Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e05dbaf0-6ce9-319e-b05c-070225fbd158.roa
File:                     e05dbaf0-6ce9-319e-b05c-070225fbd158.roa (raw, json)
Hash identifier:          odhY7ZACajTqdmT+LULVEB5JOFw9/RHvURJw5srfr60=
Subject key identifier:   52:99:D5:E0:F5:83:FA:E2:B5:A3:CF:10:26:9B:AA:7D:1C:E4:2E:47
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584D091267BF57E8044B6C0A8940
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e05dbaf0-6ce9-319e-b05c-070225fbd158.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     14477
IP address blocks:        66.152.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:67:bf:57:e8:04:4b:6c:0a:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=cabed137-b1e7-4f5a-8932-63c432bf2ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:eb:be:3b:ec:84:4c:46:ec:f9:8c:9d:65:
                    c8:fd:58:ef:c4:1c:db:0f:cf:e5:d8:c0:96:a3:b1:
                    62:bf:56:a2:9e:a2:11:34:29:30:05:79:27:d6:ec:
                    8c:09:1e:06:1a:d9:da:b1:2e:8d:53:39:6a:66:87:
                    40:ec:5d:e0:c6:3e:0e:d9:79:5f:90:32:18:fd:c8:
                    d4:0a:d2:43:77:1d:c1:69:3b:ab:30:f1:17:ac:3c:
                    e9:08:0c:76:8c:b2:8f:2a:34:2f:11:1c:f6:ab:04:
                    51:70:df:b3:98:1e:0c:69:c6:8b:36:cc:6b:1d:5d:
                    2d:4d:a2:98:e0:64:01:54:a9:e6:5b:40:d5:5c:80:
                    d7:ed:3c:be:a7:6a:0f:11:50:63:a8:c4:b8:54:a2:
                    3d:3d:c1:59:78:fa:61:b2:27:57:a1:c6:73:65:c0:
                    29:56:27:e2:78:d2:79:da:29:96:e2:56:8a:d2:ab:
                    c6:92:34:7a:f9:73:39:85:f7:db:4a:34:e0:6a:15:
                    f0:bc:ab:70:a7:f3:3e:1f:0f:5e:4b:3e:0b:23:e7:
                    13:52:ee:7b:fb:ca:1b:70:13:c5:e2:e9:27:b7:f4:
                    8b:f2:67:82:fd:fd:54:12:80:82:39:66:4e:62:7e:
                    df:7c:b5:a0:43:67:7a:fd:7c:42:e4:4e:f2:8d:67:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:99:D5:E0:F5:83:FA:E2:B5:A3:CF:10:26:9B:AA:7D:1C:E4:2E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e05dbaf0-6ce9-319e-b05c-070225fbd158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d1:d4:b8:f4:2d:05:27:56:4c:2c:e5:19:43:f9:70:84:ca:
         ce:7a:84:fd:27:a1:56:aa:31:ba:d0:59:c4:aa:45:7a:1d:e2:
         80:9e:a8:34:e2:85:b5:68:dd:fe:09:40:53:98:59:79:b4:ec:
         66:38:d2:b1:96:5d:e5:2b:9e:a3:2c:28:f5:a3:87:a8:47:49:
         36:26:e3:da:c4:cd:f8:d0:8a:ea:ae:2b:df:53:ef:29:e8:76:
         4f:77:0e:23:42:7a:e5:e5:63:ff:15:5d:4e:57:ad:95:b8:ee:
         e9:c3:4b:c3:50:fc:d7:e9:cc:fb:98:bf:98:a8:cb:dd:2b:17:
         25:0b:ea:4c:cb:81:b7:43:d3:9c:7c:90:9f:53:e5:b5:18:cc:
         32:3f:27:e8:2f:72:1c:61:9a:6d:1e:42:28:62:43:3c:e1:92:
         38:76:32:9a:d2:88:88:85:62:88:59:c1:6c:70:be:7e:0e:5c:
         9f:c1:5f:95:1e:60:f7:cc:59:ac:df:ef:da:5a:d5:87:89:71:
         20:8c:da:cb:b7:f8:f2:52:05:fb:9d:28:e5:9e:88:25:1e:ea:
         d7:20:a1:e9:4d:c6:bd:62:43:1f:d9:a7:53:9a:89:7e:71:4f:
         74:13:5c:a8:ea:2a:db:2e:ac:35:1d:cc:95:04:3e:87:5d:b7:
         3c:db:32:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEme/V+gES2wKiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
Y2FiZWQxMzctYjFlNy00ZjVhLTg5MzItNjNjNDMyYmYyYWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO3rvjvshExG7PmMnWXI/VjvxBzbD8/l2MCW
o7Fiv1ainqIRNCkwBXkn1uyMCR4GGtnasS6NUzlqZodA7F3gxj4O2XlfkDIY/cjU
CtJDdx3BaTurMPEXrDzpCAx2jLKPKjQvERz2qwRRcN+zmB4MacaLNsxrHV0tTaKY
4GQBVKnmW0DVXIDX7Ty+p2oPEVBjqMS4VKI9PcFZePphsidXocZzZcApVifieNJ5
2imW4laK0qvGkjR6+XM5hffbSjTgahXwvKtwp/M+Hw9eSz4LI+cTUu57+8obcBPF
4uknt/SL8meC/f1UEoCCOWZOYn7ffLWgQ2d6/XxC5E7yjWdYZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKZ1eD1g/ritaPPECabqn0c5C5HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTA1ZGJhZjAtNmNlOS0z
MTllLWIwNWMtMDcwMjI1ZmJkMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQphwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzR1Lj0LQUnVkws5RlD+XCEys56hP0noVaqMbrQWcSqRXod4oCeqDTi
hbVo3f4JQFOYWXm07GY40rGWXeUrnqMsKPWjh6hHSTYm49rEzfjQiuquK99T7yno
dk93DiNCeuXlY/8VXU5XrZW47unDS8NQ/NfpzPuYv5ioy90rFyUL6kzLgbdD05x8
kJ9T5bUYzDI/J+gvchxhmm0eQihiQzzhkjh2MprSiIiFYohZwWxwvn4OXJ/BX5Ue
YPfMWazf79pa1YeJcSCM2su3+PJSBfudKOWeiCUe6tcgoelNxr1iQx/Zp1OaiX5x
T3QTXKjqKtsurDUdzJUEPoddtzzbMic=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:49 2026 by rpki-client