Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/398349ea-751a-379a-ab7e-eb1e16ab038a.roa
File:                     398349ea-751a-379a-ab7e-eb1e16ab038a.roa (raw, json)
Hash identifier:          HwdWHqUGtAH05rxZBUoOumpLEk98cFggmbQmSh+GEYQ=
Subject key identifier:   0F:CC:60:1F:45:D0:61:22:84:35:2E:EF:57:79:68:01:39:F0:E8:AA
Certificate issuer:       /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial:       010D0C9F4328584EA79025EEDEAA1BDC46800420
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/398349ea-751a-379a-ab7e-eb1e16ab038a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        66.118.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:25:ee:de:aa:1b:dc:46:80:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f97a1e85-a542-4741-81f1-8c8d60f27af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:59:3d:5d:23:a0:4e:53:07:03:53:02:4c:
                    f1:2f:66:18:7a:87:5c:8d:d5:ee:f5:e0:08:2c:b6:
                    c9:d0:32:92:9c:2e:f8:5e:15:30:50:fb:80:63:76:
                    65:f6:52:8e:5e:5c:fb:e9:25:83:f3:d7:b7:03:0d:
                    e2:68:6b:6f:14:63:48:b6:7b:ea:6c:28:23:03:80:
                    be:b6:89:ea:63:eb:48:31:5a:28:fb:f1:d8:82:87:
                    9b:1c:16:1d:90:30:af:ce:80:62:18:7f:82:58:09:
                    1e:3b:7a:27:dc:d9:d9:89:3d:3f:2e:5f:de:85:ed:
                    90:86:ed:26:ea:48:74:62:af:e5:38:60:9f:32:b1:
                    cd:0d:39:68:86:6c:91:ed:10:28:96:84:bb:4b:bf:
                    d0:94:0a:f5:ce:86:5e:5a:37:39:21:c8:50:c9:5f:
                    25:71:bd:cc:b1:7b:ca:a5:bb:18:84:a5:22:65:cb:
                    2d:f0:3f:e8:17:76:dd:bd:1c:3c:4e:0a:19:90:db:
                    3a:37:33:61:f3:8e:ea:7a:88:4f:b7:d8:3f:29:89:
                    c8:88:6d:2d:a3:39:ed:21:27:aa:25:2f:4b:e4:7d:
                    c0:2c:85:fa:11:fb:71:c9:33:f7:4a:ca:7f:32:c5:
                    7f:90:b8:ff:47:35:f0:3a:52:fd:4f:97:bc:ed:a0:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CC:60:1F:45:D0:61:22:84:35:2E:EF:57:79:68:01:39:F0:E8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/398349ea-751a-379a-ab7e-eb1e16ab038a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl

            X509v3 Authority Key Identifier:
                keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c9:fa:2f:40:13:fe:9d:0e:b3:ef:b8:81:25:68:67:7b:bc:
         fe:c3:2c:e4:3c:28:b7:56:c7:4f:19:a4:c2:dc:89:a7:86:b7:
         9c:36:eb:65:74:c3:34:10:a5:da:fe:11:83:7a:02:ae:4b:18:
         98:fe:d1:54:1c:a8:c7:70:13:55:fc:41:e9:39:17:9b:15:21:
         ed:20:e7:3a:7b:5b:82:f7:f1:b2:0d:24:0e:c7:1d:47:cc:e8:
         8f:2a:13:ec:8b:c7:0b:78:d5:a4:9e:41:85:1f:c7:bb:58:be:
         d9:4c:2c:b4:5c:3b:8f:9b:9c:fa:bb:6d:06:e4:de:6f:86:ec:
         dd:53:31:a8:6e:21:16:08:fe:58:e0:04:fa:6e:04:4b:a3:f5:
         90:4d:1c:23:ee:2b:4c:96:31:8f:8d:fb:d1:c5:bd:9d:d0:24:
         8b:9b:62:1d:3f:49:8c:2c:3b:95:05:54:02:c8:b9:d7:25:1f:
         ef:2f:ec:ab:c5:77:8e:72:e0:d0:db:9d:47:c6:e8:65:f1:70:
         7f:47:31:ab:ff:d3:89:02:ab:d9:8d:3f:74:e7:b6:51:67:94:
         5d:23:e8:15:13:a9:54:75:76:13:ba:48:14:e4:67:1d:87:23:
         a5:fc:87:1b:9b:ca:b4:17:18:83:ce:d5:49:83:73:38:8a:f3:
         f3:cf:a2:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkCXu3qob3EaABCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmYzAxZGItZDdlNi00N2QxLWFkNGQtNzYxMmEzMjU4
MDVjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Zjk3YTFlODUtYTU0Mi00NzQxLTgxZjEtOGM4ZDYwZjI3YWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yJZPV0joE5TBwNTAkzxL2YYeodcjdXu9eAI
LLbJ0DKSnC74XhUwUPuAY3Zl9lKOXlz76SWD89e3Aw3iaGtvFGNItnvqbCgjA4C+
tonqY+tIMVoo+/HYgoebHBYdkDCvzoBiGH+CWAkeO3on3NnZiT0/Ll/ehe2Qhu0m
6kh0Yq/lOGCfMrHNDTlohmyR7RAoloS7S7/QlAr1zoZeWjc5IchQyV8lcb3MsXvK
pbsYhKUiZcst8D/oF3bdvRw8TgoZkNs6NzNh847qeohPt9g/KYnIiG0tozntISeq
JS9L5H3ALIX6EftxyTP3Ssp/MsV/kLj/RzXwOlL9T5e87aDrtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/MYB9F0GEihDUu71d5aAE58OiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWZj
MDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEyYTMyNTgwNWMvMzk4MzQ5ZWEtNzUxYS0z
NzlhLWFiN2UtZWIxZTE2YWIwMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFmYzAxZGItZDdlNi00N2QxLWFk
NGQtNzYxMmEzMjU4MDVjLzYxZmMwMWRiLWQ3ZTYtNDdkMS1hZDRkLTc2MTJhMzI1
ODA1Yy5jcmwwHwYDVR0jBBgwFoAUgZu/FDKVcC6B9/0YnZ6paVfbUEwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWZjMDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEy
YTMyNTgwNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3J+i9AE/6dDrPvuIElaGd7vP7DLOQ8KLdWx08ZpMLciaeGt5w262V0
wzQQpdr+EYN6Aq5LGJj+0VQcqMdwE1X8Qek5F5sVIe0g5zp7W4L38bINJA7HHUfM
6I8qE+yLxwt41aSeQYUfx7tYvtlMLLRcO4+bnPq7bQbk3m+G7N1TMahuIRYI/ljg
BPpuBEuj9ZBNHCPuK0yWMY+N+9HFvZ3QJIubYh0/SYwsO5UFVALIudclH+8v7KvF
d45y4NDbnUfG6GXxcH9HMav/04kCq9mNP3TntlFnlF0j6BUTqVR1dhO6SBTkZx2H
I6X8hxubyrQXGIPO1UmDcziK8/PPovs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:25:18 2026 by rpki-client