Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/db7b693c-c1f0-315b-a195-d01349c68ec4.roa
File:                     db7b693c-c1f0-315b-a195-d01349c68ec4.roa (raw, json)
Hash identifier:          5fS7QsQlGU3DCe4vAtzGPy1KRa15CQ+iusCV+O59hFQ=
Subject key identifier:   FD:56:3D:E7:4E:B3:B9:AF:37:E6:9A:F5:9D:25:53:2C:9A:1A:47:5A
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F4328584EA78730B6D672DB2AB0380A80
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/db7b693c-c1f0-315b-a195-d01349c68ec4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23465
IP address blocks:        66.60.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:30:b6:d6:72:db:2a:b0:38:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1d43549d-620c-49e6-94bc-4d260dde8f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:c3:2a:73:8e:14:b6:a3:3f:e6:f6:8e:3a:
                    c6:25:eb:2e:43:bf:8b:5b:de:f7:76:2d:20:36:d0:
                    15:c2:1b:a9:90:88:8e:1b:3f:d4:96:8c:db:a9:f9:
                    ac:e7:fc:25:10:38:41:3c:55:60:01:26:b7:32:91:
                    f9:4b:42:13:80:31:49:53:11:8e:16:6b:18:2e:98:
                    18:01:9a:06:64:26:a1:12:79:ba:cf:3e:3f:70:a2:
                    fa:c8:28:0f:f0:4c:b7:60:fc:a6:95:3a:56:c3:cc:
                    6f:ad:4e:26:bf:4e:dd:6c:8c:32:fb:78:95:e8:2c:
                    11:7f:a8:33:40:55:f7:cd:51:fe:08:b7:94:70:2d:
                    93:75:ef:07:48:40:e0:32:40:d3:d6:bb:d2:82:38:
                    9e:5a:d0:30:21:c0:41:f5:74:72:f9:d3:87:8f:35:
                    fd:39:84:55:de:7d:1b:2a:9a:37:c9:5c:5e:5f:f7:
                    7d:12:cb:c5:a1:8c:8c:24:2c:98:51:f0:cd:33:89:
                    17:fe:fe:73:0a:f7:bf:cb:ac:2e:cb:b0:4d:53:37:
                    a8:74:d8:ed:47:26:8f:f7:86:8f:9e:b1:33:74:c9:
                    e8:5e:d7:1a:b3:d2:76:27:7d:88:7a:9f:92:72:c0:
                    52:9d:75:c3:fe:e6:8c:08:6a:42:65:80:59:dd:40:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:56:3D:E7:4E:B3:B9:AF:37:E6:9A:F5:9D:25:53:2C:9A:1A:47:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/db7b693c-c1f0-315b-a195-d01349c68ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:ce:34:54:84:67:2a:3c:6e:33:f5:59:0f:70:4d:ee:bf:
         ae:67:4a:1f:15:26:7a:a5:4c:25:01:f2:44:4c:dc:5b:a6:82:
         c3:34:63:99:2f:d4:60:7a:9b:95:c1:15:c6:8b:2f:ca:f2:91:
         72:55:4c:61:95:34:9c:91:27:b3:3c:b9:b8:a8:1c:f5:60:12:
         4e:1f:3d:fd:fb:2d:2a:34:de:70:a7:e8:84:c5:93:60:8d:4d:
         2c:32:21:7b:3b:91:82:81:65:8e:0a:ac:53:a6:08:b8:85:fa:
         f8:ba:78:9c:3a:35:2b:93:93:d1:4f:fb:47:ae:ce:7f:72:aa:
         ab:cc:ae:16:6d:9b:66:3a:61:8e:cd:78:8c:4f:85:aa:48:7c:
         81:bd:a1:71:f5:61:bf:b7:23:57:cb:70:8e:ee:30:cb:00:59:
         f6:cb:b7:82:13:f5:c2:95:2e:6d:e0:eb:6e:69:e2:a7:55:19:
         0c:96:7d:69:73:be:f3:6c:88:3b:70:10:e3:db:32:d8:30:82:
         5c:08:d3:d1:88:57:bb:11:30:59:d0:8a:0a:3b:a8:fb:80:5c:
         13:c7:ff:d6:9c:8c:23:57:a6:6b:37:8f:3c:2d:1b:d1:80:c2:
         bf:89:a4:d6:99:6d:4f:08:3b:d0:5a:0e:f7:68:12:e0:1e:2f:
         a7:c6:8f:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzC21nLbKrA4CoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz
MDllMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWQ0MzU0OWQtNjIwYy00OWU2LTk0YmMtNGQyNjBkZGU4ZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox/DKnOOFLajP+b2jjrGJesuQ7+LW973di0g
NtAVwhupkIiOGz/Ulozbqfms5/wlEDhBPFVgASa3MpH5S0ITgDFJUxGOFmsYLpgY
AZoGZCahEnm6zz4/cKL6yCgP8Ey3YPymlTpWw8xvrU4mv07dbIwy+3iV6CwRf6gz
QFX3zVH+CLeUcC2Tde8HSEDgMkDT1rvSgjieWtAwIcBB9XRy+dOHjzX9OYRV3n0b
Kpo3yVxeX/d9EsvFoYyMJCyYUfDNM4kX/v5zCve/y6wuy7BNUzeodNjtRyaP94aP
nrEzdMnoXtcas9J2J32Iep+ScsBSnXXD/uaMCGpCZYBZ3UDuhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1WPedOs7mvN+aa9Z0lUyyaGkdaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx
ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvZGI3YjY5M2MtYzFmMC0z
MTViLWExOTUtZDAxMzQ5YzY4ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4
ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1
MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw
MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQjzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADL7zjRUhGcqPG4z9VkPcE3uv65nSh8VJnqlTCUB8kRM3FumgsM0Y5kv
1GB6m5XBFcaLL8rykXJVTGGVNJyRJ7M8ubioHPVgEk4fPf37LSo03nCn6ITFk2CN
TSwyIXs7kYKBZY4KrFOmCLiF+vi6eJw6NSuTk9FP+0euzn9yqqvMrhZtm2Y6YY7N
eIxPhapIfIG9oXH1Yb+3I1fLcI7uMMsAWfbLt4IT9cKVLm3g625p4qdVGQyWfWlz
vvNsiDtwEOPbMtgwglwI09GIV7sRMFnQigo7qPuAXBPH/9acjCNXpms3jzwtG9GA
wr+JpNaZbU8IO9BaDvdoEuAeL6fGj+A=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:04:08 2026 by rpki-client