Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/f7c93efb-5658-39a6-8335-07193fbbe527.roa
File:                     f7c93efb-5658-39a6-8335-07193fbbe527.roa (raw, json)
Hash identifier:          FNzh16/MThbun8M4K5fepFqbMUASWd8fPZyNHQmaTYE=
Subject key identifier:   1A:EF:37:09:F3:42:03:CE:E5:35:29:15:CB:BD:91:B2:20:B6:85:34
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F43285849BC74ABFD0AB5502FF1019500
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/f7c93efb-5658-39a6-8335-07193fbbe527.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     400610
IP address blocks:        66.219.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ab:fd:0a:b5:50:2f:f1:01:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=7ac59ea9-4017-4216-ac9d-08d87e479832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:94:0d:70:80:d7:bd:28:87:82:d4:32:63:
                    47:7e:65:bf:4d:48:22:b2:af:58:1e:8a:55:45:35:
                    69:fb:eb:06:4d:e1:4e:ae:02:2b:d4:12:98:d4:84:
                    f9:63:06:a7:01:48:8f:9a:c7:af:d7:23:a7:5f:4d:
                    28:ce:75:46:2d:0f:49:b0:58:a0:5e:ff:24:d6:d4:
                    68:86:a5:2c:75:9f:68:e8:8c:14:00:1e:9c:d9:9c:
                    16:b6:7d:76:83:e8:94:b1:a4:17:9b:2d:18:b1:84:
                    6f:e9:7f:01:5b:6b:7e:d3:94:03:e5:c4:68:cc:92:
                    c6:58:3b:de:78:37:b8:f4:dc:2a:3d:06:a4:52:be:
                    3b:3a:bd:75:f8:6b:04:30:5a:f8:b2:fa:a4:af:47:
                    ba:fe:b2:f1:70:29:2c:0f:a2:fe:43:c1:03:3f:4a:
                    42:d6:c0:60:0d:e9:6c:45:f8:b3:f7:af:90:c1:27:
                    5a:34:1c:7b:9b:ff:c1:76:3e:fe:61:c6:ce:02:ac:
                    1d:bc:6d:41:85:ed:25:e2:7b:7c:5a:37:7c:5f:17:
                    6d:34:62:43:b0:f3:26:64:b4:cd:df:58:9d:90:cc:
                    68:39:49:cf:d6:bc:8a:8e:ff:2b:ae:c1:f5:96:f6:
                    6c:b9:ba:ac:b0:ba:a5:6f:a6:be:28:c9:c9:d3:7d:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:37:09:F3:42:03:CE:E5:35:29:15:CB:BD:91:B2:20:B6:85:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/f7c93efb-5658-39a6-8335-07193fbbe527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:05:fe:4c:1f:34:2b:b8:55:96:89:71:ef:21:ea:75:5c:
         d6:de:80:9d:7b:0b:fa:0f:63:5e:99:7a:d1:98:de:bc:db:1f:
         f9:db:d5:7e:fa:1f:9e:dd:f5:33:96:77:13:b4:d0:77:96:56:
         a0:e8:09:7a:fd:a7:fb:20:b0:b3:9a:34:14:ad:ec:b2:47:45:
         a4:28:23:de:4b:66:06:92:2f:be:ea:b3:b1:a0:02:c2:1b:9b:
         ba:93:c1:f1:5b:5d:f0:10:43:19:31:50:ce:b5:ed:5a:d1:9a:
         d8:76:e8:fe:81:3d:6a:96:84:7d:09:bb:22:17:95:39:92:c7:
         3b:4c:7e:44:d3:29:90:2d:0f:d3:cd:b7:20:e3:ac:52:af:84:
         7d:f2:24:ab:f9:20:16:10:e1:1d:8e:f2:30:8c:db:f6:c3:68:
         1a:6a:2f:4d:d3:cb:dd:c6:6f:e3:6e:f3:92:b4:e6:d6:b8:59:
         5d:31:40:27:ce:51:4e:24:34:ec:a2:d7:91:2d:26:fb:22:79:
         2d:9a:8b:1b:66:df:b6:20:dd:69:af:a0:85:71:1e:9e:14:83:
         fa:be:2c:9a:b9:6b:1a:d9:da:a2:5b:1e:ed:1b:90:2d:b7:7a:
         24:a4:86:8d:89:42:17:af:b9:04:c9:42:ac:a5:8c:6b:2e:c8:
         ba:02:50:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKv9CrVQL/EBlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm
MmUzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk
N2FjNTllYTktNDAxNy00MjE2LWFjOWQtMDhkODdlNDc5ODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QOUDXCA170oh4LUMmNHfmW/TUgisq9YHopV
RTVp++sGTeFOrgIr1BKY1IT5YwanAUiPmsev1yOnX00oznVGLQ9JsFigXv8k1tRo
hqUsdZ9o6IwUAB6c2ZwWtn12g+iUsaQXmy0YsYRv6X8BW2t+05QD5cRozJLGWDve
eDe49NwqPQakUr47Or11+GsEMFr4svqkr0e6/rLxcCksD6L+Q8EDP0pC1sBgDels
Rfiz96+QwSdaNBx7m//Bdj7+YcbOAqwdvG1Bhe0l4nt8Wjd8XxdtNGJDsPMmZLTN
31idkMxoOUnP1ryKjv8rrsH1lvZsubqssLqlb6a+KMnJ031u8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrvNwnzQgPO5TUpFcu9kbIgtoU0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1
NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvZjdjOTNlZmItNTY1OC0z
OWE2LTgzMzUtMDcxOTNmYmJlNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5
YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4
ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi
YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTjBf5MHzQruFWWiXHvIep1XNbegJ17C/oPY16ZetGY3rzbH/nb1X76
H57d9TOWdxO00HeWVqDoCXr9p/sgsLOaNBSt7LJHRaQoI95LZgaSL77qs7GgAsIb
m7qTwfFbXfAQQxkxUM617VrRmth26P6BPWqWhH0JuyIXlTmSxztMfkTTKZAtD9PN
tyDjrFKvhH3yJKv5IBYQ4R2O8jCM2/bDaBpqL03Ty93Gb+Nu85K05ta4WV0xQCfO
UU4kNOyi15EtJvsieS2aixtm37Yg3WmvoIVxHp4Ug/q+LJq5axrZ2qJbHu0bkC23
eiSkho2JQhevuQTJQqyljGsuyLoCUGE=
-----END CERTIFICATE-----
Generated at Mon May 12 19:03:29 2025 by rpki-client