Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4c6dd657-0082-3f12-979f-846843a9cbcf.roa
File:                     4c6dd657-0082-3f12-979f-846843a9cbcf.roa (raw, json)
Hash identifier:          XFeu1NTJ3NpjFH0OO0Bz/fY09+VjnvcC+RWAR75Ju+8=
Subject key identifier:   1E:2C:45:F5:37:23:08:A6:50:4B:28:42:13:77:62:E8:77:1E:21:D7
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EA793EEEA63553081CD118C00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4c6dd657-0082-3f12-979f-846843a9cbcf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26337
IP address blocks:        66.235.195.0/24 maxlen: 24
                          66.235.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:ee:ea:63:55:30:81:cd:11:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=199b23ac-c0fe-46a4-8ffe-b1cf79485558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:02:7d:58:66:79:fb:cb:47:8e:aa:04:3d:
                    08:31:f9:ca:c9:f8:f6:95:05:b6:eb:4f:30:44:b4:
                    20:65:bf:cd:69:59:bd:ab:3c:20:6c:2d:b3:cd:bd:
                    6e:a8:2f:73:de:03:5a:d6:8e:0d:30:37:5e:29:fd:
                    0d:73:31:e5:4a:34:e2:6f:6a:8d:05:d1:65:9a:e2:
                    89:63:ea:ea:77:ca:de:63:40:84:aa:79:b0:fa:89:
                    22:92:dc:e7:28:d8:66:76:4b:bf:61:67:43:fd:33:
                    5d:5b:05:0d:7e:a6:0b:79:86:97:e2:e7:5c:e9:cd:
                    66:09:e0:51:02:ba:ef:99:ce:0e:84:5e:6a:75:52:
                    b7:e8:10:a2:0a:f4:20:6b:53:e6:c7:a7:83:38:b7:
                    ac:71:1c:e5:4f:67:46:b5:fc:71:67:ce:28:44:96:
                    7d:3a:fb:66:2f:05:12:5f:cc:ad:49:07:71:30:b2:
                    bf:13:c1:a8:11:35:5e:0b:b0:81:11:5a:f7:60:fc:
                    ea:4e:2a:f5:82:5d:45:ca:3d:05:23:49:03:e2:bd:
                    39:d4:1b:df:03:e9:d1:72:67:60:ed:29:8c:6e:1c:
                    f5:f4:fa:f3:12:42:1c:8a:0c:72:5e:46:92:61:46:
                    49:a5:85:bf:52:e2:36:b2:de:18:dc:2b:7e:3e:ec:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:45:F5:37:23:08:A6:50:4B:28:42:13:77:62:E8:77:1E:21:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4c6dd657-0082-3f12-979f-846843a9cbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.195.0-66.235.199.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:e1:89:b3:bd:f7:44:d5:69:18:b2:a3:9a:b9:24:6e:fb:
         ee:d7:ec:97:32:cc:ac:3c:ad:cf:1a:34:0f:c2:b1:e8:cb:51:
         9e:d5:a6:be:3a:45:51:2e:25:55:36:28:55:77:0c:5c:2e:11:
         b8:ec:16:13:e6:7f:6c:1c:13:5f:2d:2d:af:f0:8b:46:06:04:
         44:9d:e5:10:c5:79:79:64:0d:16:00:f2:10:a4:0e:e8:a0:af:
         40:3c:e3:15:59:4b:05:13:9b:af:ad:bc:34:70:86:43:b0:f2:
         af:e2:42:d3:b4:ba:6e:f5:df:c0:fa:88:ac:fd:b6:b4:35:e4:
         08:74:9b:c4:0f:10:c6:37:38:d6:9a:ce:96:c6:3b:b3:3a:1f:
         da:ce:cf:7f:8a:b0:69:75:85:a0:47:2c:94:88:bf:33:9d:17:
         ee:c7:3d:e3:ce:17:58:a4:2e:e3:9b:9e:71:20:c9:33:7c:52:
         c5:bb:9d:91:b7:78:3e:f3:54:71:94:dd:80:a1:a4:fd:67:7f:
         2b:cf:fc:bc:dd:58:af:a1:d5:89:e4:30:4b:7d:63:37:29:ed:
         87:ad:13:24:42:97:87:78:ea:a4:72:09:e1:cd:85:d0:6b:7c:
         ca:d6:15:0d:06:d8:f3:2f:e6:71:b6:7a:3a:6e:d9:42:d3:a0:
         61:dc:56:02
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6nk+7qY1Uwgc0RjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTk5YjIzYWMtYzBmZS00NmE0LThmZmUtYjFjZjc5NDg1NTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkocCfVhmefvLR46qBD0IMfnKyfj2lQW2608w
RLQgZb/NaVm9qzwgbC2zzb1uqC9z3gNa1o4NMDdeKf0NczHlSjTib2qNBdFlmuKJ
Y+rqd8reY0CEqnmw+okiktznKNhmdku/YWdD/TNdWwUNfqYLeYaX4udc6c1mCeBR
Arrvmc4OhF5qdVK36BCiCvQga1Pmx6eDOLescRzlT2dGtfxxZ84oRJZ9OvtmLwUS
X8ytSQdxMLK/E8GoETVeC7CBEVr3YPzqTir1gl1Fyj0FI0kD4r051BvfA+nRcmdg
7SmMbhz19PrzEkIcigxyXkaSYUZJpYW/UuI2st4Y3Ct+PuyhUwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFB4sRfU3IwimUEsoQhN3Yuh3HiHXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvNGM2ZGQ2NTctMDA4Mi0z
ZjEyLTk3OWYtODQ2ODQzYTljYmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABC68MD
BANC68AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAR+nhibO990TVaRiyo5q5JG777tfslzLMrDytzxo0D8Kx
6MtRntWmvjpFUS4lVTYoVXcMXC4RuOwWE+Z/bBwTXy0tr/CLRgYERJ3lEMV5eWQN
FgDyEKQO6KCvQDzjFVlLBRObr628NHCGQ7Dyr+JC07S6bvXfwPqIrP22tDXkCHSb
xA8Qxjc41prOlsY7szof2s7Pf4qwaXWFoEcslIi/M50X7sc9484XWKQu45uecSDJ
M3xSxbudkbd4PvNUcZTdgKGk/Wd/K8/8vN1Yr6HVieQwS31jNynth60TJEKXh3jq
pHIJ4c2F0Gt8ytYVDQbY8y/mcbZ6Om7ZQtOgYdxWAg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:36:14 2026 by rpki-client