Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/481396d5-7946-3e77-a64e-bb23720d1260.roa
File:                     481396d5-7946-3e77-a64e-bb23720d1260.roa (raw, json)
Hash identifier:          lGMOqxa9l4M1b51KHdHZ4vTntBhuWcKaRDr+sOOYuqI=
Subject key identifier:   CA:C3:CB:EB:4C:21:72:BF:A0:B7:4A:57:C1:85:40:DA:69:56:42:34
Certificate issuer:       /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial:       010D0C9F4328584DFA7080CA980D5C059F65A500
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/481396d5-7946-3e77-a64e-bb23720d1260.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     14618
IP address blocks:        66.132.138.0/24 maxlen: 24
                          198.73.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:80:ca:98:0d:5c:05:9f:65:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=f249d8df-87b5-49c6-8ff4-d1327e5db64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:37:f9:2c:51:4e:1b:c0:89:0f:0e:d2:6f:
                    af:1b:9f:10:a1:dd:65:b1:49:30:f5:a8:af:8e:ea:
                    3c:12:4a:c7:34:3b:30:68:2b:f2:0d:49:fa:f8:68:
                    b8:4e:cf:cf:4d:35:2b:23:19:11:b2:e9:ff:42:e8:
                    a6:b0:15:d2:ab:36:da:44:87:8d:ad:41:f7:f9:d3:
                    a6:4a:3c:39:ef:7a:b6:25:c7:23:eb:f0:8f:2a:66:
                    80:5a:fb:80:e5:95:ba:1b:2c:e4:ee:1c:6b:17:6a:
                    2b:ab:a5:6a:cc:d0:f7:3f:fa:04:3e:c6:4f:8c:82:
                    03:b8:94:a2:47:c0:1a:6d:79:b8:1a:e3:03:ad:39:
                    7d:66:d6:c9:04:e1:11:c4:77:52:fb:d9:7b:30:45:
                    a3:bd:5e:2c:24:0b:71:08:4a:10:55:10:c7:bc:20:
                    a7:21:2f:30:ff:f6:5d:75:45:79:e0:20:66:28:5e:
                    1f:42:d9:f8:85:4d:40:18:f6:9c:06:0b:6b:45:b1:
                    07:32:40:ba:8b:ff:f7:15:5b:92:f2:2c:bf:1f:87:
                    7a:5f:cd:ef:24:cc:4c:e6:0d:3d:88:83:6c:f7:c5:
                    5f:cf:4a:d9:f0:4d:ab:20:c9:73:62:55:49:a9:a0:
                    f2:dc:1f:eb:54:f0:e8:66:48:33:71:06:a8:fd:44:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:CB:EB:4C:21:72:BF:A0:B7:4A:57:C1:85:40:DA:69:56:42:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/481396d5-7946-3e77-a64e-bb23720d1260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl

            X509v3 Authority Key Identifier:
                keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.138.0/24
                  198.73.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9a:3e:c3:bb:6c:0e:f4:25:09:f1:47:90:77:00:b3:4d:37:
         6e:da:d0:5c:d6:da:76:f3:32:47:66:f3:6f:8b:fc:3c:a5:b2:
         87:30:a5:53:c2:40:e7:ef:2a:c3:ab:58:a7:16:81:c0:39:e3:
         80:b7:77:d7:b2:66:1e:e8:84:e6:de:0c:83:f6:33:87:2f:89:
         20:31:f6:bc:85:18:cf:24:bd:d7:c0:8c:6e:7d:45:76:a9:ed:
         84:85:dc:3b:6c:a4:28:ac:f8:7d:00:ca:b8:a4:22:a2:57:0a:
         cc:74:ea:fd:1a:a8:12:5c:59:b9:db:20:39:88:cc:e3:03:de:
         fa:42:ad:24:75:5d:1c:06:99:a9:56:94:7b:fb:46:c4:6e:98:
         2e:40:1c:62:86:7f:d0:61:f1:0b:2f:97:3b:5e:df:d7:1a:6e:
         f5:cb:80:ce:18:1d:7e:6f:ee:f2:56:12:17:8a:d5:b8:a3:00:
         68:79:13:59:fe:4e:ac:5d:3c:e7:be:0c:77:18:cb:9e:fa:df:
         ed:04:d8:f6:e9:43:ad:dc:e8:be:5d:9f:e3:f0:7f:28:e8:6e:
         06:2b:0d:03:d6:79:46:a4:6c:d4:44:c0:48:2a:07:26:bd:b5:
         91:1d:7f:db:e5:5a:92:c7:75:7f:b3:3b:6b:78:c8:25:d0:40:
         c2:1c:9e:75
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE36cIDKmA1cBZ9lpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh
ZGM0MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
ZjI0OWQ4ZGYtODdiNS00OWM2LThmZjQtZDEzMjdlNWRiNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWQ3+SxRThvAiQ8O0m+vG58Qod1lsUkw9aiv
juo8EkrHNDswaCvyDUn6+Gi4Ts/PTTUrIxkRsun/QuimsBXSqzbaRIeNrUH3+dOm
Sjw573q2Jccj6/CPKmaAWvuA5ZW6Gyzk7hxrF2orq6VqzND3P/oEPsZPjIIDuJSi
R8AabXm4GuMDrTl9ZtbJBOERxHdS+9l7MEWjvV4sJAtxCEoQVRDHvCCnIS8w//Zd
dUV54CBmKF4fQtn4hU1AGPacBgtrRbEHMkC6i//3FVuS8iy/H4d6X83vJMxM5g09
iINs98Vfz0rZ8E2rIMlzYlVJqaDy3B/rVPDoZkgzcQao/UScSQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMrDy+tMIXK/oLdKV8GFQNppVkI0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi
NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvNDgxMzk2ZDUtNzk0Ni0z
ZTc3LWE2NGUtYmIyMzcyMGQxMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2
MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz
YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz
OGEyM2FkYzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQoSKAwQA
xkk1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACOaPsO7bA70JQnxR5B3ALNNN27a0FzW2nbzMkdm82+L/Dyl
socwpVPCQOfvKsOrWKcWgcA544C3d9eyZh7ohObeDIP2M4cviSAx9ryFGM8kvdfA
jG59RXap7YSF3DtspCis+H0AyrikIqJXCsx06v0aqBJcWbnbIDmIzOMD3vpCrSR1
XRwGmalWlHv7RsRumC5AHGKGf9Bh8Qsvlzte39cabvXLgM4YHX5v7vJWEheK1bij
AGh5E1n+TqxdPOe+DHcYy5763+0E2PbpQ63c6L5dn+PwfyjobgYrDQPWeUakbNRE
wEgqBya9tZEdf9vlWpLHdX+zO2t4yCXQQMIcnnU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:21 2026 by rpki-client