Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4076ab5a-bc92-3eb0-a706-8c0cb8840641.roa
File:                     4076ab5a-bc92-3eb0-a706-8c0cb8840641.roa (raw, json)
Hash identifier:          C7eLzlyTnY98C0utv8z+RDG9QH6EKoAP4YxZnO0JDEc=
Subject key identifier:   6A:68:21:1E:29:8C:36:DC:F3:17:0F:4D:6E:8E:E1:00:45:80:BC:7C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C370282F51228AE3BDF4980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4076ab5a-bc92-3eb0-a706-8c0cb8840641.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397217
IP address blocks:        199.7.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:02:82:f5:12:28:ae:3b:df:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9cddf53d-57bd-4efe-9fb3-f4680ada1c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:94:0c:e2:90:b3:4b:68:66:e3:a9:51:f1:
                    cf:10:0a:08:05:59:c9:33:b3:8e:e7:71:ef:d9:79:
                    cf:d9:18:7e:58:cb:af:5a:b3:b9:cc:9e:a1:6b:0c:
                    07:a9:aa:7e:e0:b0:00:35:97:55:f1:a4:ca:67:e8:
                    e0:79:f9:67:4c:be:21:4f:1b:53:e8:91:0e:5a:2c:
                    4b:e2:23:68:27:93:1d:9c:30:57:42:2f:c0:91:1e:
                    6a:41:5a:9f:23:97:7e:d2:53:9f:f2:1b:76:53:a4:
                    3f:34:a9:f3:08:4e:0a:ce:d6:31:5b:dd:c3:df:98:
                    41:b9:57:fd:93:c8:e0:52:e9:06:84:3d:bb:c2:a5:
                    8e:c9:fc:6f:f8:48:44:e2:59:06:ca:26:0c:34:2f:
                    fd:77:ec:c6:75:f9:26:72:ec:1d:2f:81:87:51:d8:
                    44:16:d3:86:94:09:33:dc:e3:7c:03:68:c6:cc:53:
                    92:2e:36:e2:5f:af:b8:7b:96:f5:09:6f:48:5b:0a:
                    33:6f:45:a0:bd:ed:95:94:28:2e:d3:32:ec:9d:ce:
                    7f:d7:fa:b0:ec:9b:b1:94:61:1e:21:0d:c3:09:3c:
                    a7:25:65:6d:df:21:f7:ac:b5:5f:ce:ee:fc:e7:91:
                    86:6d:cb:00:e5:e6:25:a4:3b:c5:4a:b4:05:8b:d1:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:68:21:1E:29:8C:36:DC:F3:17:0F:4D:6E:8E:E1:00:45:80:BC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4076ab5a-bc92-3eb0-a706-8c0cb8840641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:04:69:3f:53:00:20:e5:44:c6:41:c9:4d:1f:55:42:c1:
         2a:9f:83:7c:4c:6f:7f:69:13:dd:ef:ec:0c:b3:3e:bd:17:67:
         d7:ea:dd:57:b2:da:d9:38:6f:1b:6d:74:8f:05:8f:87:b2:ff:
         57:aa:de:3e:7b:49:53:a2:5e:26:f7:93:12:93:bb:a1:57:5c:
         6e:98:70:a0:d7:c2:47:cc:74:f4:e8:4a:91:76:f4:56:14:be:
         c3:2c:ca:da:ef:85:74:72:8d:0b:e8:93:ca:12:15:75:8d:4e:
         5c:fb:44:34:19:d4:5f:48:ed:11:b6:a4:82:8e:13:4f:26:69:
         69:34:39:d7:20:fe:d0:78:60:18:6c:a7:fe:37:e9:70:13:32:
         f3:cb:d4:34:49:33:6b:eb:7b:3f:75:c9:46:c2:51:20:84:29:
         6b:de:e5:90:5d:4a:7f:44:68:17:9b:8b:6e:fe:9e:e5:94:4d:
         45:69:9b:bf:85:60:c5:67:a1:bd:cd:ce:ea:1d:2e:bb:9f:ac:
         e8:fe:75:6f:fb:f0:e7:40:e0:1a:e5:c9:41:f1:c1:ed:33:0f:
         8d:06:e0:ea:ed:a5:5b:59:30:79:a9:52:f3:05:b7:22:6c:a9:
         1b:6d:d8:28:83:12:b4:72:87:24:65:6a:23:76:6a:e8:94:c8:
         22:65:03:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwKC9RIorjvfSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OWNkZGY1M2QtNTdiZC00ZWZlLTlmYjMtZjQ2ODBhZGExYzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9yUDOKQs0toZuOpUfHPEAoIBVnJM7OO53Hv
2XnP2Rh+WMuvWrO5zJ6hawwHqap+4LAANZdV8aTKZ+jgeflnTL4hTxtT6JEOWixL
4iNoJ5MdnDBXQi/AkR5qQVqfI5d+0lOf8ht2U6Q/NKnzCE4KztYxW93D35hBuVf9
k8jgUukGhD27wqWOyfxv+EhE4lkGyiYMNC/9d+zGdfkmcuwdL4GHUdhEFtOGlAkz
3ON8A2jGzFOSLjbiX6+4e5b1CW9IWwozb0Wgve2VlCgu0zLsnc5/1/qw7JuxlGEe
IQ3DCTynJWVt3yH3rLVfzu7855GGbcsA5eYlpDvFSrQFi9H4VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpoIR4pjDbc8xcPTW6O4QBFgLx8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDA3NmFiNWEtYmM5Mi0z
ZWIwLWE3MDYtOGMwY2I4ODQwNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5LBGk/UwAg5UTGQclNH1VCwSqfg3xMb39pE93v7AyzPr0XZ9fq3Vey
2tk4bxttdI8Fj4ey/1eq3j57SVOiXib3kxKTu6FXXG6YcKDXwkfMdPToSpF29FYU
vsMsytrvhXRyjQvok8oSFXWNTlz7RDQZ1F9I7RG2pIKOE08maWk0Odcg/tB4YBhs
p/436XATMvPL1DRJM2vrez91yUbCUSCEKWve5ZBdSn9EaBebi27+nuWUTUVpm7+F
YMVnob3NzuodLrufrOj+dW/78OdA4BrlyUHxwe0zD40G4OrtpVtZMHmpUvMFtyJs
qRtt2CiDErRyhyRlaiN2auiUyCJlA4w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:43:58 2025 by rpki-client