Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/69a973c9-3b70-3cf0-80a1-06f6ae02a2fe.roa
File:                     69a973c9-3b70-3cf0-80a1-06f6ae02a2fe.roa (raw, json)
Hash identifier:          S59iNzwb+KlmqtiQx0dVlyr547D3GSVKGOW36Z0JoOU=
Subject key identifier:   13:4F:C7:6D:C5:0A:35:BF:4E:CE:5F:72:1F:24:62:E8:C4:2B:B3:22
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584E0D842358096AB7BD8292BB80
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/69a973c9-3b70-3cf0-80a1-06f6ae02a2fe.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     393262
IP address blocks:        66.198.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:23:58:09:6a:b7:bd:82:92:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=31b3a2ae-3c32-424d-be12-11fd5ca1eebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:3d:05:ba:19:39:3f:99:bb:a8:86:77:ee:
                    fe:c8:1f:72:b4:b2:3d:80:87:2b:ed:b9:73:24:c2:
                    c7:98:27:a7:b3:b0:d3:ae:58:4f:12:dd:cf:6f:08:
                    1a:83:f9:3c:d7:ff:6e:6f:38:22:1f:91:ce:d2:ce:
                    cc:d9:10:5a:d3:02:d8:d9:d1:9d:04:93:4d:15:ad:
                    14:4f:96:34:54:5f:4d:9e:65:66:a1:16:82:20:4d:
                    3a:17:9b:36:90:75:22:1c:3c:c2:a9:22:68:5c:7b:
                    8d:b9:e6:c0:21:26:69:3d:d9:fc:72:b1:ad:26:c6:
                    70:5c:14:1c:5d:ad:6f:fa:a6:d0:14:ae:fa:2f:1f:
                    38:99:ca:00:16:e0:38:e1:dd:9a:0b:48:da:49:3d:
                    77:3f:52:01:97:be:23:b2:52:c4:ec:77:da:e7:22:
                    a6:74:52:03:00:3d:1d:98:7d:dc:e0:96:0b:99:31:
                    d5:35:61:cf:27:5b:b2:ca:74:ad:e9:5c:f8:ab:80:
                    26:29:bb:28:6b:4e:d0:1b:02:3c:59:6b:c5:b1:d7:
                    ef:ee:72:61:fa:6d:b3:c3:aa:92:66:a8:02:ba:1f:
                    34:ad:93:ec:e7:da:f3:93:86:dc:7f:ef:41:2c:79:
                    f6:4c:ed:fc:40:0c:98:b0:91:48:52:4c:55:3b:53:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:C7:6D:C5:0A:35:BF:4E:CE:5F:72:1F:24:62:E8:C4:2B:B3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/69a973c9-3b70-3cf0-80a1-06f6ae02a2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f0:75:19:01:86:b8:f1:ed:e4:32:c1:3a:57:33:7d:de:e1:
         ee:1a:29:5f:91:e1:e9:d0:cb:55:dd:dd:08:2b:97:b1:cc:0b:
         c8:8a:66:90:84:28:cf:de:e9:97:46:b5:69:df:79:0b:c7:86:
         8d:07:93:6c:92:6e:74:64:58:28:ee:9a:60:fa:7c:4a:6b:41:
         a7:b5:da:ff:a3:6e:5d:cf:04:d3:c4:6d:15:e9:77:2d:78:c6:
         62:1c:ee:d7:a8:4f:cf:5f:d8:e2:7c:c5:e8:78:85:2f:93:57:
         f3:e2:3b:59:44:2c:32:ff:ef:d0:63:00:61:45:3a:d6:e9:a0:
         60:4b:28:de:e4:da:ee:04:40:79:91:e6:1b:5a:6f:a3:45:03:
         8d:31:10:a5:1a:d8:75:22:5b:62:d0:28:88:f0:5d:45:bf:de:
         2c:fb:df:92:21:38:09:9f:79:9a:c0:1b:ed:ce:ef:1e:7f:17:
         25:62:b5:94:3f:72:a4:ac:45:8d:2d:b2:4c:52:bd:59:c2:44:
         64:ce:16:ae:09:d8:df:69:a7:bc:17:14:27:f1:f6:3d:54:b4:
         2c:94:15:23:b6:f0:1e:bc:5e:f7:4a:52:af:77:13:c0:83:65:
         09:c8:c2:56:47:f8:70:aa:d1:bb:b6:00:ff:85:61:08:65:96:
         ea:4c:ba:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCNYCWq3vYKSu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VjZTA0MDQtODBhOC00NmYyLTkyZWItOGYwYjU1OGM3
ZGJlMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk
MzFiM2EyYWUtM2MzMi00MjRkLWJlMTItMTFmZDVjYTFlZWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO09BboZOT+Zu6iGd+7+yB9ytLI9gIcr7blz
JMLHmCens7DTrlhPEt3Pbwgag/k81/9ubzgiH5HO0s7M2RBa0wLY2dGdBJNNFa0U
T5Y0VF9NnmVmoRaCIE06F5s2kHUiHDzCqSJoXHuNuebAISZpPdn8crGtJsZwXBQc
Xa1v+qbQFK76Lx84mcoAFuA44d2aC0jaST13P1IBl74jslLE7Hfa5yKmdFIDAD0d
mH3c4JYLmTHVNWHPJ1uyynSt6Vz4q4AmKbsoa07QGwI8WWvFsdfv7nJh+m2zw6qS
ZqgCuh80rZPs59rzk4bcf+9BLHn2TO38QAyYsJFIUkxVO1PVeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNPx23FCjW/Ts5fch8kYujEK7MiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNl
MDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4YzdkYmUvNjlhOTczYzktM2I3MC0z
Y2YwLTgwYTEtMDZmNmFlMDJhMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2VjZTA0MDQtODBhOC00NmYyLTky
ZWItOGYwYjU1OGM3ZGJlLzdlY2UwNDA0LTgwYTgtNDZmMi05MmViLThmMGI1NThj
N2RiZS5jcmwwHwYDVR0jBBgwFoAUGNN/t1DuQwFGJh0iV9F4XA6RX9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBi
NTU4YzdkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrwdRkBhrjx7eQywTpXM33e4e4aKV+R4enQy1Xd3Qgrl7HMC8iKZpCE
KM/e6ZdGtWnfeQvHho0Hk2ySbnRkWCjummD6fEprQae12v+jbl3PBNPEbRXpdy14
xmIc7teoT89f2OJ8xeh4hS+TV/PiO1lELDL/79BjAGFFOtbpoGBLKN7k2u4EQHmR
5htab6NFA40xEKUa2HUiW2LQKIjwXUW/3iz735IhOAmfeZrAG+3O7x5/FyVitZQ/
cqSsRY0tskxSvVnCRGTOFq4J2N9pp7wXFCfx9j1UtCyUFSO28B68XvdKUq93E8CD
ZQnIwlZH+HCq0bu2AP+FYQhllupMuvo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:49 2026 by rpki-client