Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa
File:                     be06885a-4b98-309e-9449-a3394506a19d.roa (raw, json)
Hash identifier:          PObSDZ7Ay7+K+y3/JHL6hF4xNzjT+F7rJ38KgpZ38LQ=
Subject key identifier:   F6:BB:C6:2F:D3:1B:BB:4A:13:7D:57:8E:01:5B:70:A4:C5:E9:AA:A2
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584B7C875FF5F727446CC640C100
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     400610
IP address blocks:        66.219.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5f:f5:f7:27:44:6c:c6:40:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=99d91a22-ede1-4384-9901-0d8c075e4177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:74:2d:b3:9d:98:08:01:42:03:4c:92:85:
                    1f:1c:29:9c:94:a1:dc:09:bd:f3:ca:20:2b:e7:88:
                    af:1c:dc:25:fe:67:4a:bd:22:2a:10:7f:78:e7:d4:
                    f5:67:5d:68:72:96:c5:25:d7:59:45:01:9c:b6:c5:
                    3b:6b:1f:2f:ba:26:9d:fe:de:13:6b:5c:6b:56:97:
                    c0:d8:06:d3:3e:94:f6:d3:65:f7:53:51:13:21:a8:
                    42:6b:c3:d9:3c:cb:c8:f9:92:cd:f9:32:f2:e9:9b:
                    51:ee:fd:87:67:f7:6d:77:3a:e2:dc:a8:86:b5:69:
                    98:b6:5b:02:71:8a:07:0d:7c:f8:aa:a7:c7:43:df:
                    f1:dc:09:bf:d0:a4:de:2e:f2:08:8d:cb:c1:25:8c:
                    c6:ac:1b:9e:19:da:a5:56:fb:3a:fd:d3:b2:60:6f:
                    ea:b4:e4:59:61:49:f5:d2:3b:89:09:17:28:73:82:
                    96:03:d1:ac:47:0e:14:ba:ca:8d:a9:83:cd:ec:e2:
                    2b:d5:f3:89:82:8b:95:4d:5b:79:c1:71:01:28:0b:
                    bc:87:64:0b:9b:20:eb:32:4e:d0:c6:3c:fc:fd:83:
                    a0:74:ff:09:66:77:30:93:28:13:f2:f7:b3:09:4e:
                    ee:52:a1:fd:e8:d6:d6:60:0a:b4:a5:df:20:05:bf:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BB:C6:2F:D3:1B:BB:4A:13:7D:57:8E:01:5B:70:A4:C5:E9:AA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:70:6c:a0:0f:ba:4c:6b:9d:08:c7:e4:52:39:5d:29:9d:4a:
         e3:b1:cd:0a:e2:ce:7c:2f:47:88:4e:6c:de:07:85:f5:45:72:
         31:1b:b5:ae:3e:83:72:c1:97:e0:9a:0e:69:df:ca:ea:a3:b4:
         9b:6a:3a:a1:fc:ad:03:6b:c4:3b:93:c5:72:a6:45:72:6d:d7:
         9e:3d:1b:46:54:da:96:81:03:d4:aa:76:a2:09:d7:4b:85:07:
         61:90:82:1c:74:b2:72:45:66:a9:8d:73:ee:13:85:ea:bc:eb:
         e8:3d:ad:69:d8:94:dc:db:28:82:8d:98:98:37:04:37:a3:6d:
         29:cf:be:e6:dd:f0:23:71:70:8b:5c:63:b3:6a:a6:ca:e2:3d:
         3f:d3:70:46:65:3c:ee:6a:dd:74:63:d7:cc:9a:79:fb:67:8b:
         82:26:5f:eb:50:9a:55:70:93:b8:1a:99:93:a7:60:dc:07:8d:
         a5:4e:71:b2:79:6d:a1:46:42:3c:44:d5:ca:72:7c:04:71:7d:
         ad:15:fd:54:89:6a:1a:ab:45:a5:29:67:5f:3a:5e:9e:78:75:
         cb:a9:f7:d5:9c:6e:9d:29:04:8b:3a:65:1e:d6:8a:7c:ec:c6:
         ed:a7:e5:b7:86:12:0e:76:eb:7d:1f:20:19:f3:d2:6d:7b:ad:
         df:bb:64:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1/19ydEbMZAwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm
MmUzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
OTlkOTFhMjItZWRlMS00Mzg0LTk5MDEtMGQ4YzA3NWU0MTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YR0LbOdmAgBQgNMkoUfHCmclKHcCb3zyiAr
54ivHNwl/mdKvSIqEH9459T1Z11ocpbFJddZRQGctsU7ax8vuiad/t4Ta1xrVpfA
2AbTPpT202X3U1ETIahCa8PZPMvI+ZLN+TLy6ZtR7v2HZ/dtdzri3KiGtWmYtlsC
cYoHDXz4qqfHQ9/x3Am/0KTeLvIIjcvBJYzGrBueGdqlVvs6/dOyYG/qtORZYUn1
0juJCRcoc4KWA9GsRw4UusqNqYPN7OIr1fOJgouVTVt5wXEBKAu8h2QLmyDrMk7Q
xjz8/YOgdP8JZncwkygT8vezCU7uUqH96NbWYAq0pd8gBb+6EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPa7xi/TG7tKE31XjgFbcKTF6aqiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1
NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYmUwNjg4NWEtNGI5OC0z
MDllLTk0NDktYTMzOTQ1MDZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5
YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4
ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi
YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFwbKAPukxrnQjH5FI5XSmdSuOxzQriznwvR4hObN4HhfVFcjEbta4+
g3LBl+CaDmnfyuqjtJtqOqH8rQNrxDuTxXKmRXJt1549G0ZU2paBA9SqdqIJ10uF
B2GQghx0snJFZqmNc+4Theq86+g9rWnYlNzbKIKNmJg3BDejbSnPvubd8CNxcItc
Y7NqpsriPT/TcEZlPO5q3XRj18yaeftni4ImX+tQmlVwk7gamZOnYNwHjaVOcbJ5
baFGQjxE1cpyfARxfa0V/VSJahqrRaUpZ186Xp54dcup99Wcbp0pBIs6ZR7Winzs
xu2n5beGEg52630fIBnz0m17rd+7ZNc=
-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:04 2025 by rpki-client