Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/33f12907-b3e0-34ac-8d56-81c044f85d44.roa
File:                     33f12907-b3e0-34ac-8d56-81c044f85d44.roa (raw, json)
Hash identifier:          3vZ0UVzxUAT24BBNVPj9Hz1MRLo8r5s1chWFlbFy9DM=
Subject key identifier:   FD:7E:E8:EB:BE:21:DD:05:F5:0B:8F:00:F1:6C:40:ED:CA:91:FD:04
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584D59EA700C418F29D1EAA3BA00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/33f12907-b3e0-34ac-8d56-81c044f85d44.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     5769
IP address blocks:        66.185.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:70:0c:41:8f:29:d1:ea:a3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=972ceb19-5a6f-4a7b-ba48-8d45af36c189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:95:a5:df:2d:2a:6e:de:c0:98:a1:fa:0b:
                    ab:cc:f2:e8:79:c0:a1:df:8c:69:73:e7:cc:a2:59:
                    a7:cb:3f:07:8c:33:78:92:14:c0:f3:f6:ba:f5:3b:
                    43:f2:92:df:5b:51:43:7d:bd:f0:f7:bd:5a:8f:49:
                    e1:54:24:9e:92:fe:7f:f3:fc:ec:c9:b0:96:e2:8a:
                    14:56:74:f5:59:c2:c0:68:1d:a4:fd:00:24:89:1d:
                    aa:4f:5e:37:9f:95:7c:28:15:36:50:e3:3b:c7:55:
                    e1:1d:8c:ba:2e:1d:a8:8f:f2:bf:89:7f:80:95:46:
                    81:39:9b:ef:0b:2e:16:14:23:b8:db:a5:ac:85:2a:
                    f3:9c:40:4b:c0:4a:d1:4d:12:65:f6:cc:7c:57:8c:
                    71:4d:b9:15:5a:ec:52:d4:e8:5e:65:22:03:64:fc:
                    0a:d7:38:ee:5c:05:4a:e6:25:29:26:20:4f:4e:9f:
                    88:5e:83:5c:72:e7:cf:b6:5d:d1:23:7b:9c:d7:14:
                    86:9e:71:05:26:73:16:47:5e:fa:ab:e6:d3:4a:90:
                    30:55:0f:2d:cb:ef:65:a1:06:aa:06:31:7e:28:a6:
                    ad:d0:77:21:91:5e:72:a5:4e:1b:38:ae:82:3c:c2:
                    ef:62:8f:e7:96:83:e4:81:f0:01:b9:de:bd:d1:19:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:E8:EB:BE:21:DD:05:F5:0B:8F:00:F1:6C:40:ED:CA:91:FD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/33f12907-b3e0-34ac-8d56-81c044f85d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:7b:7e:66:41:04:e2:25:c3:e7:fc:ea:74:e0:c6:2f:72:
         cf:95:2d:cb:60:65:09:79:ef:51:56:62:a1:48:26:04:cf:be:
         6a:4b:a6:c2:40:3d:10:6c:78:85:9b:b6:b6:80:b0:6a:60:7d:
         b1:58:db:0d:29:64:1a:7b:7c:e5:1d:5c:b2:01:7c:b8:52:af:
         bf:b0:9d:76:e0:a8:54:cb:89:6b:5f:dd:ec:29:5a:fe:c6:e7:
         7c:7b:dc:7f:77:54:27:c3:dd:d1:c9:04:2b:f5:b6:d6:5e:83:
         97:21:25:d1:ed:60:5d:ff:07:47:33:c2:d1:b9:21:7d:65:b5:
         19:a3:2d:7c:4b:2d:7a:74:aa:4e:5c:f5:7a:45:26:ed:e4:16:
         6b:42:4a:4f:2c:d5:3f:53:bf:95:c7:7c:3b:ba:43:bc:ee:3b:
         8e:af:d7:0c:ec:54:c9:8f:28:9b:3f:22:f7:3a:db:2d:98:61:
         07:8e:15:10:c8:13:60:54:b0:8b:99:7e:5a:a0:aa:4f:22:7e:
         7e:6e:ae:25:79:64:73:46:20:21:11:9e:33:05:8e:7e:53:98:
         da:81:40:ee:40:ed:c6:0a:fc:8c:c9:7d:e1:fc:bc:0b:97:a4:
         e3:de:a4:a8:27:b6:ff:66:35:ea:8f:3a:52:37:79:72:0b:79:
         19:d7:b2:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nAMQY8p0eqjugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
OTcyY2ViMTktNWE2Zi00YTdiLWJhNDgtOGQ0NWFmMzZjMTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV2Vpd8tKm7ewJih+gurzPLoecCh34xpc+fM
olmnyz8HjDN4khTA8/a69TtD8pLfW1FDfb3w971aj0nhVCSekv5/8/zsybCW4ooU
VnT1WcLAaB2k/QAkiR2qT143n5V8KBU2UOM7x1XhHYy6Lh2oj/K/iX+AlUaBOZvv
Cy4WFCO426WshSrznEBLwErRTRJl9sx8V4xxTbkVWuxS1OheZSIDZPwK1zjuXAVK
5iUpJiBPTp+IXoNccufPtl3RI3uc1xSGnnEFJnMWR176q+bTSpAwVQ8ty+9loQaq
BjF+KKat0HchkV5ypU4bOK6CPMLvYo/nloPkgfABud690RnpcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1+6Ou+Id0F9QuPAPFsQO3Kkf0EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMzNmMTI5MDctYjNlMC0z
NGFjLThkNTYtODFjMDQ0Zjg1ZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrkwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0qe35mQQTiJcPn/Op04MYvcs+VLctgZQl571FWYqFIJgTPvmpLpsJA
PRBseIWbtraAsGpgfbFY2w0pZBp7fOUdXLIBfLhSr7+wnXbgqFTLiWtf3ewpWv7G
53x73H93VCfD3dHJBCv1ttZeg5chJdHtYF3/B0czwtG5IX1ltRmjLXxLLXp0qk5c
9XpFJu3kFmtCSk8s1T9Tv5XHfDu6Q7zuO46v1wzsVMmPKJs/Ivc62y2YYQeOFRDI
E2BUsIuZflqgqk8ifn5uriV5ZHNGICERnjMFjn5TmNqBQO5A7cYK/IzJfeH8vAuX
pOPepKgntv9mNeqPOlI3eXILeRnXsg4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:31 2026 by rpki-client