Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec53b657-d1ee-35a5-b419-f3fb1c1d92f1.roa
File:                     ec53b657-d1ee-35a5-b419-f3fb1c1d92f1.roa (raw, json)
Hash identifier:          msy5FsO0oVpEhlAKwNltdt8HB7BRqlJtMXe11Alo9G4=
Subject key identifier:   0D:4C:2A:33:F1:C5:A7:5D:36:D2:1C:94:81:BF:05:60:86:15:23:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0A95A5F559CBD40641E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec53b657-d1ee-35a5-b419-f3fb1c1d92f1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.190.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:0a:95:a5:f5:59:cb:d4:06:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=52927db4-8459-43a7-a3d9-62efb76b37b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:01:8b:c4:6d:a2:c2:91:00:52:82:3a:6f:
                    6f:43:ac:c0:d2:9d:31:9f:d4:39:de:58:be:c7:67:
                    1f:66:30:f7:62:77:e6:71:2e:3b:ea:05:aa:8d:f3:
                    59:80:31:d3:26:d5:b6:5b:01:48:07:3f:f6:07:e9:
                    89:46:a2:92:41:36:27:a1:38:cc:86:8b:1f:39:2d:
                    40:d9:bb:a4:67:94:81:b6:ef:c9:f5:d8:7a:09:e6:
                    b7:3f:b3:31:1e:c4:c5:38:db:3c:6d:97:f0:eb:12:
                    4c:1b:18:25:d5:cf:a1:7a:90:05:9d:1d:f5:46:be:
                    f8:c2:03:45:a5:06:70:38:66:17:a2:9e:75:b7:3d:
                    5a:38:f0:b8:af:8c:1d:89:32:61:c6:5b:d0:ad:a5:
                    58:37:86:49:a0:fe:f7:3a:a4:36:02:26:8d:d6:42:
                    18:f9:94:ad:50:f9:af:6d:08:8d:f0:d1:2a:d1:12:
                    d3:d5:69:a7:d3:42:c5:d6:28:4b:6f:69:6e:89:cf:
                    84:cc:fe:f0:d8:0a:0e:e4:67:cb:c1:69:20:98:73:
                    99:9b:af:1b:a8:98:b7:80:d1:b1:c5:69:f3:be:c8:
                    59:e6:59:00:ef:6f:4d:26:e6:ef:b9:a6:cf:bc:74:
                    6f:ea:2b:64:67:4e:a4:d8:40:01:e7:8b:17:92:c8:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:2A:33:F1:C5:A7:5D:36:D2:1C:94:81:BF:05:60:86:15:23:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec53b657-d1ee-35a5-b419-f3fb1c1d92f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:da:fe:cc:75:77:2c:4c:dd:4a:13:18:0d:d3:c2:bc:ad:
         94:43:ba:f8:0c:b8:df:46:44:3a:23:ef:b0:d5:81:fb:dc:74:
         75:e6:7f:c1:bd:25:27:d8:f5:a9:1d:ab:c3:d5:e4:f4:a2:4d:
         9b:48:65:4e:29:95:21:c3:27:8a:47:41:22:5e:cd:62:d1:c9:
         9d:c1:46:96:44:b9:08:c3:e9:d1:2a:6e:54:2a:01:ae:96:bc:
         0e:82:6d:90:ba:ce:ca:a2:ea:68:c9:02:ae:cf:86:4e:b9:64:
         d2:1f:5d:c9:17:e8:2c:4c:46:e6:73:55:8a:74:6e:c6:bb:45:
         72:3c:9c:ce:35:e9:05:3b:8a:8c:97:a9:9e:78:c2:17:f8:bc:
         32:d6:0a:a0:97:71:f5:a6:3d:40:18:b5:30:3c:cc:12:8c:da:
         91:d3:70:48:2d:a9:2a:3e:2d:9b:8f:e2:15:d7:3c:cb:1a:0a:
         94:ae:6c:db:27:e7:e8:c2:76:b2:04:1e:a3:2d:76:4a:78:45:
         26:dc:d5:69:fb:4a:11:aa:eb:fe:31:54:53:6d:e8:b4:3e:7f:
         23:5c:90:8a:2d:e1:74:30:c4:fa:4e:d7:f4:d0:01:42:eb:04:
         ff:98:c2:74:00:d3:04:0d:4f:0e:08:66:83:dc:77:bc:26:74:
         ae:92:6b:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCwqVpfVZy9QGQeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NTI5MjdkYjQtODQ1OS00M2E3LWEzZDktNjJlZmI3NmIzN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lQBi8RtosKRAFKCOm9vQ6zA0p0xn9Q53li+
x2cfZjD3YnfmcS476gWqjfNZgDHTJtW2WwFIBz/2B+mJRqKSQTYnoTjMhosfOS1A
2bukZ5SBtu/J9dh6Cea3P7MxHsTFONs8bZfw6xJMGxgl1c+hepAFnR31Rr74wgNF
pQZwOGYXop51tz1aOPC4r4wdiTJhxlvQraVYN4ZJoP73OqQ2AiaN1kIY+ZStUPmv
bQiN8NEq0RLT1Wmn00LF1ihLb2luic+EzP7w2AoO5GfLwWkgmHOZm68bqJi3gNGx
xWnzvshZ5lkA729NJubvuabPvHRv6itkZ06k2EAB54sXksh95QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1MKjPxxaddNtIclIG/BWCGFSNDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWM1M2I2NTctZDFlZS0z
NWE1LWI0MTktZjNmYjFjMWQ5MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQr5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsl2v7MdXcsTN1KExgN08K8rZRDuvgMuN9GRDoj77DVgfvcdHXmf8G9
JSfY9akdq8PV5PSiTZtIZU4plSHDJ4pHQSJezWLRyZ3BRpZEuQjD6dEqblQqAa6W
vA6CbZC6zsqi6mjJAq7Phk65ZNIfXckX6CxMRuZzVYp0bsa7RXI8nM416QU7ioyX
qZ54whf4vDLWCqCXcfWmPUAYtTA8zBKM2pHTcEgtqSo+LZuP4hXXPMsaCpSubNsn
5+jCdrIEHqMtdkp4RSbc1Wn7ShGq6/4xVFNt6LQ+fyNckIot4XQwxPpO1/TQAULr
BP+YwnQA0wQNTw4IZoPcd7wmdK6Sa2c=
-----END CERTIFICATE-----
Generated at Fri May 9 12:41:11 2025 by rpki-client