Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa
File:                     a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa (raw, json)
Hash identifier:          T38nz2Fe6yLnu/mUlJQu/CBhYO+vJsVmi2vVZ8vA7C4=
Subject key identifier:   21:77:65:41:20:28:2A:1A:C4:DE:3A:FD:C9:EE:74:CB:02:95:E3:A2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A8167C9645FBDE493C604
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.168.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:81:67:c9:64:5f:bd:e4:93:c6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b1f5cad2-fe88-4f9c-a619-82ef6657707e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:75:f2:51:b0:37:d6:3f:5f:78:a3:37:20:
                    5b:91:ec:83:37:0c:a2:d0:59:13:60:67:92:9a:55:
                    c4:06:5d:ae:ae:15:5f:81:83:ee:18:c2:8b:1f:ed:
                    0c:18:02:0f:0e:61:de:b2:1f:df:b2:ce:39:4f:69:
                    db:76:2e:bf:9b:4b:84:dd:1d:9c:2a:50:d5:44:0d:
                    0a:d2:0d:bb:5a:d4:58:4b:fd:86:32:47:d3:ae:69:
                    b4:d3:c8:82:8b:67:4c:0e:b3:fd:e6:f2:28:2d:d9:
                    af:25:49:e2:5b:09:86:a4:d3:93:8d:aa:c5:d6:91:
                    66:62:9d:f7:64:51:f6:38:ed:b2:7f:88:36:cd:87:
                    85:be:18:ff:ac:09:bf:e7:54:ff:12:63:c9:d2:65:
                    ae:63:87:f1:84:6e:32:e1:f1:7c:99:2e:27:a8:b0:
                    84:4c:4d:f0:ef:4a:88:e6:1d:2e:57:c3:f2:97:4c:
                    30:95:5a:26:f3:2d:c0:f8:a9:8e:1d:cc:b5:20:bf:
                    32:8c:02:f9:54:96:9a:91:6b:72:1b:9c:4a:d8:53:
                    0c:00:08:27:48:33:01:64:92:7e:3d:9d:9f:95:55:
                    ec:75:d9:72:cb:eb:80:ad:58:ef:4d:55:b2:e7:6c:
                    79:08:40:0d:65:b6:09:1b:0b:7c:83:08:de:69:d3:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:65:41:20:28:2A:1A:C4:DE:3A:FD:C9:EE:74:CB:02:95:E3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:36:b8:23:b4:75:fa:b5:c0:fe:a7:8e:09:9b:61:c0:44:
         79:85:43:e3:d1:77:d9:1c:43:cb:f0:fe:60:b2:53:bc:ad:f1:
         18:8f:5e:9c:2c:d2:28:72:00:77:bd:46:1a:0a:de:2b:88:6d:
         06:b0:d5:c2:64:a9:51:47:69:5e:50:93:83:88:74:f0:e1:37:
         c8:87:16:d7:6a:25:a3:2c:25:b7:4b:15:cb:6a:bd:08:f9:55:
         a6:87:8f:e3:cd:fc:15:4e:61:1f:75:a0:29:7a:96:71:23:4a:
         90:52:96:fa:10:3c:b0:5b:5a:1b:de:2f:9f:97:b4:e4:18:58:
         0f:d3:bc:3b:f4:c3:4f:87:9f:c6:f6:30:ec:24:3b:eb:4a:6b:
         00:40:99:56:4d:60:9d:cf:98:14:3c:24:3a:c9:14:3a:3a:e5:
         29:75:c7:3b:d2:4e:d0:8c:96:04:5f:e4:c9:0b:c0:98:c3:ae:
         01:26:90:8b:f5:1e:b1:1a:6a:13:77:22:76:0f:7f:0c:f8:ab:
         c4:6f:1e:fd:d5:50:00:f7:15:db:5a:f4:ac:c0:8c:b3:b5:a7:
         dc:40:da:98:33:65:e4:fd:d8:2c:51:08:71:ee:0a:70:b6:fb:
         94:9e:f4:fe:93:35:71:4e:44:16:8d:a6:0f:3f:e3:94:be:46:
         17:5f:5f:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCoFnyWRfveSTxgQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YjFmNWNhZDItZmU4OC00ZjljLWE2MTktODJlZjY2NTc3MDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj918lGwN9Y/X3ijNyBbkeyDNwyi0FkTYGeS
mlXEBl2urhVfgYPuGMKLH+0MGAIPDmHesh/fss45T2nbdi6/m0uE3R2cKlDVRA0K
0g27WtRYS/2GMkfTrmm008iCi2dMDrP95vIoLdmvJUniWwmGpNOTjarF1pFmYp33
ZFH2OO2yf4g2zYeFvhj/rAm/51T/EmPJ0mWuY4fxhG4y4fF8mS4nqLCETE3w70qI
5h0uV8Pyl0wwlVom8y3A+KmOHcy1IL8yjAL5VJaakWtyG5xK2FMMAAgnSDMBZJJ+
PZ2flVXsddlyy+uArVjvTVWy52x5CEANZbYJGwt8gwjeadPdawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCF3ZUEgKCoaxN46/cnudMsCleOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTVhZmFhM2YtOWVkYS0z
ODkwLWFiMDMtZTEwYzIwYmE3NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqgiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABV7NrgjtHX6tcD+p44Jm2HARHmFQ+PRd9kcQ8vw/mCyU7yt8RiPXpws
0ihyAHe9RhoK3iuIbQaw1cJkqVFHaV5Qk4OIdPDhN8iHFtdqJaMsJbdLFctqvQj5
VaaHj+PN/BVOYR91oCl6lnEjSpBSlvoQPLBbWhveL5+XtOQYWA/TvDv0w0+Hn8b2
MOwkO+tKawBAmVZNYJ3PmBQ8JDrJFDo65Sl1xzvSTtCMlgRf5MkLwJjDrgEmkIv1
HrEaahN3InYPfwz4q8RvHv3VUAD3Fdta9KzAjLO1p9xA2pgzZeT92CxRCHHuCnC2
+5Se9P6TNXFORBaNpg8/45S+RhdfXzQ=
-----END CERTIFICATE-----
Generated at Fri May 9 14:22:12 2025 by rpki-client