Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/07b1c65a-7a17-3cc4-a4cd-87c021c5f8dc.roa
File:                     07b1c65a-7a17-3cc4-a4cd-87c021c5f8dc.roa (raw, json)
Hash identifier:          EvQ1PiHLRw8SeeHsOYpeQCQiaVR/bo+F38MuAhN2O1I=
Subject key identifier:   92:80:9A:6C:79:03:C4:69:E1:AA:DE:51:41:A6:FC:50:27:56:A8:44
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584D789FD0D6B14D8A3C3D7841A0
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/07b1c65a-7a17-3cc4-a4cd-87c021c5f8dc.roa
Signing time:             Sat 11 Apr 2026 13:00:31 +0000
ROA not before:           Sat 11 Apr 2026 13:00:31 +0000
ROA not after:            Fri 10 Jul 2026 13:00:31 +0000
asID:                     212890
IP address blocks:        66.85.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:78:9f:d0:d6:b1:4d:8a:3c:3d:78:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Apr 11 13:00:31 2026 GMT
            Not After : Jul 10 13:00:31 2026 GMT
        Subject: CN=d8d9a77a-f7c9-4651-95a2-812daf850971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:30:9f:8c:2d:cf:d1:bc:f6:47:78:1c:34:
                    7c:bf:8c:c1:a7:df:4d:f6:81:41:a0:84:d0:32:46:
                    69:4e:91:ac:1e:43:e7:97:da:80:23:33:3f:a9:18:
                    78:85:41:d7:b9:3e:70:7b:ed:6a:4b:9f:f9:43:2f:
                    e8:8f:8b:99:7c:42:2f:38:02:f9:18:e6:ba:7e:b1:
                    09:2c:db:79:4c:cb:a7:97:91:24:26:97:be:ae:16:
                    e5:5b:9c:81:58:08:52:62:98:a5:0b:28:7b:87:cc:
                    40:0b:29:a5:f7:70:3c:0e:f0:fb:ba:be:77:4f:bb:
                    61:c9:83:ba:82:4d:17:24:4a:08:b9:58:4b:c3:c7:
                    b5:c4:e8:2d:3d:d9:d1:a9:8c:f8:8e:b4:ed:84:08:
                    3d:2a:97:cf:ea:35:26:1f:c4:5a:88:02:e0:98:22:
                    7c:8b:84:b2:c1:00:cb:72:26:46:97:d5:65:f1:66:
                    82:a6:c6:15:f1:82:f9:b3:59:a4:76:c6:a2:68:a6:
                    76:1f:a3:8a:93:61:cc:69:45:1a:5a:ce:cb:b1:2e:
                    18:a1:51:ea:d1:1d:78:a0:2a:47:c1:fc:ae:ed:68:
                    dd:27:ca:a7:ce:8b:dc:de:02:95:b8:12:94:ec:69:
                    bc:6d:81:61:21:8b:14:93:03:ea:92:4b:f6:81:9b:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:9A:6C:79:03:C4:69:E1:AA:DE:51:41:A6:FC:50:27:56:A8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/07b1c65a-7a17-3cc4-a4cd-87c021c5f8dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:50:94:f8:67:b6:b3:18:d6:2d:b6:1f:00:79:a1:77:81:51:
         af:ab:49:47:cf:92:22:70:1c:47:fb:00:18:b7:2d:1a:25:e7:
         b6:da:09:f3:6f:b9:8b:08:bc:5e:a5:ae:cc:a5:65:fa:01:56:
         dc:4a:3f:d6:73:fe:e9:6a:e1:28:e4:22:c4:93:3e:48:6d:9f:
         da:b4:02:ac:00:c0:f4:20:db:ce:06:87:8d:02:68:6e:ef:33:
         23:a4:80:0f:f8:81:65:ad:3b:11:83:f5:e2:f5:8b:18:b3:b5:
         56:02:e4:4b:52:a3:44:37:16:ed:13:67:56:1c:b7:bc:1a:95:
         2f:8c:a6:68:9d:4c:62:de:91:d5:44:ae:60:9f:55:79:94:c2:
         ec:dc:b6:62:75:82:e6:ce:74:7e:4d:45:5c:86:d9:63:d0:73:
         ba:b0:01:b7:8d:80:ad:1c:78:f7:99:9c:b6:58:76:f8:8e:13:
         af:23:22:69:1d:a6:5b:98:24:cd:cf:2a:be:16:44:1a:0a:b6:
         6e:e3:e7:86:1a:e0:ff:6a:3e:a6:cd:7d:08:99:aa:65:10:e5:
         12:cc:b9:3a:f4:36:b1:77:c6:51:eb:85:ed:11:9f:a9:51:35:
         16:dc:ce:c9:1d:bf:30:53:1f:7a:bf:c4:65:a8:26:f4:88:1e:
         16:45:76:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n9DWsU2KPD14QaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyYTVhZWUtYzE1Ni00M2E3LTg1MmQtOGNmYzJhY2Ez
NmU2MB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk
ZDhkOWE3N2EtZjdjOS00NjUxLTk1YTItODEyZGFmODUwOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bcwn4wtz9G89kd4HDR8v4zBp99N9oFBoITQ
MkZpTpGsHkPnl9qAIzM/qRh4hUHXuT5we+1qS5/5Qy/oj4uZfEIvOAL5GOa6frEJ
LNt5TMunl5EkJpe+rhblW5yBWAhSYpilCyh7h8xACyml93A8DvD7ur53T7thyYO6
gk0XJEoIuVhLw8e1xOgtPdnRqYz4jrTthAg9KpfP6jUmH8RaiALgmCJ8i4SywQDL
ciZGl9Vl8WaCpsYV8YL5s1mkdsaiaKZ2H6OKk2HMaUUaWs7LsS4YoVHq0R14oCpH
wfyu7WjdJ8qnzovc3gKVuBKU7Gm8bYFhIYsUkwPqkkv2gZv12QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKAmmx5A8Rp4areUUGm/FAnVqhEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJh
NWFlZS1jMTU2LTQzYTctODUyZC04Y2ZjMmFjYTM2ZTYvMDdiMWM2NWEtN2ExNy0z
Y2M0LWE0Y2QtODdjMDIxYzVmOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTgyYTVhZWUtYzE1Ni00M2E3LTg1
MmQtOGNmYzJhY2EzNmU2L2U4MmE1YWVlLWMxNTYtNDNhNy04NTJkLThjZmMyYWNh
MzZlNi5jcmwwHwYDVR0jBBgwFoAUUFdAxxWy+40HQ6bcB3qgd77rv0QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJhNWFlZS1jMTU2LTQzYTctODUyZC04Y2Zj
MmFjYTM2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9QlPhntrMY1i22HwB5oXeBUa+rSUfPkiJwHEf7ABi3LRol57baCfNv
uYsIvF6lrsylZfoBVtxKP9Zz/ulq4SjkIsSTPkhtn9q0AqwAwPQg284Gh40CaG7v
MyOkgA/4gWWtOxGD9eL1ixiztVYC5EtSo0Q3Fu0TZ1Yct7walS+MpmidTGLekdVE
rmCfVXmUwuzctmJ1gubOdH5NRVyG2WPQc7qwAbeNgK0cePeZnLZYdviOE68jImkd
pluYJM3PKr4WRBoKtm7j54Ya4P9qPqbNfQiZqmUQ5RLMuTr0NrF3xlHrhe0Rn6lR
NRbczskdvzBTH3q/xGWoJvSIHhZFdrY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:52 2026 by rpki-client