Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81328c48-b4bd-36e7-802f-e1d38d55a6fe.roa
File:                     81328c48-b4bd-36e7-802f-e1d38d55a6fe.roa (raw, json)
Hash identifier:          5ouoRAN4Re9xegRUBCNIsJ39uOJVYHqY/Gv0NCU2VK4=
Subject key identifier:   64:10:66:7B:7B:7C:C9:B0:D5:27:90:6B:AF:7D:BA:B5:2B:AA:EA:4B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CE0977CA882762A4814A15D20
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81328c48-b4bd-36e7-802f-e1d38d55a6fe.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        66.253.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:7c:a8:82:76:2a:48:14:a1:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=488df0bf-6170-4175-a03f-095dbdfcf638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:f6:c9:27:43:87:6b:d6:64:d6:39:cf:39:
                    f1:f1:7b:ec:c3:32:ed:96:b3:df:72:42:59:22:c3:
                    db:1a:b7:54:0d:70:d5:fa:ce:3b:ca:12:1d:07:62:
                    d0:6e:4a:79:b6:ec:8f:cb:16:d8:ff:fc:37:65:4f:
                    80:4e:31:db:f0:e9:77:50:e0:d3:68:a0:fa:7f:8f:
                    e0:45:87:92:e1:96:3e:66:36:1a:1d:bf:53:ee:31:
                    cf:cc:66:f7:50:2a:9a:46:33:5a:d6:48:d2:55:53:
                    1c:fe:dc:05:e6:9c:27:4c:81:10:2f:cc:4a:8c:f3:
                    76:fd:18:2b:4a:42:10:95:b6:21:a4:ec:5c:6a:1e:
                    43:f5:0f:84:a4:7f:65:51:15:21:b9:da:fd:a1:74:
                    9a:87:1f:04:ff:f9:b8:cd:1d:3d:d6:ac:5d:f7:15:
                    d0:68:cd:e0:24:8b:27:7c:04:0a:6b:af:3d:6e:05:
                    4d:4a:da:b0:85:b1:b5:da:56:eb:e2:9e:e6:77:03:
                    bd:9b:89:e7:da:6a:84:c4:9a:c9:c6:1b:4f:bf:b8:
                    3e:cb:ed:5b:29:24:ff:a5:85:2f:13:3d:26:fe:88:
                    1c:99:ff:51:9b:a1:a3:91:9f:3d:e2:74:47:e5:03:
                    14:25:ac:51:f1:71:0c:ec:cb:51:f8:81:ab:ff:25:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:66:7B:7B:7C:C9:B0:D5:27:90:6B:AF:7D:BA:B5:2B:AA:EA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81328c48-b4bd-36e7-802f-e1d38d55a6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:30:ff:a0:4c:fe:f8:ea:bc:b7:b7:93:49:c1:31:3d:a3:
         3b:2d:c4:02:1c:77:56:21:c6:6f:bf:53:fe:89:ff:c3:52:72:
         8d:5b:8e:b5:df:94:23:9b:fa:7d:2b:9b:6a:c6:47:74:20:cc:
         6b:f6:ae:18:75:33:66:90:c2:69:97:67:66:39:b7:a2:0d:2f:
         70:37:92:c3:b0:8b:e4:76:c2:e3:b1:93:1f:90:9f:7f:cd:91:
         1a:92:39:f0:c7:75:ce:07:c7:50:9b:ee:11:7f:8d:e2:b6:f3:
         af:a9:57:ff:6f:d7:dc:20:55:3b:c2:3e:bb:e5:fe:66:b2:b6:
         17:92:2c:ff:f5:01:96:d6:62:06:90:85:35:54:14:f9:0e:b2:
         bd:7f:eb:60:7d:f3:fa:ee:8a:aa:a7:70:fd:fc:53:c6:2f:55:
         eb:36:be:2d:06:cf:5a:60:fd:5e:9f:97:e0:70:21:26:db:ec:
         64:47:4c:09:9d:e5:39:d5:6d:c0:c0:d9:45:40:d2:57:d8:ad:
         6d:ea:c7:0b:9f:9c:4e:83:b2:bd:e7:19:9a:b5:b9:2c:f6:ce:
         36:79:14:7f:26:ac:a7:90:ae:3b:78:5d:c6:21:b2:45:74:f7:
         32:a8:8a:10:b1:33:2c:e7:47:eb:9a:4a:eb:30:9d:ec:97:e0:
         20:c7:c5:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3yognYqSBShXSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
NDg4ZGYwYmYtNjE3MC00MTc1LWEwM2YtMDk1ZGJkZmNmNjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsX2ySdDh2vWZNY5zznx8XvswzLtlrPfckJZ
IsPbGrdUDXDV+s47yhIdB2LQbkp5tuyPyxbY//w3ZU+ATjHb8Ol3UODTaKD6f4/g
RYeS4ZY+ZjYaHb9T7jHPzGb3UCqaRjNa1kjSVVMc/twF5pwnTIEQL8xKjPN2/Rgr
SkIQlbYhpOxcah5D9Q+EpH9lURUhudr9oXSahx8E//m4zR091qxd9xXQaM3gJIsn
fAQKa689bgVNStqwhbG12lbr4p7mdwO9m4nn2mqExJrJxhtPv7g+y+1bKST/pYUv
Ez0m/ogcmf9Rm6GjkZ894nRH5QMUJaxR8XEM7MtR+IGr/yVcRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQQZnt7fMmw1SeQa699urUrqupLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODEzMjhjNDgtYjRiZC0z
NmU3LTgwMmYtZTFkMzhkNTVhNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv39MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjSMP+gTP746ry3t5NJwTE9ozstxAIcd1Yhxm+/U/6J/8NSco1bjrXf
lCOb+n0rm2rGR3QgzGv2rhh1M2aQwmmXZ2Y5t6INL3A3ksOwi+R2wuOxkx+Qn3/N
kRqSOfDHdc4Hx1Cb7hF/jeK286+pV/9v19wgVTvCPrvl/maytheSLP/1AZbWYgaQ
hTVUFPkOsr1/62B98/ruiqqncP38U8YvVes2vi0Gz1pg/V6fl+BwISbb7GRHTAmd
5TnVbcDA2UVA0lfYrW3qxwufnE6Dsr3nGZq1uSz2zjZ5FH8mrKeQrjt4XcYhskV0
9zKoihCxMyznR+uaSuswneyX4CDHxTY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:35 2026 by rpki-client