Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa
File:                     b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa (raw, json)
Hash identifier:          4KeJ9WqTsEFb7faYeSTO979CCjR9Zxu9zyFEQYSR6Rs=
Subject key identifier:   04:C3:36:4C:53:C8:9C:C2:01:82:14:AC:CA:2D:4C:AC:27:3E:B4:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A88C1713F8D0F103509C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.191.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:88:c1:71:3f:8d:0f:10:35:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=33d05486-6391-409a-80d3-b7c7675fe39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:e9:00:53:66:fc:87:cc:4b:79:94:82:7d:
                    dc:65:d1:8c:39:b7:c7:53:eb:bf:70:cc:f0:07:03:
                    72:9a:95:75:6f:89:d8:f6:20:91:a9:ca:52:e8:55:
                    52:1f:12:b5:6b:88:0f:78:d5:be:d8:97:b0:f8:a6:
                    6c:2a:2f:0f:7b:6b:bf:a2:5f:4a:be:6e:d2:29:7f:
                    d3:38:02:70:a5:67:46:91:da:bc:b5:7e:d9:d7:46:
                    40:58:66:89:76:70:8b:01:31:51:e7:81:e7:d8:a5:
                    d1:b9:8d:8c:e3:3a:8c:fb:c1:76:8f:5f:3e:22:99:
                    41:e3:a4:24:db:47:bc:60:34:2c:06:b3:fe:29:bd:
                    a7:9d:c7:f8:2f:e8:b2:26:a1:69:4d:ca:d6:77:fe:
                    bc:91:8c:51:00:7d:e4:ff:f0:d1:6b:a8:34:58:af:
                    54:59:5e:d9:08:8b:fc:d9:c5:13:f7:77:b6:0a:b3:
                    f8:19:39:57:4e:36:6a:d4:01:1b:43:6f:e5:85:86:
                    17:b3:ac:8f:f8:22:13:4a:e2:a0:5d:b1:a4:a8:7e:
                    dc:b7:b1:85:56:d9:e0:de:0a:eb:cd:01:20:17:15:
                    51:3d:a2:aa:6d:41:a9:27:58:70:b1:1c:ce:67:7b:
                    3c:ae:23:47:83:55:d1:83:90:a2:43:53:7e:4d:97:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:36:4C:53:C8:9C:C2:01:82:14:AC:CA:2D:4C:AC:27:3E:B4:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:2a:3a:b1:7d:56:9e:a8:19:de:17:b7:f7:7e:ee:71:63:
         06:18:f5:46:e3:80:08:8d:fb:59:c5:e1:05:ba:71:b5:8f:5d:
         ab:07:4d:fd:93:7d:88:3e:df:e3:ac:3c:bf:34:29:be:28:bc:
         87:bc:38:88:0d:0f:9c:09:ce:12:41:b8:27:b3:9f:67:b5:9d:
         62:64:21:09:c2:e1:4a:87:62:4c:dc:3f:00:e2:f1:39:01:46:
         f9:a5:c9:47:7a:b5:dd:05:52:71:11:0c:c7:86:a7:99:83:23:
         9f:43:3e:de:b4:55:0f:f8:24:01:60:76:ee:31:7a:f8:4e:24:
         bd:ee:f2:2d:25:fa:19:7e:73:be:a5:4a:af:79:d3:9d:e4:c7:
         e1:7f:f5:e7:33:e8:9a:63:5c:7c:f4:6a:4d:c3:f6:d4:e1:25:
         1b:35:ce:07:df:52:d4:90:7b:ce:f9:0d:7a:12:9c:bc:c2:36:
         82:34:e4:1c:e6:8e:90:dd:82:75:a9:1f:95:9b:10:21:0b:c2:
         ae:40:f9:d1:bc:5b:8f:78:9e:c6:e8:33:f6:0a:43:48:a8:9e:
         e8:93:33:d5:88:14:55:3c:cc:4d:1d:c6:bd:d5:27:5e:aa:f7:
         cd:91:d1:ca:81:84:0a:10:3c:54:45:60:d7:18:db:ca:08:7f:
         8b:ce:b1:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCojBcT+NDxA1CcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MzNkMDU0ODYtNjM5MS00MDlhLTgwZDMtYjdjNzY3NWZlMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZDpAFNm/IfMS3mUgn3cZdGMObfHU+u/cMzw
BwNympV1b4nY9iCRqcpS6FVSHxK1a4gPeNW+2Jew+KZsKi8Pe2u/ol9Kvm7SKX/T
OAJwpWdGkdq8tX7Z10ZAWGaJdnCLATFR54Hn2KXRuY2M4zqM+8F2j18+IplB46Qk
20e8YDQsBrP+Kb2nncf4L+iyJqFpTcrWd/68kYxRAH3k//DRa6g0WK9UWV7ZCIv8
2cUT93e2CrP4GTlXTjZq1AEbQ2/lhYYXs6yP+CITSuKgXbGkqH7ct7GFVtng3grr
zQEgFxVRPaKqbUGpJ1hwsRzOZ3s8riNHg1XRg5CiQ1N+TZfOcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATDNkxTyJzCAYIUrMotTKwnPrT9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjc3YTM5NjUtOWYwNS0z
ZjdlLTg1YTMtYWM0YWZiOGFkNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvpKjqxfVaeqBneF7f3fu5xYwYY9UbjgAiN+1nF4QW6cbWPXasHTf2T
fYg+3+OsPL80Kb4ovIe8OIgND5wJzhJBuCezn2e1nWJkIQnC4UqHYkzcPwDi8TkB
RvmlyUd6td0FUnERDMeGp5mDI59DPt60VQ/4JAFgdu4xevhOJL3u8i0l+hl+c76l
Sq95053kx+F/9ecz6JpjXHz0ak3D9tThJRs1zgffUtSQe875DXoSnLzCNoI05Bzm
jpDdgnWpH5WbECELwq5A+dG8W494nsboM/YKQ0ionuiTM9WIFFU8zE0dxr3VJ16q
982R0cqBhAoQPFRFYNcY28oIf4vOsWc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:32:29 2025 by rpki-client