Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76cebb81-c870-3f8a-951b-ec40428eecb3.roa
File:                     76cebb81-c870-3f8a-951b-ec40428eecb3.roa (raw, json)
Hash identifier:          MdzZe13BmAV62cMXRG9ITkJ+WOhcR9qRmCJujqlYRWE=
Subject key identifier:   95:96:BE:3F:D9:40:B4:36:D6:53:FB:79:78:90:AE:33:6D:A3:57:6D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F43285849C67CB08C711158205A2D54E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76cebb81-c870-3f8a-951b-ec40428eecb3.roa
Signing time:             Wed 07 May 2025 15:15:07 +0000
ROA not before:           Wed 07 May 2025 15:15:07 +0000
ROA not after:            Tue 05 Aug 2025 15:15:07 +0000
asID:                     32043
IP address blocks:        66.227.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:7c:b0:8c:71:11:58:20:5a:2d:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 15:15:07 2025 GMT
            Not After : Aug  5 15:15:07 2025 GMT
        Subject: CN=de3559b2-4d5c-4491-91a2-b359c27e6622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:dd:9c:78:35:ca:22:df:f3:d6:e0:f4:55:
                    79:28:71:2f:77:78:98:bc:90:25:e4:58:4e:10:d8:
                    3f:cb:cd:ea:e8:6e:4c:91:83:73:65:e4:76:a3:07:
                    89:43:49:1d:71:36:c6:16:0c:72:3f:b3:48:3d:66:
                    a9:04:a1:52:46:d2:31:e8:7b:42:54:58:8c:80:58:
                    d3:bd:7c:81:9d:bc:61:ad:04:39:14:b4:ce:ba:c8:
                    60:9b:03:49:e5:08:d9:f0:73:3b:80:36:d1:a8:9d:
                    57:b4:fd:65:74:4a:f1:82:ea:38:53:f0:4d:a5:ce:
                    8e:65:49:c4:29:9d:be:37:4f:35:ea:42:d4:1a:66:
                    5c:31:a4:72:b1:35:05:b5:ae:3e:ca:fd:c0:a6:c3:
                    9f:47:1a:bf:35:a1:47:45:f2:3a:e7:e9:66:7e:ff:
                    11:17:62:72:1c:03:ca:f5:32:e2:93:4e:57:04:5c:
                    97:c2:90:36:a5:e2:2c:36:b5:b4:c1:12:a9:72:b1:
                    16:fa:20:7d:57:64:44:0b:ee:e6:61:56:b5:02:08:
                    54:0d:f0:f3:a5:8b:35:4e:22:a1:59:d7:7a:b9:fb:
                    f3:34:64:d2:a4:82:60:91:6c:84:36:50:37:83:25:
                    85:1d:2a:f2:19:57:ff:b8:d4:7f:bb:8b:4f:7e:5e:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:BE:3F:D9:40:B4:36:D6:53:FB:79:78:90:AE:33:6D:A3:57:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76cebb81-c870-3f8a-951b-ec40428eecb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:f3:6a:bc:c1:fb:3c:ce:1b:9d:4c:0a:29:9a:63:94:62:
         6f:0b:f2:6e:cf:e9:a6:fa:cf:c0:16:44:8e:89:c0:42:01:a3:
         f3:60:55:20:f3:ec:bd:1e:bb:65:6a:a3:60:bf:49:d8:84:e8:
         67:ef:fe:49:dc:c8:9c:5d:1d:91:38:72:fb:66:ec:2a:85:e0:
         bc:db:e9:af:14:a1:9f:03:96:29:5b:4e:89:df:17:8f:c5:f0:
         81:8e:d8:34:e4:c2:e4:8a:f2:6e:52:7e:aa:a9:bb:30:ea:cb:
         54:5e:d7:69:ec:40:d5:8a:e4:32:86:3e:bd:10:9e:f7:e2:ce:
         b8:97:9e:57:c4:c2:34:a2:aa:86:79:8d:d5:92:75:18:2f:21:
         bf:d3:47:1b:03:a1:92:c8:d2:16:a2:42:5e:66:77:a1:74:12:
         6f:ee:4c:b5:dc:41:48:03:dd:01:43:b0:88:c0:cd:7d:1f:69:
         b3:5e:35:50:dc:d6:ec:18:78:9b:2a:d5:f2:36:22:7e:b7:22:
         71:96:1a:b6:b2:c6:f2:49:85:d8:5e:92:a2:07:3f:02:c4:51:
         9c:c2:99:9e:bc:43:03:63:5f:6d:62:d2:f2:86:a9:5c:6c:c3:
         ac:f1:b0:50:3e:5a:01:0a:c6:ab:56:8a:9f:82:50:0f:a7:aa:
         65:d2:62:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGfLCMcRFYIFotVOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDUwNzE1MTUwN1oXDTI1MDgwNTE1MTUwN1owLzEtMCsGA1UEAxMk
ZGUzNTU5YjItNGQ1Yy00NDkxLTkxYTItYjM1OWMyN2U2NjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrHdnHg1yiLf89bg9FV5KHEvd3iYvJAl5FhO
ENg/y83q6G5MkYNzZeR2oweJQ0kdcTbGFgxyP7NIPWapBKFSRtIx6HtCVFiMgFjT
vXyBnbxhrQQ5FLTOushgmwNJ5QjZ8HM7gDbRqJ1XtP1ldErxguo4U/BNpc6OZUnE
KZ2+N0816kLUGmZcMaRysTUFta4+yv3ApsOfRxq/NaFHRfI65+lmfv8RF2JyHAPK
9TLik05XBFyXwpA2peIsNrW0wRKpcrEW+iB9V2REC+7mYVa1AghUDfDzpYs1TiKh
Wdd6ufvzNGTSpIJgkWyENlA3gyWFHSryGVf/uNR/u4tPfl54lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWWvj/ZQLQ21lP7eXiQrjNto1dtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzZjZWJiODEtYzg3MC0z
ZjhhLTk1MWItZWM0MDQyOGVlY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuNwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQe82q8wfs8zhudTAopmmOUYm8L8m7P6ab6z8AWRI6JwEIBo/NgVSDz
7L0eu2Vqo2C/SdiE6Gfv/kncyJxdHZE4cvtm7CqF4Lzb6a8UoZ8DlilbTonfF4/F
8IGO2DTkwuSK8m5SfqqpuzDqy1Re12nsQNWK5DKGPr0QnvfizriXnlfEwjSiqoZ5
jdWSdRgvIb/TRxsDoZLI0haiQl5md6F0Em/uTLXcQUgD3QFDsIjAzX0fabNeNVDc
1uwYeJsq1fI2In63InGWGrayxvJJhdhekqIHPwLEUZzCmZ68QwNjX21i0vKGqVxs
w6zxsFA+WgEKxqtWip+CUA+nqmXSYsg=
-----END CERTIFICATE-----
Generated at Tue May 13 05:18:36 2025 by rpki-client