Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
File:                     887961af-3aed-3506-bd33-2d162c0a8179.roa (raw, json)
Hash identifier:          Z6geklxt+x+t/KrE6H01RsU5nldJXd2d0VVTb1IBvMQ=
Subject key identifier:   83:E3:88:AD:2F:51:DD:84:B9:4D:22:CE:84:0D:16:35:0F:21:92:95
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F10379D692971421B6305ED00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        66.253.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9d:69:29:71:42:1b:63:05:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=d95bc94b-0715-455a-a5b1-75d6ed176ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:71:7a:d2:e8:a4:33:6b:1d:a0:b2:2f:7c:
                    ad:51:d3:f4:99:13:9f:6a:b1:cb:33:11:ab:24:13:
                    6c:f2:ba:d9:a9:cd:ab:60:bc:e5:a0:4d:22:a0:f0:
                    7f:03:7f:cb:1f:da:04:cf:b8:f8:3f:cb:ce:b3:aa:
                    5f:6b:b2:57:6e:6d:e9:96:41:95:ad:3f:75:94:4e:
                    ba:5e:a0:40:17:d4:55:98:b9:15:2d:a3:0a:d1:3f:
                    d0:14:b8:a1:cc:3c:b1:af:e5:3e:79:0b:87:72:17:
                    41:ab:e3:16:5e:1d:bf:10:ad:ed:a2:16:7e:e8:79:
                    1a:1a:fb:ee:d4:62:70:c7:a7:48:78:33:12:1a:61:
                    ef:8d:6f:77:bc:0c:df:97:bc:79:76:4b:6e:e2:74:
                    08:0d:da:70:fc:ab:6f:a5:7e:7d:1a:ca:15:3b:88:
                    fc:1e:ea:aa:b3:ee:50:03:fb:05:13:dc:54:e7:74:
                    6a:8f:49:d0:12:6c:6a:46:09:7f:20:b1:a9:7f:ca:
                    80:c9:65:19:fc:5d:cd:16:b7:4e:e5:73:17:26:62:
                    55:70:a3:a3:46:f2:5b:7c:b6:b2:66:db:dc:d1:7d:
                    ce:92:f2:c3:63:19:00:96:38:f8:78:8c:a4:b6:3d:
                    70:7d:68:89:f6:48:ca:2f:3a:79:39:1b:fd:dc:48:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E3:88:AD:2F:51:DD:84:B9:4D:22:CE:84:0D:16:35:0F:21:92:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:11:8b:5f:30:e1:b4:93:b8:8d:ef:ae:31:73:17:7c:0b:2f:
         50:2d:b5:58:5b:1f:c2:9f:a1:75:43:fe:be:80:29:5a:80:e1:
         4c:1b:82:15:2b:f0:72:f2:a2:21:c1:4a:38:c6:a3:a2:df:ad:
         78:74:14:32:5e:a7:53:86:ff:66:1e:9b:c4:cc:c2:14:92:9e:
         4c:45:50:0c:37:af:96:5a:d9:3a:5d:ca:b4:90:50:c0:2d:60:
         ca:a4:ba:2a:15:36:4c:e7:b6:4e:68:77:83:63:26:25:ab:27:
         04:51:19:cf:91:17:fc:93:b5:eb:8c:d1:03:e3:74:2f:25:0d:
         39:c5:8a:66:92:fc:11:37:24:b6:b1:8c:8e:7b:80:1b:44:b5:
         5e:c4:b3:70:90:a9:6d:06:2a:42:55:23:de:a6:ef:c4:12:c3:
         00:cb:e7:d4:54:55:9a:15:fe:8a:b3:fd:f4:19:6f:48:1f:6a:
         d0:e6:29:a2:7f:74:6c:0d:f7:c4:92:6b:6e:5c:6e:99:48:dc:
         cb:56:81:dd:60:2e:6f:bd:8a:c4:e7:01:4c:0f:3e:ea:6a:e1:
         6b:fc:d2:03:d7:b7:cf:f1:70:2b:4a:a8:8b:d8:f8:27:18:3e:
         7d:c3:41:29:c4:95:b5:d9:0e:7e:04:ce:22:16:ff:2a:8a:fc:
         61:a3:3f:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN51pKXFCG2MF7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZDk1YmM5NGItMDcxNS00NTVhLWE1YjEtNzVkNmVkMTc2YWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFZxetLopDNrHaCyL3ytUdP0mROfarHLMxGr
JBNs8rrZqc2rYLzloE0ioPB/A3/LH9oEz7j4P8vOs6pfa7JXbm3plkGVrT91lE66
XqBAF9RVmLkVLaMK0T/QFLihzDyxr+U+eQuHchdBq+MWXh2/EK3tohZ+6HkaGvvu
1GJwx6dIeDMSGmHvjW93vAzfl7x5dktu4nQIDdpw/KtvpX59GsoVO4j8Huqqs+5Q
A/sFE9xU53Rqj0nQEmxqRgl/ILGpf8qAyWUZ/F3NFrdO5XMXJmJVcKOjRvJbfLay
Ztvc0X3OkvLDYxkAljj4eIyktj1wfWiJ9kjKLzp5ORv93EjAzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPjiK0vUd2EuU0izoQNFjUPIZKVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODg3OTYxYWYtM2FlZC0z
NTA2LWJkMzMtMmQxNjJjMGE4MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkRi18w4bSTuI3vrjFzF3wLL1AttVhbH8KfoXVD/r6AKVqA4UwbghUr
8HLyoiHBSjjGo6LfrXh0FDJep1OG/2Yem8TMwhSSnkxFUAw3r5Za2TpdyrSQUMAt
YMqkuioVNkzntk5od4NjJiWrJwRRGc+RF/yTteuM0QPjdC8lDTnFimaS/BE3JLax
jI57gBtEtV7Es3CQqW0GKkJVI96m78QSwwDL59RUVZoV/oqz/fQZb0gfatDmKaJ/
dGwN98SSa25cbplI3MtWgd1gLm+9isTnAUwPPupq4Wv80gPXt8/xcCtKqIvY+CcY
Pn3DQSnElbXZDn4EziIW/yqK/GGjP8o=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:21:40 2026 by rpki-client