Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa
File:                     53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa (raw, json)
Hash identifier:          RYcnO97Z89W1b0MZS7Wextd24eWOYPR4gzS42g++EWw=
Subject key identifier:   58:35:98:69:7A:74:62:92:F1:9B:85:47:8F:4A:2E:41:BE:49:69:CE
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A4C3B1CF53EEDD2C9CE463700
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     13445
IP address blocks:        66.163.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1c:f5:3e:ed:d2:c9:ce:46:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=b56e8a38-4b15-43c4-9495-4cb317a09efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:e7:92:a8:a3:da:89:ac:b8:e8:74:11:72:
                    75:2f:db:40:02:e8:29:08:6a:ce:17:19:18:a1:5e:
                    48:fa:ab:fd:89:f4:b6:aa:4a:f2:4b:a5:36:82:68:
                    d9:6a:ad:2b:97:fe:3e:af:c4:76:21:4f:c4:4e:1f:
                    6f:d1:e6:7c:83:67:e0:a0:0c:23:ae:74:0e:20:44:
                    b5:9a:4f:b4:15:c6:ba:fa:dd:10:24:88:e2:79:69:
                    36:8b:94:b3:d8:60:34:b5:5a:32:d7:90:31:f2:f9:
                    49:63:19:09:58:8b:9b:40:12:67:22:e8:fc:75:07:
                    ba:b9:77:74:63:61:d4:0c:60:a4:75:20:14:b8:90:
                    27:30:19:09:2b:c9:6e:bc:42:71:0f:9d:31:ca:17:
                    cb:65:07:61:69:4b:81:61:9d:e9:c6:56:de:03:7f:
                    79:17:d8:fb:54:5b:77:38:ba:6d:7a:6e:dd:31:9c:
                    b0:33:4b:63:04:0c:40:ba:4d:9f:e7:bc:0e:d6:e1:
                    02:69:28:49:bc:ed:21:a5:9a:8f:42:cb:a7:e9:2b:
                    20:56:e3:9c:98:67:d6:fb:38:20:7b:79:bd:6d:f0:
                    7a:ed:6c:30:ea:95:48:ec:76:49:bc:48:25:35:4f:
                    73:e8:18:99:bf:c9:a8:1c:8f:c6:cd:37:76:7a:67:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:98:69:7A:74:62:92:F1:9B:85:47:8F:4A:2E:41:BE:49:69:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/53cfe902-b006-34cc-bbc3-0a97d198ca3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:17:84:30:8e:ba:2a:05:f4:c6:ad:74:30:bb:d7:89:87:c6:
         25:49:c8:67:df:e6:79:d6:ff:ef:7e:1a:b0:68:28:db:01:09:
         29:5b:a0:2c:6c:00:d7:8a:e3:9e:f5:89:e4:87:38:fb:b0:e2:
         ca:6c:fb:ff:f3:14:15:21:12:8e:65:56:7e:08:1e:5d:cb:63:
         cb:a2:35:bd:16:72:80:e6:66:f3:94:64:7e:87:6c:22:7e:27:
         90:9a:2f:a3:98:ea:3f:8e:21:d2:a6:13:6c:23:f1:8b:f6:e9:
         43:4e:1e:88:ea:ef:b4:28:53:e9:57:d5:26:c6:db:23:c4:04:
         1b:5e:f3:12:3c:66:ee:6b:47:75:a7:cd:87:15:d4:fe:20:94:
         ef:53:7d:6d:bf:5a:35:44:17:a1:57:30:06:2b:7e:6a:98:6b:
         0e:72:60:fd:ee:5f:6c:58:1d:90:8b:71:c5:09:0c:ac:00:a9:
         79:25:77:4b:be:fd:95:09:ee:45:4d:96:42:9e:3e:d1:01:f1:
         fd:bc:fb:45:5d:1b:5e:12:8e:91:a4:74:eb:53:96:7f:4a:43:
         96:68:96:f1:df:cc:ee:78:80:c4:02:46:90:93:e7:10:cd:2a:
         70:49:2a:9c:de:24:25:cd:12:71:64:0b:9c:3f:3e:b3:62:ab:
         a3:08:4f:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxz1Pu3Syc5GNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
YjU2ZThhMzgtNGIxNS00M2M0LTk0OTUtNGNiMzE3YTA5ZWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZbnkqij2omsuOh0EXJ1L9tAAugpCGrOFxkY
oV5I+qv9ifS2qkryS6U2gmjZaq0rl/4+r8R2IU/ETh9v0eZ8g2fgoAwjrnQOIES1
mk+0Fca6+t0QJIjieWk2i5Sz2GA0tVoy15Ax8vlJYxkJWIubQBJnIuj8dQe6uXd0
Y2HUDGCkdSAUuJAnMBkJK8luvEJxD50xyhfLZQdhaUuBYZ3pxlbeA395F9j7VFt3
OLptem7dMZywM0tjBAxAuk2f57wO1uECaShJvO0hpZqPQsun6SsgVuOcmGfW+zgg
e3m9bfB67Www6pVI7HZJvEglNU9z6BiZv8moHI/GzTd2emf8EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg1mGl6dGKS8ZuFR49KLkG+SWnOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTNjZmU5MDItYjAwNi0z
NGNjLWJiYzMtMGE5N2QxOThjYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqM1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkXhDCOuioF9MatdDC714mHxiVJyGff5nnW/+9+GrBoKNsBCSlboCxs
ANeK4571ieSHOPuw4sps+//zFBUhEo5lVn4IHl3LY8uiNb0WcoDmZvOUZH6HbCJ+
J5CaL6OY6j+OIdKmE2wj8Yv26UNOHojq77QoU+lX1SbG2yPEBBte8xI8Zu5rR3Wn
zYcV1P4glO9TfW2/WjVEF6FXMAYrfmqYaw5yYP3uX2xYHZCLccUJDKwAqXkld0u+
/ZUJ7kVNlkKePtEB8f28+0VdG14SjpGkdOtTln9KQ5ZolvHfzO54gMQCRpCT5xDN
KnBJKpzeJCXNEnFkC5w/PrNiq6MIT6M=
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:24:53 2025 by rpki-client