Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/189a7a4b-2e62-3420-8747-80aab84fcb06.roa
File:                     189a7a4b-2e62-3420-8747-80aab84fcb06.roa (raw, json)
Hash identifier:          jptvq0zN6QWrlB9s6rcgkomnsVRHnd9IxdeXPrvlY/M=
Subject key identifier:   D1:27:0B:AD:50:CB:12:48:F0:4D:29:E7:0F:D2:7B:A4:B7:75:C4:77
Certificate issuer:       /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial:       010D0C9F43285849ED4FCD36D73686C403E34380
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/189a7a4b-2e62-3420-8747-80aab84fcb06.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     18986
IP address blocks:        66.51.160.0/24 maxlen: 24
                          66.51.161.0/24 maxlen: 24
                          66.51.162.0/24 maxlen: 24
                          66.51.163.0/24 maxlen: 24
                          66.51.164.0/24 maxlen: 24
                          66.51.165.0/24 maxlen: 24
                          66.51.166.0/24 maxlen: 24
                          66.51.167.0/24 maxlen: 24
                          66.51.168.0/24 maxlen: 24
                          66.51.169.0/24 maxlen: 24
                          66.51.170.0/24 maxlen: 24
                          66.51.171.0/24 maxlen: 24
                          66.51.172.0/24 maxlen: 24
                          66.51.173.0/24 maxlen: 24
                          66.51.174.0/24 maxlen: 24
                          66.51.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cd:36:d7:36:86:c4:03:e3:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=8496f811-b6c2-4ebd-9e81-3634dd18b5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:66:16:dd:52:93:22:36:3a:47:73:c1:a7:
                    da:ac:e4:4e:9b:58:97:0a:75:91:3f:f3:55:a0:56:
                    5f:56:3a:75:e6:12:21:dc:30:e2:af:e8:62:e0:f1:
                    a7:c4:42:bf:3d:f6:da:10:90:4f:5e:ee:45:95:7d:
                    d4:4f:01:a2:66:18:fa:5f:3c:ff:0b:b0:43:99:c5:
                    f7:7c:72:f5:c6:1f:97:ba:8b:c7:fa:33:62:b1:75:
                    7a:13:b8:a0:75:65:10:0e:ae:35:93:d6:c4:2c:55:
                    62:0f:e4:4e:57:8f:c7:69:2d:4f:b3:1b:13:13:0a:
                    3a:de:90:5d:10:4c:6f:8b:e6:28:84:70:71:e5:1b:
                    8f:35:c3:32:27:0e:fe:ab:c1:b5:0b:a6:b1:40:9b:
                    cb:dc:ca:e0:d5:3f:2c:b6:41:09:cf:0a:0c:e2:f3:
                    4b:85:ed:f5:46:f6:c4:da:db:a6:4c:20:78:df:3a:
                    e9:6a:ae:96:d6:10:1b:cb:4e:63:b3:41:f3:f7:8a:
                    f7:d2:f5:82:4b:07:57:4b:39:02:8e:0b:4a:bd:17:
                    4a:eb:78:cf:13:08:b4:4f:6c:90:86:d4:62:63:db:
                    f7:5d:f2:a0:1d:95:fd:1a:3d:a4:90:33:dc:a5:ee:
                    f3:cf:8c:d5:48:4b:d4:83:a6:39:e4:6e:a7:7a:9b:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:27:0B:AD:50:CB:12:48:F0:4D:29:E7:0F:D2:7B:A4:B7:75:C4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/189a7a4b-2e62-3420-8747-80aab84fcb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:af:af:61:26:c1:e3:08:f3:93:df:20:38:4f:ca:6c:bd:0c:
         72:98:be:b1:f8:f5:53:f1:2a:ea:75:42:9b:35:5f:6e:cb:85:
         9d:6a:7f:25:1e:7c:84:fb:9a:07:8a:5d:36:09:ed:60:18:f2:
         f3:43:f4:02:51:ef:e9:7a:a6:0f:01:7c:55:72:01:2f:53:cb:
         d9:a6:97:f2:dc:17:2e:a1:30:72:41:d5:5e:09:74:09:a1:12:
         1d:11:f0:f0:49:35:35:2b:97:66:d6:82:20:13:82:c7:31:5f:
         38:3f:40:df:53:ec:3e:cd:04:98:5e:35:9a:8a:00:8c:6a:a8:
         bc:d7:22:4a:d6:28:4a:e1:5f:03:7f:0f:2b:ab:bb:20:1f:8d:
         45:15:66:1e:3d:89:68:e0:ba:3d:4e:2d:6f:da:ce:f7:d8:4c:
         f9:67:3a:1d:88:03:6d:f8:33:c4:bc:68:4b:72:47:23:45:d4:
         27:77:d4:0b:fb:33:fa:1a:d8:c6:41:36:39:15:06:55:7b:0e:
         cb:e5:29:99:9b:07:75:7a:c0:82:06:b8:6e:e1:a5:99:80:18:
         d7:42:10:56:b4:fc:4e:f9:5a:f1:80:bf:d3:8d:cc:84:72:e3:
         d9:8e:54:ec:1f:6a:6a:0e:51:30:c9:16:46:44:3b:55:ec:5d:
         e5:26:46:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8021zaGxAPjQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4
ZmMxMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
ODQ5NmY4MTEtYjZjMi00ZWJkLTllODEtMzYzNGRkMThiNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSxmFt1SkyI2OkdzwafarOROm1iXCnWRP/NV
oFZfVjp15hIh3DDir+hi4PGnxEK/PfbaEJBPXu5FlX3UTwGiZhj6Xzz/C7BDmcX3
fHL1xh+XuovH+jNisXV6E7igdWUQDq41k9bELFViD+ROV4/HaS1PsxsTEwo63pBd
EExvi+YohHBx5RuPNcMyJw7+q8G1C6axQJvL3Mrg1T8stkEJzwoM4vNLhe31RvbE
2tumTCB43zrpaq6W1hAby05js0Hz94r30vWCSwdXSzkCjgtKvRdK63jPEwi0T2yQ
htRiY9v3XfKgHZX9Gj2kkDPcpe7zz4zVSEvUg6Y55G6nepvYhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEnC61QyxJI8E0p5w/Se6S3dcR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz
ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMTg5YTdhNGItMmU2Mi0z
NDIwLTg3NDctODBhYWI4NGZjYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh
ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl
OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk
MjVlZThmYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuvr2EmweMI85PfIDhPymy9DHKYvrH49VPxKup1Qps1X27LhZ1qfyUe
fIT7mgeKXTYJ7WAY8vND9AJR7+l6pg8BfFVyAS9Ty9mml/LcFy6hMHJB1V4JdAmh
Eh0R8PBJNTUrl2bWgiATgscxXzg/QN9T7D7NBJheNZqKAIxqqLzXIkrWKErhXwN/
DyuruyAfjUUVZh49iWjguj1OLW/azvfYTPlnOh2IA234M8S8aEtyRyNF1Cd31Av7
M/oa2MZBNjkVBlV7DsvlKZmbB3V6wIIGuG7hpZmAGNdCEFa0/E75WvGAv9ONzIRy
49mOVOwfamoOUTDJFkZEO1XsXeUmRsA=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:43:40 2025 by rpki-client