Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa
File:                     15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa (raw, json)
Hash identifier:          jn+mqzxEElx4bsEx92VkwTs7dkBfCLNo6P9w2fwyUrI=
Subject key identifier:   3F:3F:F4:30:20:6C:AE:37:5B:D5:CA:6A:A8:2C:4D:07:85:F9:20:E8
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584F19FCFB2EB9AEC30FC480D820
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     14477
IP address blocks:        216.59.69.0/24 maxlen: 24
                          216.59.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fb:2e:b9:ae:c3:0f:c4:80:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=d67887e2-b726-4640-89b4-42d629666772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:88:6f:b9:ad:4f:a8:ee:ea:e4:90:93:d6:a2:
                    58:f6:2b:96:aa:06:b2:14:53:c2:12:f7:e5:c0:83:
                    e7:15:3b:25:8a:db:d7:a0:d7:8e:4f:3e:df:bf:37:
                    e1:e1:08:a7:49:51:ba:90:16:4c:ed:f6:b6:c9:ce:
                    d4:90:56:68:51:99:e6:2d:c0:bb:35:e0:b1:5f:e1:
                    97:b4:b5:b1:e2:9b:5d:e1:40:aa:24:9d:7e:be:3c:
                    a1:f9:06:37:ec:52:79:cf:b9:d7:8a:72:f2:90:14:
                    59:f8:df:27:f6:b4:1c:f4:1c:d4:7b:e4:b0:f3:61:
                    ab:b2:d0:f5:d2:b3:74:42:bf:7c:ea:ff:83:40:f0:
                    8b:8c:54:63:9d:bd:56:5f:77:b6:36:81:b4:06:c1:
                    df:4e:bd:b7:12:c5:3f:3a:6e:48:55:cb:04:d8:7c:
                    a3:55:31:4c:10:e3:cc:55:3c:36:b7:63:d7:c1:75:
                    a6:ed:76:8f:52:04:07:3a:0a:ca:f8:b2:27:92:96:
                    5d:f7:4b:2d:a9:10:50:2f:ad:ec:d8:db:3d:19:d7:
                    68:08:a9:7d:9a:cd:60:a1:97:3d:2c:da:77:1a:db:
                    99:95:1e:84:49:08:73:92:30:2b:32:8d:35:03:28:
                    70:d5:c9:8e:b4:40:34:78:08:a3:81:42:5e:be:91:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3F:F4:30:20:6C:AE:37:5B:D5:CA:6A:A8:2C:4D:07:85:F9:20:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/15ff7aa8-0e14-3932-86b8-2eba8e681bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.69.0/24
                  216.59.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:52:0c:2a:97:ed:14:3d:37:ad:40:1a:27:0f:00:b1:82:a2:
         6b:2e:96:4d:69:6f:94:f1:67:d2:1c:72:41:e0:41:39:17:cc:
         57:f1:03:f5:bb:92:17:91:af:24:fc:09:d7:97:62:8f:ee:50:
         f2:c9:85:02:82:cf:48:c8:79:9c:5b:ba:b0:30:54:84:9e:b5:
         d4:79:c9:14:47:6a:fb:fe:94:40:40:11:57:3c:a6:ad:df:ec:
         ca:45:fe:fd:61:67:41:e2:04:bb:74:0a:a0:0d:1a:e0:95:db:
         ee:a8:f1:d8:8d:7f:c4:e8:58:38:4a:f8:09:4c:2a:d5:65:2e:
         2d:86:b7:9a:b3:35:d2:9f:42:fc:55:69:2c:2e:7e:76:8d:40:
         b2:2b:69:44:c7:f2:fd:cf:22:16:6f:56:68:bb:64:29:72:d1:
         28:9a:19:79:5a:9b:85:96:41:3a:ed:90:32:32:d9:37:61:36:
         c9:da:c4:65:0d:73:07:b2:fa:a2:4e:92:31:2a:fe:23:6e:07:
         e2:05:30:86:97:c7:ad:e5:73:6f:71:37:9d:5c:ec:f9:65:a2:
         19:1e:39:6c:35:8f:d7:53:54:a7:74:28:cc:3f:ae:04:c5:60:
         c3:cd:8e:97:6a:25:ca:ae:65:0d:79:c2:82:22:dc:a7:16:38:
         c4:4d:56:01
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8Z/Psuua7DD8SA2CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3
OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDY3ODg3ZTItYjcyNi00NjQwLTg5YjQtNDJkNjI5NjY2NzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYhvua1PqO7q5JCT1qJY9iuWqgayFFPCEvfl
wIPnFTslitvXoNeOTz7fvzfh4QinSVG6kBZM7fa2yc7UkFZoUZnmLcC7NeCxX+GX
tLWx4ptd4UCqJJ1+vjyh+QY37FJ5z7nXinLykBRZ+N8n9rQc9BzUe+Sw82GrstD1
0rN0Qr986v+DQPCLjFRjnb1WX3e2NoG0BsHfTr23EsU/Om5IVcsE2HyjVTFMEOPM
VTw2t2PXwXWm7XaPUgQHOgrK+LInkpZd90stqRBQL63s2Ns9GddoCKl9ms1goZc9
LNp3GtuZlR6ESQhzkjArMo01Ayhw1cmOtEA0eAijgUJevpFeHQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFD8/9DAgbK43W9XKaqgsTQeF+SDoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5
NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMTVmZjdhYTgtMGUxNC0z
OTMyLTg2YjgtMmViYThlNjgxYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx
ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0
NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy
MjdhNDc4ZmQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2DtFAwQA
2DtHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAENSDCqX7RQ9N61AGicPALGComsulk1pb5TxZ9IcckHgQTkX
zFfxA/W7kheRryT8CdeXYo/uUPLJhQKCz0jIeZxburAwVISetdR5yRRHavv+lEBA
EVc8pq3f7MpF/v1hZ0HiBLt0CqANGuCV2+6o8diNf8ToWDhK+AlMKtVlLi2Gt5qz
NdKfQvxVaSwufnaNQLIraUTH8v3PIhZvVmi7ZCly0SiaGXlam4WWQTrtkDIy2Tdh
NsnaxGUNcwey+qJOkjEq/iNuB+IFMIaXx63lc29xN51c7PllohkeOWw1j9dTVKd0
KMw/rgTFYMPNjpdqJcquZQ15woIi3KcWOMRNVgE=
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:05:49 2026 by rpki-client