Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/c4fa30a4-9d3c-3b71-a343-d0072271b017.roa
File:                     c4fa30a4-9d3c-3b71-a343-d0072271b017.roa (raw, json)
Hash identifier:          xZQ79dYgHTnzEJtD68C2OQzXRxLRvppZE5CvQTRtSR4=
Subject key identifier:   EA:24:E5:5E:2A:48:9B:4E:11:38:B6:23:64:29:E3:1B:0B:5A:99:4F
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584A2D858607F01B3CDE71CE91C0
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/c4fa30a4-9d3c-3b71-a343-d0072271b017.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     14233
IP address blocks:        66.43.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:86:07:f0:1b:3c:de:71:ce:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=ef290e26-258a-4ef9-b065-2a6339007b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:27:bd:f6:be:45:2d:2e:d7:59:c9:07:d5:e9:
                    2e:53:a7:59:48:08:23:45:37:87:6b:24:49:e1:3c:
                    49:db:6f:11:71:76:1d:07:36:7b:1f:f0:98:7c:e6:
                    6c:88:2d:f1:cc:c2:b3:65:da:ec:fe:51:14:7a:8a:
                    92:04:4e:dc:a6:60:64:c7:9c:6e:31:78:8a:59:03:
                    e7:08:5f:8f:b3:e6:4a:4d:4c:81:22:d6:1e:1d:e6:
                    61:a1:28:33:83:3a:f0:86:42:30:ef:80:9a:14:ec:
                    d7:aa:92:6b:d5:de:63:8e:b2:30:c7:b3:d6:b7:f3:
                    1c:b0:22:4b:c8:13:b3:91:07:8a:b6:94:95:48:65:
                    a7:56:5a:89:b2:d8:b3:d7:2d:b7:ba:9a:c7:94:b7:
                    e5:73:22:ce:20:cf:3a:6e:75:05:7f:4d:42:b4:b0:
                    f3:a6:72:32:fd:79:86:27:05:1e:f9:46:a0:81:9a:
                    0f:7c:c3:6a:9f:86:c6:a6:9c:c4:d8:f2:67:02:f8:
                    ac:7a:db:77:f4:b1:2d:22:60:75:95:c7:97:92:94:
                    3f:c2:9e:f5:fe:7b:ca:b0:ce:9c:08:9b:d3:ad:12:
                    0d:5e:25:dd:4a:18:ab:71:b2:25:2c:4c:10:67:80:
                    15:8e:2f:df:f7:f2:2c:30:95:e5:82:9d:6c:0f:b3:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:24:E5:5E:2A:48:9B:4E:11:38:B6:23:64:29:E3:1B:0B:5A:99:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/c4fa30a4-9d3c-3b71-a343-d0072271b017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:0a:ec:4f:00:db:04:71:1b:20:d3:b1:8b:2b:a5:6b:fe:
         f3:48:dc:fb:a6:bc:d0:ec:b0:ba:9e:82:84:72:f6:e3:30:6f:
         a7:bd:55:7c:4d:72:93:cf:25:50:19:5b:a5:6f:61:0d:e2:64:
         19:49:ac:ef:5b:88:9d:e1:fc:b4:9f:d2:f2:92:cb:91:69:bb:
         87:ca:2b:d8:aa:7b:cc:12:65:db:23:73:5d:07:21:d2:3f:3f:
         c2:68:4e:4b:40:21:4b:3a:bd:dd:d4:b2:f5:2c:c7:6b:8d:40:
         cd:dc:86:f8:d4:b7:ac:db:2f:68:ea:44:d4:4b:c9:22:b3:4e:
         70:52:5d:a8:fe:a0:28:31:95:f7:c3:cc:ce:09:23:0f:73:38:
         8a:8a:eb:c8:a6:70:62:33:d9:5f:cd:94:be:66:87:8b:70:3d:
         3c:2e:39:a5:1b:3f:4c:b3:55:9f:13:b7:76:73:88:e8:0d:4c:
         d2:b6:e5:0c:d1:bd:0f:35:84:0d:15:15:89:a1:e7:00:3f:c2:
         e6:ed:a5:54:1f:97:ed:9b:e3:26:98:36:d7:fa:b8:af:c6:88:
         01:aa:54:cf:4c:02:b0:5a:59:65:5b:a8:2f:2a:b1:98:a7:c2:
         ee:55:f3:05:fc:26:62:86:36:51:c3:9c:b5:aa:3f:92:86:cd:
         ae:02:c3:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYYH8Bs83nHOkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2
OTA3MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk
ZWYyOTBlMjYtMjU4YS00ZWY5LWIwNjUtMmE2MzM5MDA3Yjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCe99r5FLS7XWckH1ekuU6dZSAgjRTeHayRJ
4TxJ228RcXYdBzZ7H/CYfOZsiC3xzMKzZdrs/lEUeoqSBE7cpmBkx5xuMXiKWQPn
CF+Ps+ZKTUyBItYeHeZhoSgzgzrwhkIw74CaFOzXqpJr1d5jjrIwx7PWt/McsCJL
yBOzkQeKtpSVSGWnVlqJstiz1y23uprHlLflcyLOIM86bnUFf01CtLDzpnIy/XmG
JwUe+UaggZoPfMNqn4bGppzE2PJnAvisett39LEtImB1lceXkpQ/wp71/nvKsM6c
CJvTrRINXiXdShircbIlLEwQZ4AVji/f9/IsMJXlgp1sD7NtlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOok5V4qSJtOETi2I2Qp4xsLWplPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4
M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvYzRmYTMwYTQtOWQzYy0z
YjcxLWEzNDMtZDAwNzIyNzFiMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5
ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4
NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz
YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQisQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxQCuxPANsEcRsg07GLK6Vr/vNI3PumvNDssLqegoRy9uMwb6e9VXxN
cpPPJVAZW6VvYQ3iZBlJrO9biJ3h/LSf0vKSy5Fpu4fKK9iqe8wSZdsjc10HIdI/
P8JoTktAIUs6vd3UsvUsx2uNQM3chvjUt6zbL2jqRNRLySKzTnBSXaj+oCgxlffD
zM4JIw9zOIqK68imcGIz2V/NlL5mh4twPTwuOaUbP0yzVZ8Tt3ZziOgNTNK25QzR
vQ81hA0VFYmh5wA/wubtpVQfl+2b4yaYNtf6uK/GiAGqVM9MArBaWWVbqC8qsZin
wu5V8wX8JmKGNlHDnLWqP5KGza4Cw+g=
-----END CERTIFICATE-----
Generated at Sun Jun 29 15:52:57 2025 by rpki-client