Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e06b73c6-0a57-3e8c-8d5e-13336bc9ba50.roa
File:                     e06b73c6-0a57-3e8c-8d5e-13336bc9ba50.roa (raw, json)
Hash identifier:          5QwNm1uI6CeAe0ydRKQL2k+1BJSQ6d/Vouv6vWY525M=
Subject key identifier:   FF:C4:2B:2F:CD:E7:30:CF:3C:D3:0C:86:15:B4:3E:26:8A:15:14:AA
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285849CD34C62E906428D3822AC800
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e06b73c6-0a57-3e8c-8d5e-13336bc9ba50.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     9450
IP address blocks:        66.114.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c6:2e:90:64:28:d3:82:2a:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=da7b62c0-f167-44e7-963c-03a7adb51160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:0e:57:8e:a0:99:80:35:5b:ab:cf:b2:c5:
                    fe:5d:62:ec:89:e0:62:84:7a:61:0d:f4:56:ce:44:
                    d1:4f:34:00:58:8b:43:6e:f8:bb:ab:ba:8f:42:d6:
                    7a:1f:b6:d0:ca:22:2a:e7:b5:e8:bb:bd:01:0b:60:
                    5f:3d:d8:e0:c0:a9:be:30:60:a9:92:91:84:f4:2e:
                    54:67:0d:df:e3:e9:8f:70:52:67:43:8f:ad:a9:95:
                    47:5c:b2:bc:af:ed:b8:da:2f:2b:ac:43:81:bc:b7:
                    9f:98:c6:4e:43:2e:f7:69:15:50:80:c3:a0:cf:ed:
                    c7:11:9b:04:a0:8a:8a:39:0d:a6:55:70:c3:bb:d9:
                    9f:3c:8e:d9:05:12:19:0f:18:22:15:57:d6:c0:29:
                    3a:3e:07:e2:94:06:8f:83:d7:c6:8f:76:5c:a6:b0:
                    a2:d5:fc:50:c0:17:5c:65:33:c0:a3:04:d3:2f:57:
                    3c:9d:9b:95:43:85:b5:a3:d0:ac:c1:fd:16:b4:d8:
                    90:c8:af:d6:6e:32:33:bb:86:6b:ba:a8:79:15:bb:
                    ff:5d:0e:f7:99:51:b8:62:3e:bd:af:92:a4:09:ec:
                    4f:7a:03:34:ab:7b:ac:91:74:c4:06:a4:89:25:6f:
                    ae:60:6b:bd:ae:08:34:d5:36:6f:f0:1c:9b:52:c9:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:2B:2F:CD:E7:30:CF:3C:D3:0C:86:15:B4:3E:26:8A:15:14:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e06b73c6-0a57-3e8c-8d5e-13336bc9ba50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:84:1b:4b:ea:f9:f1:5d:c0:cd:82:1a:f2:d6:46:88:ec:
         b2:38:31:66:27:8f:9f:e2:ae:e5:de:f2:34:9a:2f:64:09:76:
         a1:6b:e4:17:aa:36:e1:70:17:bb:b7:6d:01:a9:f6:74:49:73:
         5d:22:0d:35:d4:40:12:ce:82:d8:fe:c7:e1:fc:52:4c:86:3d:
         66:0b:6c:57:a4:c9:04:11:36:df:13:73:45:01:b3:fb:49:d4:
         41:21:bf:c2:7d:64:bb:8c:13:7f:29:bb:df:4c:9d:fa:29:88:
         7a:bd:84:1b:01:63:2e:76:84:ba:09:76:40:78:8f:47:38:5b:
         03:c9:19:8e:7b:c3:4d:90:9b:70:87:b2:5f:c6:0f:8c:e1:e6:
         3f:8e:27:0c:9f:78:17:29:e9:28:24:16:3c:e8:73:5e:7e:db:
         58:b6:ff:1b:31:ba:d8:39:45:11:b9:9d:dd:a8:bc:2c:48:3a:
         c1:de:e8:5c:fd:34:7d:25:26:25:5b:ba:5b:20:61:b9:93:ee:
         01:f7:44:90:83:fd:05:fb:21:b2:c1:8f:8e:7e:6a:04:f8:3f:
         b7:c9:f0:f1:29:10:d5:d4:b5:99:ae:95:f7:f7:99:e8:29:12:
         6a:ea:5b:7d:44:51:2c:3e:8c:17:68:46:68:a1:65:a3:f6:7a:
         2f:21:bb:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMYukGQo04IqyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk
ZGE3YjYyYzAtZjE2Ny00NGU3LTk2M2MtMDNhN2FkYjUxMTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxEOV46gmYA1W6vPssX+XWLsieBihHphDfRW
zkTRTzQAWItDbvi7q7qPQtZ6H7bQyiIq57Xou70BC2BfPdjgwKm+MGCpkpGE9C5U
Zw3f4+mPcFJnQ4+tqZVHXLK8r+242i8rrEOBvLefmMZOQy73aRVQgMOgz+3HEZsE
oIqKOQ2mVXDDu9mfPI7ZBRIZDxgiFVfWwCk6PgfilAaPg9fGj3ZcprCi1fxQwBdc
ZTPAowTTL1c8nZuVQ4W1o9Cswf0WtNiQyK/WbjIzu4Zruqh5Fbv/XQ73mVG4Yj69
r5KkCexPegM0q3uskXTEBqSJJW+uYGu9rgg01TZv8BybUslFwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/EKy/N5zDPPNMMhhW0PiaKFRSqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZTA2YjczYzYtMGE1Ny0z
ZThjLThkNWUtMTMzMzZiYzliYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3HhBtL6vnxXcDNghry1kaI7LI4MWYnj5/iruXe8jSaL2QJdqFr5Beq
NuFwF7u3bQGp9nRJc10iDTXUQBLOgtj+x+H8UkyGPWYLbFekyQQRNt8Tc0UBs/tJ
1EEhv8J9ZLuME38pu99MnfopiHq9hBsBYy52hLoJdkB4j0c4WwPJGY57w02Qm3CH
sl/GD4zh5j+OJwyfeBcp6SgkFjzoc15+21i2/xsxutg5RRG5nd2ovCxIOsHe6Fz9
NH0lJiVbulsgYbmT7gH3RJCD/QX7IbLBj45+agT4P7fJ8PEpENXUtZmulff3megp
EmrqW31EUSw+jBdoRmihZaP2ei8hu8U=
-----END CERTIFICATE-----
Generated at Sat May 10 08:33:45 2025 by rpki-client