Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa
File:                     85bd442b-ff54-31da-8177-81f7c28bd362.roa (raw, json)
Hash identifier:          WN+1NdImg0y9YE5bR9/1rBMfWA7TGJM4lbQ0qm8y9N4=
Subject key identifier:   62:28:D7:5E:9C:DB:B8:2F:C1:DB:10:2E:EC:6C:3B:FB:61:B6:E7:86
Certificate issuer:       /CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
Certificate serial:       010D0C9F4328584E0C1EDE344B0133469AB40240
Authority key identifier: 0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     16509
IP address blocks:        66.218.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:de:34:4b:01:33:46:9a:b4:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=21aee394-9837-4368-b170-30bda3c3c80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:50:a8:24:ec:55:83:30:90:25:d0:9c:41:a4:
                    65:73:01:ee:f7:4d:0f:30:0f:27:05:3a:4e:35:35:
                    84:95:e4:38:28:f0:a6:b7:32:e5:bc:0a:1d:bb:f5:
                    02:9b:06:fb:7a:17:2b:74:b2:67:9a:5d:b4:b4:37:
                    bd:31:48:4a:79:2b:3d:0f:9d:8c:ba:aa:94:f9:df:
                    2f:10:84:a8:93:a1:68:1b:ca:95:ca:78:57:e9:0d:
                    50:5d:a1:5b:ce:0d:52:3c:48:ff:54:8e:d3:63:07:
                    67:41:0a:97:ca:8d:9b:d7:8d:af:cb:f2:e8:ca:02:
                    5c:2f:c6:78:54:2e:0c:84:d0:65:01:8d:65:b5:a5:
                    54:c7:cc:43:8b:2a:a9:98:d7:47:c1:df:19:cb:73:
                    14:19:f5:0a:ce:c2:fd:32:76:9d:82:9b:2d:d5:b3:
                    63:cb:b2:22:a5:79:64:17:bf:47:e0:2f:ae:eb:3f:
                    1e:48:d0:f9:81:e4:fc:fa:22:f8:fe:96:21:e1:5d:
                    1d:06:b8:19:ee:88:b8:00:89:cd:8f:ba:f9:5a:96:
                    f1:8b:5a:bf:44:6e:a0:a3:96:b9:d7:98:8e:31:1a:
                    ab:4c:a9:1b:12:4a:6f:7f:5a:dc:2d:00:ef:83:e2:
                    6a:71:28:36:3a:ff:e3:6e:d9:a9:f3:7d:04:c4:20:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:D7:5E:9C:DB:B8:2F:C1:DB:10:2E:EC:6C:3B:FB:61:B6:E7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl

            X509v3 Authority Key Identifier:
                keyid:0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9c:9d:57:dc:1e:82:39:96:33:1f:a0:64:b2:8a:53:5e:97:
         da:ac:2c:e0:90:3c:47:14:a5:4a:0b:dc:24:ee:8c:e5:5d:34:
         a4:70:21:66:c2:17:86:84:9c:2b:cf:8e:07:05:f4:50:cc:09:
         fc:e0:51:03:f8:35:13:51:bf:f4:75:9c:1f:97:32:c8:39:45:
         f1:c0:38:fc:01:c0:bc:f4:b4:80:7a:0c:ed:b7:b0:17:03:40:
         1a:db:e5:5d:37:b8:7f:ec:24:88:af:37:c4:01:75:f9:d3:41:
         69:d9:09:12:bb:14:3a:6e:1e:e8:35:97:2e:7f:29:3f:2b:7a:
         1a:be:f3:61:7a:58:ec:53:df:11:c9:cc:64:37:0d:db:cd:e9:
         f5:ab:9a:d8:77:2f:b1:4e:b6:20:55:88:85:08:29:b7:ac:54:
         a4:22:28:d5:79:47:1d:3e:19:b6:94:f2:90:3b:6a:1d:74:a4:
         6e:4d:86:1d:e3:c1:e5:21:fc:a0:a7:6c:84:c1:5b:c9:fb:57:
         af:5f:c7:00:33:99:78:57:56:63:67:4b:dc:9c:d1:c3:da:19:
         e4:70:71:e9:56:12:f9:4b:05:9e:c7:4c:0e:a4:b5:92:15:83:
         67:2f:41:ae:86:be:19:eb:df:e4:d7:15:b5:1f:fb:b8:3b:34:
         3b:29:f6:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHt40SwEzRpq0AkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZkMzFlODEtNjU5OS00YmFjLThhNzQtN2JiZTkyMzMz
NzRhMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
MjFhZWUzOTQtOTgzNy00MzY4LWIxNzAtMzBiZGEzYzNjODBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81CoJOxVgzCQJdCcQaRlcwHu900PMA8nBTpO
NTWEleQ4KPCmtzLlvAodu/UCmwb7ehcrdLJnml20tDe9MUhKeSs9D52MuqqU+d8v
EISok6FoG8qVynhX6Q1QXaFbzg1SPEj/VI7TYwdnQQqXyo2b142vy/LoygJcL8Z4
VC4MhNBlAY1ltaVUx8xDiyqpmNdHwd8Zy3MUGfUKzsL9Mnadgpst1bNjy7IipXlk
F79H4C+u6z8eSND5geT8+iL4/pYh4V0dBrgZ7oi4AInNj7r5Wpbxi1q/RG6go5a5
15iOMRqrTKkbEkpvf1rcLQDvg+JqcSg2Ov/jbtmp830ExCBcSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIo116c27gvwdsQLuxsO/thtueGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZmQz
MWU4MS02NTk5LTRiYWMtOGE3NC03YmJlOTIzMzM3NGEvODViZDQ0MmItZmY1NC0z
MWRhLTgxNzctODFmN2MyOGJkMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmZkMzFlODEtNjU5OS00YmFjLThh
NzQtN2JiZTkyMzMzNzRhLzZmZDMxZTgxLTY1OTktNGJhYy04YTc0LTdiYmU5MjMz
Mzc0YS5jcmwwHwYDVR0jBBgwFoAUDJlBadLj0QERcoOGLecH5NAUKaswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82ZmQzMWU4MS02NTk5LTRiYWMtOGE3NC03YmJl
OTIzMzM3NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtoGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6cnVfcHoI5ljMfoGSyilNel9qsLOCQPEcUpUoL3CTujOVdNKRwIWbC
F4aEnCvPjgcF9FDMCfzgUQP4NRNRv/R1nB+XMsg5RfHAOPwBwLz0tIB6DO23sBcD
QBrb5V03uH/sJIivN8QBdfnTQWnZCRK7FDpuHug1ly5/KT8rehq+82F6WOxT3xHJ
zGQ3DdvN6fWrmth3L7FOtiBViIUIKbesVKQiKNV5Rx0+GbaU8pA7ah10pG5Nhh3j
weUh/KCnbITBW8n7V69fxwAzmXhXVmNnS9yc0cPaGeRwcelWEvlLBZ7HTA6ktZIV
g2cvQa6Gvhnr3+TXFbUf+7g7NDsp9p4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:16:02 2026 by rpki-client