Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa
File:                     32646d93-b5db-3d3a-b676-ea3a461808bf.roa (raw, json)
Hash identifier:          AXnk0RNTXQZ58lptYppdG6csxYOO4Sao85bZBhcjFOQ=
Subject key identifier:   E0:EA:0B:D3:6E:D2:E1:F4:04:03:9B:DE:3A:98:F6:54:AC:3A:54:E0
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584B5571DE405974118C196F72C0
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     393387
IP address blocks:        66.113.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:de:40:59:74:11:8c:19:6f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=cdb1f9f3-304f-40ee-b9b4-7af7c7717743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:67:46:46:98:de:97:ba:73:3d:3b:91:74:
                    d1:9f:a7:e0:36:70:b3:6b:c2:ee:39:31:cc:57:32:
                    4c:56:f1:62:bc:48:8c:d9:3c:fd:74:fa:21:fb:95:
                    58:a4:9d:2e:fb:32:1b:ca:1e:46:23:bc:e6:d1:f6:
                    03:22:02:07:54:ac:1b:26:91:9c:8a:53:4b:6d:4a:
                    b9:f4:01:8b:8f:33:90:18:6e:ef:7b:33:82:e6:6e:
                    1b:e8:3c:2c:8a:d1:ed:4b:1e:0b:ad:7b:d7:31:d2:
                    80:5a:0b:a9:be:da:a7:ef:14:2c:f8:a6:b5:31:ad:
                    6e:9f:80:c9:24:79:fe:8d:68:0c:09:1a:3c:b6:09:
                    eb:3c:12:42:8c:0a:c2:50:53:7f:27:d2:0d:b7:67:
                    bd:02:e7:a7:12:dc:fb:b2:21:2f:0d:1e:8d:3d:6d:
                    66:6f:dc:05:85:3f:27:33:43:96:92:42:41:89:69:
                    d3:b3:a7:15:eb:d4:a8:15:75:17:5c:2d:08:f9:b9:
                    45:b5:1a:87:51:b1:5b:03:f4:fa:89:54:b3:13:0e:
                    d5:91:42:42:5f:7b:e0:62:bb:6f:d2:db:4d:e4:60:
                    39:8d:b6:7c:bf:1e:30:8b:6a:0d:67:78:be:17:fa:
                    f3:80:56:82:1b:9e:c3:5f:a6:18:0f:f3:2c:c0:4f:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EA:0B:D3:6E:D2:E1:F4:04:03:9B:DE:3A:98:F6:54:AC:3A:54:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:de:6e:48:55:89:a5:43:3d:ef:1a:d3:53:23:a5:0b:59:6f:
         0a:16:ed:ea:2d:8e:44:d3:10:46:67:94:44:ff:36:a6:cb:9a:
         57:a8:02:a3:00:2d:d5:eb:66:b8:8c:91:00:ed:7e:8b:b4:90:
         f7:0b:33:8d:ca:cc:2b:70:f1:3e:dd:b8:ba:5a:34:a0:eb:2c:
         a9:6d:f7:3e:db:55:f2:eb:13:5d:59:86:48:2f:21:b3:c7:d4:
         50:32:d6:76:3a:ae:fc:1b:0c:8b:24:9c:d0:c3:11:99:48:1a:
         09:f8:c1:92:59:8a:bb:34:aa:6c:db:ae:f0:ea:81:6a:8b:a6:
         8c:5e:8e:4b:d9:64:fa:41:17:c1:a0:3c:95:23:f0:55:00:4f:
         40:c5:00:03:4b:e4:b2:1d:94:33:58:5a:06:8e:7b:7f:11:87:
         16:47:9c:5a:e1:69:89:0a:43:35:75:51:1b:a8:5f:8f:1e:83:
         ff:84:f6:0b:f2:67:a7:8b:32:64:35:f1:6d:9d:16:e4:a6:26:
         84:3a:d0:a0:fa:4f:9a:24:2f:a6:ec:6a:2c:91:ce:bd:d3:98:
         9f:8d:02:de:6a:58:e1:26:6d:c1:d3:2a:6b:fa:ed:c8:20:3f:
         08:97:89:f1:15:4a:ef:2b:9f:b8:ff:21:b0:3f:e0:ad:27:bf:
         f5:63:aa:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcd5AWXQRjBlvcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz
YzE2MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
Y2RiMWY5ZjMtMzA0Zi00MGVlLWI5YjQtN2FmN2M3NzE3NzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd1nRkaY3pe6cz07kXTRn6fgNnCza8LuOTHM
VzJMVvFivEiM2Tz9dPoh+5VYpJ0u+zIbyh5GI7zm0fYDIgIHVKwbJpGcilNLbUq5
9AGLjzOQGG7vezOC5m4b6DwsitHtSx4LrXvXMdKAWgupvtqn7xQs+Ka1Ma1un4DJ
JHn+jWgMCRo8tgnrPBJCjArCUFN/J9INt2e9AuenEtz7siEvDR6NPW1mb9wFhT8n
M0OWkkJBiWnTs6cV69SoFXUXXC0I+blFtRqHUbFbA/T6iVSzEw7VkUJCX3vgYrtv
0ttN5GA5jbZ8vx4wi2oNZ3i+F/rzgFaCG57DX6YYD/MswE/+uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODqC9Nu0uH0BAOb3jqY9lSsOlTgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz
ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvMzI2NDZkOTMtYjVkYi0z
ZDNhLWI2NzYtZWEzYTQ2MTgwOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3
MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz
M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2
ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnFlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbebkhViaVDPe8a01MjpQtZbwoW7eotjkTTEEZnlET/NqbLmleoAqMA
LdXrZriMkQDtfou0kPcLM43KzCtw8T7duLpaNKDrLKlt9z7bVfLrE11ZhkgvIbPH
1FAy1nY6rvwbDIsknNDDEZlIGgn4wZJZirs0qmzbrvDqgWqLpoxejkvZZPpBF8Gg
PJUj8FUAT0DFAANL5LIdlDNYWgaOe38RhxZHnFrhaYkKQzV1URuoX48eg/+E9gvy
Z6eLMmQ18W2dFuSmJoQ60KD6T5okL6bsaiyRzr3TmJ+NAt5qWOEmbcHTKmv67cgg
PwiXifEVSu8rn7j/IbA/4K0nv/VjqtI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:34:31 2025 by rpki-client