42:9a:15:57:ea:63:22:9b:12:
                    98:a3:85:1a:bc:7b:45:51:81:00:7a:81:d2:f3:12:
                    7f:88:70:55:bb:79:9c:c4:41:ef:ef:3a:bd:b2:84:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:F4:CF:23:37:BE:81:58:04:5A:E6:D6:44:00:4D:0A:30:08:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/037efb5e-f4cf-39d0-ad31-a7b5ed50664a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b7:cb:46:6b:be:99:ea:39:f2:b8:67:d2:6a:76:2c:a7:e6:
         ad:94:6c:27:05:b3:44:9f:e7:ed:4a:51:b5:9f:ef:bd:a1:12:
         14:f1:47:13:59:aa:df:48:94:b0:a8:6a:c6:c7:b3:fd:b9:b8:
         2f:63:40:81:e1:73:83:a5:24:6c:f4:f4:98:78:92:7b:4d:66:
         62:2c:3e:80:17:a4:c5:80:ff:60:a0:a5:2c:6b:4a:69:91:a5:
         84:43:80:38:e3:48:ba:36:7a:ce:d5:07:df:b2:e2:e6:ce:26:
         94:3f:40:33:4c:e8:57:37:4b:88:2f:b1:92:08:5a:0b:ea:89:
         22:d7:86:bd:bd:ad:a1:e1:b8:27:b9:8d:3b:49:75:d0:45:39:
         06:5e:7c:df:57:de:17:6f:fa:5f:e4:33:41:be:28:e4:6a:b2:
         5b:d9:ee:6f:21:42:09:42:dc:23:bc:70:b6:94:14:45:20:e1:
         27:2e:23:36:fe:80:39:c9:aa:df:fb:f4:17:6c:4d:36:3f:fb:
         21:ea:37:c3:79:d8:f5:95:28:b2:e9:b1:8b:0a:9c:60:0c:fe:
         0f:37:84:83:97:b2:ae:f2:60:27:95:e9:dc:29:2e:3a:7c:f1:
         e9:6d:90:1d:29:82:20:9b:af:02:dd:27:fd:ef:62:3a:80:67:
         8b:e4:3a:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuF6mF4P4LWCGHeIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZkMTZhMzktNDcyYy00OGNjLWFjNGMtN2UzODU5NTBh
MGUyMB4XDTI1MTAxNDIxNDIyOFoXDTI2MDExMjIyNDIyOFowLzEtMCsGA1UEAxMk
ZDUwYjAxZjktNzViMS00YTE1LThjODktOTlhZmMzMjI0OTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2eLF3sI9MbJPiIun/2qKpSfaLZHvTu4AIV
NA3pm5wvy8ybjmgUEqs1rgajSA9VFXQEPqOamKtYoM+S/jDgDMs2r4/R08RhdLuw
rspuvHzg7q3eGhfyDyK99vMuKxRI2U+gmrXcrqsgVt5GNCJ2tElv0zCBchYSbnLp
Pvb5QNMngKPu4ZpmHlZ/BzsG774sHX8uYvwN0jS3S5T14xSs3gtu2RSt9m805S3e
OP3kvPxD3ZtbipnALQjBq/f6qcewxghV4EnLNMgWxekaYHO5eBSZ5VTZ5vJCmhVX
6mMimxKYo4UavHtFUYEAeoHS8xJ/iHBVu3mcxEHv7zq9soRZ5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNK9M8jN76BWARa5tZEAE0KMAhzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNmQx
NmEzOS00NzJjLTQ4Y2MtYWM0Yy03ZTM4NTk1MGEwZTIvMDM3ZWZiNWUtZjRjZi0z
OWQwLWFkMzEtYTdiNWVkNTA2NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzZkMTZhMzktNDcyYy00OGNjLWFj
NGMtN2UzODU5NTBhMGUyL2M2ZDE2YTM5LTQ3MmMtNDhjYy1hYzRjLTdlMzg1OTUw
YTBlMi5jcmwwHwYDVR0jBBgwFoAUTp55Qa1V1J2d113ukH33TjCqkD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNmQxNmEzOS00NzJjLTQ4Y2MtYWM0Yy03ZTM4
NTk1MGEwZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjNkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACO3y0ZrvpnqOfK4Z9Jqdiyn5q2UbCcFs0Sf5+1KUbWf772hEhTxRxNZ
qt9IlLCoasbHs/25uC9jQIHhc4OlJGz09Jh4kntNZmIsPoAXpMWA/2CgpSxrSmmR
pYRDgDjjSLo2es7VB9+y4ubOJpQ/QDNM6Fc3S4gvsZIIWgvqiSLXhr29raHhuCe5
jTtJddBFOQZefN9X3hdv+l/kM0G+KORqslvZ7m8hQglC3CO8cLaUFEUg4ScuIzb+
gDnJqt/79BdsTTY/+yHqN8N52PWVKLLpsYsKnGAM/g83hIOXsq7yYCeV6dwpLjp8
8eltkB0pgiCbrwLdJ/3vYjqAZ4vkOlk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:20:05 2025 by rpki-client