Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1dee5a07-d856-35c8-a37f-003fc54b85f3.roa
File:                     1dee5a07-d856-35c8-a37f-003fc54b85f3.roa (raw, json)
Hash identifier:          p2U2DJyPqljwyRyeEf+CCRlV8DiSjMo2K/54TnjrAss=
Subject key identifier:   33:B5:66:84:28:A5:1F:31:34:D7:8A:61:D3:53:B5:58:43:EA:5E:12
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA7938F2FA3AAE6B66183B080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1dee5a07-d856-35c8-a37f-003fc54b85f3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        66.253.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:8f:2f:a3:aa:e6:b6:61:83:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=398dd105-bfc5-4a3d-ac18-9f14ff041b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:11:8e:be:9c:0e:dc:bd:62:2f:89:ef:32:
                    26:b0:92:8c:d3:ab:23:cd:28:be:98:e1:45:c1:8c:
                    26:2c:d8:d3:08:28:f0:67:94:69:c6:e0:8d:f7:ba:
                    6c:92:25:ba:3f:a1:87:44:96:3c:67:e7:d1:fe:22:
                    0e:32:f9:30:7a:bd:f5:ba:3d:ae:93:63:fe:94:22:
                    43:03:93:2b:e1:8d:35:76:30:c8:b1:fd:a1:80:e4:
                    e6:31:b8:c5:b2:3c:a8:d1:fa:17:0d:4c:4a:fb:80:
                    b0:17:49:f2:7d:9b:0f:8a:e2:21:04:14:c6:72:d9:
                    44:07:6c:d6:54:7e:19:24:ff:6b:9f:07:8f:be:c0:
                    9a:f3:95:c3:66:7b:87:6c:63:2f:4d:60:61:57:32:
                    c3:d2:1a:8a:3f:94:71:07:e6:f5:a3:2d:04:b2:4d:
                    32:16:9f:88:7d:c7:23:2e:65:59:eb:80:1b:69:43:
                    ba:00:98:04:52:2e:e3:a7:3b:da:a3:2e:0b:a9:e3:
                    5b:88:5b:74:e3:5d:13:10:9a:da:d4:24:be:cd:05:
                    65:15:92:e0:2e:3a:c8:48:bc:8d:1b:6f:77:f7:ea:
                    4e:8c:dc:57:99:28:ee:6f:3b:16:d3:7e:fd:ea:1d:
                    2a:b8:f9:29:c3:72:7e:7a:54:55:ef:67:b5:81:1c:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B5:66:84:28:A5:1F:31:34:D7:8A:61:D3:53:B5:58:43:EA:5E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1dee5a07-d856-35c8-a37f-003fc54b85f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:09:fa:53:6e:8d:66:80:62:59:a7:d7:c9:86:f4:2c:26:9c:
         87:ea:5e:76:9d:13:ff:93:71:0f:34:c1:ca:57:95:35:d5:f3:
         bf:ca:75:6e:f1:42:34:87:5f:61:fe:f0:12:90:44:5b:67:63:
         8f:28:a3:ce:a0:e7:7e:0e:1f:c3:7b:d3:35:dc:21:ed:51:41:
         a7:74:7e:59:89:40:6b:92:21:6c:83:ae:7d:64:ed:2b:20:37:
         bb:22:85:42:98:5c:96:80:c2:b9:b9:fd:1f:b2:a8:d1:f1:95:
         7b:2f:51:c8:5e:a4:f3:08:20:22:2e:a8:1d:31:17:9a:7e:ed:
         50:6d:80:fb:30:87:45:41:94:86:b2:f9:ed:91:9b:31:be:8d:
         a8:d4:53:63:a7:44:88:99:46:10:35:22:ec:22:d2:51:e5:c7:
         44:46:24:53:d3:6c:b7:ef:00:9b:31:6f:17:c9:3e:c9:70:b8:
         22:0b:9d:21:22:2e:67:a6:6d:bf:19:2d:5a:f0:85:a7:04:b7:
         bc:35:82:96:a1:5f:4c:34:40:fa:47:9f:c6:e1:65:8e:70:62:
         27:8a:5d:bc:c3:cf:68:93:44:cb:ba:c2:fc:7b:06:f2:22:bd:
         79:0a:34:21:23:21:1d:86:ac:cf:96:da:64:65:97:20:31:9f:
         67:67:47:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk48vo6rmtmGDsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Mzk4ZGQxMDUtYmZjNS00YTNkLWFjMTgtOWYxNGZmMDQxYjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpMRjr6cDty9Yi+J7zImsJKM06sjzSi+mOFF
wYwmLNjTCCjwZ5RpxuCN97pskiW6P6GHRJY8Z+fR/iIOMvkwer31uj2uk2P+lCJD
A5Mr4Y01djDIsf2hgOTmMbjFsjyo0foXDUxK+4CwF0nyfZsPiuIhBBTGctlEB2zW
VH4ZJP9rnwePvsCa85XDZnuHbGMvTWBhVzLD0hqKP5RxB+b1oy0Esk0yFp+Ifccj
LmVZ64AbaUO6AJgEUi7jpzvaoy4LqeNbiFt0410TEJra1CS+zQVlFZLgLjrISLyN
G2939+pOjNxXmSjubzsW03796h0quPkpw3J+elRV72e1gRycVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDO1ZoQopR8xNNeKYdNTtVhD6l4SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMWRlZTVhMDctZDg1Ni0z
NWM4LWEzN2YtMDAzZmM1NGI4NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQJ+lNujWaAYlmn18mG9CwmnIfqXnadE/+TcQ80wcpXlTXV87/KdW7x
QjSHX2H+8BKQRFtnY48oo86g534OH8N70zXcIe1RQad0flmJQGuSIWyDrn1k7Ssg
N7sihUKYXJaAwrm5/R+yqNHxlXsvUchepPMIICIuqB0xF5p+7VBtgPswh0VBlIay
+e2RmzG+jajUU2OnRIiZRhA1Iuwi0lHlx0RGJFPTbLfvAJsxbxfJPslwuCILnSEi
Lmembb8ZLVrwhacEt7w1gpahX0w0QPpHn8bhZY5wYieKXbzDz2iTRMu6wvx7BvIi
vXkKNCEjIR2GrM+W2mRllyAxn2dnR/4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:35 2026 by rpki-client