Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
File:                     d46d8569-5b81-3f6c-b7a8-027002156fc2.roa (raw, json)
Hash identifier:          4AtKOaBGoBrXaJY7JSOPV23Zx7MobtwpSS2SFgcEUZk=
Subject key identifier:   A1:76:68:E3:BF:1E:A2:3B:5C:99:F2:BD:04:34:DD:EE:D0:F6:8F:74
Certificate issuer:       /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial:       010D0C9F4328584A4DA044926C847B9096A1FDC0
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     40545
IP address blocks:        66.115.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:44:92:6c:84:7b:90:96:a1:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=c42bd184-d055-4798-970c-a14ef9c7b574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:34:f9:28:e3:98:8f:dc:d7:d1:fa:9e:11:
                    e9:c1:4b:44:45:14:4f:5b:79:e6:98:f2:60:31:bf:
                    c9:be:f6:77:36:30:6c:65:7f:b1:c4:c7:71:ad:ed:
                    23:af:47:d6:e5:ad:ae:88:fb:9e:20:50:de:3c:3d:
                    47:53:f4:a6:a7:4d:4c:90:ba:e2:d3:51:40:c7:9d:
                    d9:fb:f9:57:43:11:6a:7a:a2:cc:ba:f4:45:61:49:
                    8b:45:d9:4a:fe:09:db:e3:c9:cd:ae:08:9c:c4:17:
                    80:03:28:03:19:2b:d1:c3:f0:f8:d3:f2:3d:fd:b7:
                    70:d4:05:85:1c:d6:3c:b5:05:3b:fd:4d:38:67:2c:
                    a2:56:7e:11:ca:70:ab:45:70:37:78:ce:c2:e2:b7:
                    06:7f:3a:55:95:4d:cd:d2:17:51:c5:50:b8:77:37:
                    92:74:66:68:54:31:c8:87:fa:f4:97:a7:4e:f1:23:
                    f7:1c:84:60:18:81:77:6a:a3:ce:ea:d0:9b:1e:ce:
                    aa:13:25:23:d3:77:bb:c0:2e:f7:9c:9c:1b:4a:4e:
                    7c:f1:b5:ed:80:fe:46:82:93:4e:fa:5a:bf:cd:22:
                    d6:ee:10:08:9b:00:da:a4:97:1b:17:bf:f0:12:01:
                    16:38:ef:a5:85:fa:7f:9e:c4:7e:c9:ba:39:e0:16:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:68:E3:BF:1E:A2:3B:5C:99:F2:BD:04:34:DD:EE:D0:F6:8F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e3:84:ec:ab:0e:6f:55:51:09:39:3e:2c:11:b4:47:27:5e:
         a5:2b:c0:f1:be:79:b7:d5:c4:e5:51:ea:d1:4c:1f:d1:ab:81:
         2c:87:ad:38:fd:f6:57:34:c2:20:e3:35:cb:d1:c5:ae:a2:0d:
         54:5f:2e:47:a4:e0:a8:46:2d:c4:30:fa:0d:d5:15:61:bf:b5:
         0b:64:bb:ed:03:5e:a1:ea:34:c9:22:91:cf:c3:5f:ab:a0:92:
         a2:1e:7e:9f:b1:64:7b:db:6a:71:27:e1:f4:8d:eb:45:ce:b6:
         de:bc:3e:27:f9:7a:eb:ed:b9:76:b9:3e:83:59:5c:ad:cb:08:
         da:68:f0:23:04:ee:f7:36:80:cb:b7:e9:88:7d:6a:ee:80:4a:
         c1:d1:4d:e5:3a:c9:d7:4a:a1:cb:5d:6c:b9:c4:2a:16:e0:15:
         7c:6d:1f:57:9e:62:39:55:b6:c8:69:6c:06:f5:86:56:63:fc:
         ae:da:10:89:86:b2:92:18:8d:3f:12:be:ea:38:4a:8c:b3:ee:
         74:b7:b5:58:74:62:b3:4c:79:5e:6c:58:2b:95:d5:5a:45:ab:
         f6:89:c1:c4:31:da:56:ed:b3:3b:c1:20:3f:98:82:d3:73:24:
         a6:2c:35:6c:11:ec:a2:28:39:85:89:f5:f9:58:9b:48:8f:c5:
         98:fe:2d:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoESSbIR7kJah/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm
YWIwMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk
YzQyYmQxODQtZDA1NS00Nzk4LTk3MGMtYTE0ZWY5YzdiNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlw0+SjjmI/c19H6nhHpwUtERRRPW3nmmPJg
Mb/JvvZ3NjBsZX+xxMdxre0jr0fW5a2uiPueIFDePD1HU/Smp01MkLri01FAx53Z
+/lXQxFqeqLMuvRFYUmLRdlK/gnb48nNrgicxBeAAygDGSvRw/D40/I9/bdw1AWF
HNY8tQU7/U04ZyyiVn4RynCrRXA3eM7C4rcGfzpVlU3N0hdRxVC4dzeSdGZoVDHI
h/r0l6dO8SP3HIRgGIF3aqPO6tCbHs6qEyUj03e7wC73nJwbSk588bXtgP5GgpNO
+lq/zSLW7hAImwDapJcbF7/wEgEWOO+lhfp/nsR+ybo54BaLGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF2aOO/HqI7XJnyvQQ03e7Q9o90MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz
N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvZDQ2ZDg1NjktNWI4MS0z
ZjZjLWI3YTgtMDI3MDAyMTU2ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz
NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh
ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2
NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHjhOyrDm9VUQk5PiwRtEcnXqUrwPG+ebfVxOVR6tFMH9GrgSyHrTj9
9lc0wiDjNcvRxa6iDVRfLkek4KhGLcQw+g3VFWG/tQtku+0DXqHqNMkikc/DX6ug
kqIefp+xZHvbanEn4fSN60XOtt68Pif5euvtuXa5PoNZXK3LCNpo8CME7vc2gMu3
6Yh9au6ASsHRTeU6yddKoctdbLnEKhbgFXxtH1eeYjlVtshpbAb1hlZj/K7aEImG
spIYjT8Svuo4Soyz7nS3tVh0YrNMeV5sWCuV1VpFq/aJwcQx2lbtszvBID+YgtNz
JKYsNWwR7KIoOYWJ9flYm0iPxZj+LdY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:43:16 2025 by rpki-client