Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
File:                     ada8083d-f38d-3f27-99a2-b33c58b226ac.roa (raw, json)
Hash identifier:          ul81ZO+BNoHdqoul9WQWd9Wu82IxmbypErM6I6vBS/k=
Subject key identifier:   97:D0:D0:35:A8:2D:9E:34:84:79:82:6F:D7:4B:9F:32:6C:25:E8:7A
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584F1467A187A078168DB18C2380
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     395591
IP address blocks:        66.206.199.0/24 maxlen: 24
                          66.206.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a1:87:a0:78:16:8d:b1:8c:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=4ce4d3f0-65c4-4c79-a7aa-6d53f7c69463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:f0:20:21:f6:9e:2f:75:52:05:43:9c:f9:
                    da:ad:93:59:47:f6:51:ff:8a:48:27:cc:d2:47:0a:
                    82:73:3e:e0:55:bb:18:bb:e1:a2:01:58:d7:b9:c8:
                    a5:7d:4b:55:99:fa:f7:82:c0:dc:91:eb:d7:1d:dd:
                    9c:50:1f:89:59:3d:b5:09:e0:32:97:d5:d2:0d:63:
                    85:55:f5:64:05:3c:21:a4:29:49:c8:ed:2c:f0:d5:
                    eb:ce:9f:c8:f5:b4:ff:5c:53:13:4d:17:25:ad:a2:
                    11:fc:87:00:02:e5:d0:ac:7c:99:c1:2b:84:04:52:
                    3f:43:5d:18:bf:66:d8:ab:7c:fe:aa:d9:d7:b5:83:
                    89:a5:b0:91:0f:45:09:60:de:bd:5a:a2:e9:da:86:
                    2f:ce:8f:e2:ae:a1:f6:b6:17:d1:c1:cd:4d:a8:68:
                    37:3a:36:6a:64:d1:34:4f:ad:96:bf:75:51:24:af:
                    36:9a:14:b2:50:f1:cc:0a:1a:4a:aa:69:bd:36:dc:
                    be:18:30:df:72:c6:65:33:5c:99:a8:f9:a4:72:0b:
                    0d:3b:4c:d6:6d:30:eb:20:3a:b0:9a:a2:c7:04:83:
                    a0:ae:bc:3e:39:be:03:80:d2:ee:93:71:fc:e4:92:
                    aa:36:a7:31:19:65:b4:c8:e4:f7:fc:af:54:32:a4:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:D0:35:A8:2D:9E:34:84:79:82:6F:D7:4B:9F:32:6C:25:E8:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.199.0/24
                  66.206.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:aa:1f:c6:1d:0f:07:b4:f2:6d:7c:bf:ee:7e:51:32:48:
         4e:76:0e:2a:00:f4:4a:72:8a:c3:33:25:81:da:d6:0c:12:38:
         40:25:5b:d5:51:d4:7f:fc:92:2a:8d:08:d2:94:9e:60:ec:02:
         93:73:20:e4:8e:23:cf:c9:3b:56:de:de:a0:80:86:d9:5f:05:
         d8:42:8c:45:30:5f:e8:7a:94:14:b8:5e:40:70:11:58:6a:c4:
         3d:3c:c2:c6:9e:a1:e2:ab:34:e2:3d:c6:ca:1b:cc:a3:42:15:
         52:af:eb:5a:0e:8f:c9:56:b5:dc:49:30:0e:3f:ce:f7:ea:32:
         a1:bf:45:a5:07:b9:c0:8c:e9:0e:f5:fc:0a:61:9e:35:0b:2c:
         eb:f9:a6:1b:33:88:76:42:c5:44:4f:26:6a:3b:b9:7f:21:ba:
         f1:d8:dc:b3:ff:7f:ae:e6:de:8f:c6:a9:22:58:a2:d8:21:6b:
         a9:3e:bc:43:40:15:7a:f5:d6:3b:7d:7d:a1:5a:e4:09:60:dd:
         ae:08:65:60:f4:f5:63:4c:66:3c:2f:55:fb:75:1c:ae:59:17:
         d5:b3:23:01:3c:ec:42:38:9f:e2:77:d8:30:35:e9:bb:7c:9f:
         8c:de:0e:66:1f:79:78:5b:bd:38:ad:ac:68:29:b7:a6:dd:8c:
         22:66:e4:1c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8UZ6GHoHgWjbGMI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
NGNlNGQzZjAtNjVjNC00Yzc5LWE3YWEtNmQ1M2Y3YzY5NDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOzwICH2ni91UgVDnPnarZNZR/ZR/4pIJ8zS
RwqCcz7gVbsYu+GiAVjXucilfUtVmfr3gsDckevXHd2cUB+JWT21CeAyl9XSDWOF
VfVkBTwhpClJyO0s8NXrzp/I9bT/XFMTTRclraIR/IcAAuXQrHyZwSuEBFI/Q10Y
v2bYq3z+qtnXtYOJpbCRD0UJYN69WqLp2oYvzo/irqH2thfRwc1NqGg3OjZqZNE0
T62Wv3VRJK82mhSyUPHMChpKqmm9Nty+GDDfcsZlM1yZqPmkcgsNO0zWbTDrIDqw
mqLHBIOgrrw+Ob4DgNLuk3H85JKqNqcxGWW0yOT3/K9UMqR1IQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJfQ0DWoLZ40hHmCb9dLnzJsJeh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYWRhODA4M2QtZjM4ZC0z
ZjI3LTk5YTItYjMzYzU4YjIyNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQs7HAwQA
Qs7JMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIi0qh/GHQ8HtPJtfL/uflEySE52DioA9EpyisMzJYHa1gwS
OEAlW9VR1H/8kiqNCNKUnmDsApNzIOSOI8/JO1be3qCAhtlfBdhCjEUwX+h6lBS4
XkBwEVhqxD08wsaeoeKrNOI9xsobzKNCFVKv61oOj8lWtdxJMA4/zvfqMqG/RaUH
ucCM6Q71/AphnjULLOv5phsziHZCxURPJmo7uX8huvHY3LP/f67m3o/GqSJYotgh
a6k+vENAFXr11jt9faFa5Alg3a4IZWD09WNMZjwvVft1HK5ZF9WzIwE87EI4n+J3
2DA16bt8n4zeDmYfeXhbvTitrGgpt6bdjCJm5Bw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:04:39 2026 by rpki-client