Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/e1884f67-38be-310f-8228-f814f4862da2.roa
File:                     e1884f67-38be-310f-8228-f814f4862da2.roa (raw, json)
Hash identifier:          Q4YsOhkO/jcGsU6zbuezel8XnMFOpgQBQbEcpUZs4yQ=
Subject key identifier:   08:21:DB:22:C5:18:1E:08:A5:5E:CE:B1:41:94:7C:CB:C3:BA:23:47
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F42907E8FE245FA9D21AF6680
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/e1884f67-38be-310f-8228-f814f4862da2.roa
Signing time:             Tue 22 Sep 2026 13:49:56 +0000
ROA not before:           Tue 22 Sep 2026 13:49:56 +0000
ROA not after:            Fri 20 Nov 2026 15:56:50 +0000
asID:                     25198
IP address blocks:        104.166.66.0/24 maxlen: 24
                          172.82.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:90:7e:8f:e2:45:fa:9d:21:af:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 22 13:49:56 2026 GMT
            Not After : Nov 20 15:56:50 2026 GMT
        Subject: CN=c7af0c33-d781-4a90-90e2-24458f5a07dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:61:04:a3:df:1d:0b:2d:62:06:9a:ee:e0:
                    51:b7:4c:6b:55:7c:98:17:ec:f0:66:ce:88:f9:2b:
                    e2:b9:94:7c:a3:85:ba:58:3b:70:ff:27:c1:4d:ed:
                    21:d8:24:21:d5:03:dc:59:cf:b1:b7:58:28:6f:a0:
                    f8:e1:c9:ab:1a:47:b0:ea:c1:95:4d:72:58:21:33:
                    88:80:cb:37:5a:77:09:eb:a2:e4:f4:02:7c:71:d1:
                    82:60:4b:29:fb:13:5f:31:16:e0:5f:fb:b0:5f:44:
                    03:47:d6:a6:c8:b4:b9:6a:c9:5a:ed:f5:7f:e9:d6:
                    52:af:1d:9b:b6:e8:29:a9:f3:8c:f4:a7:71:91:62:
                    e2:5b:20:5c:4b:cc:48:0a:9d:d2:13:c4:2a:f2:f1:
                    76:ff:a5:d6:0c:02:f6:b1:bb:f6:b6:d1:a8:1c:c8:
                    35:f2:92:33:f6:d4:59:e6:e2:42:c1:8f:df:d3:ec:
                    6a:53:4e:97:68:85:47:75:3c:4f:be:06:ed:de:36:
                    94:78:0d:27:f3:e4:53:80:e0:54:3a:ad:09:b0:a6:
                    56:8a:14:fe:f0:d2:b0:75:37:f9:86:80:49:1a:9c:
                    9a:f1:3f:6b:ad:a2:f9:bb:7b:b0:53:70:d9:8c:b5:
                    e9:2d:bd:e2:8d:4a:52:5c:4b:2b:fc:48:ed:8e:9d:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:DB:22:C5:18:1E:08:A5:5E:CE:B1:41:94:7C:CB:C3:BA:23:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/e1884f67-38be-310f-8228-f814f4862da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.66.0/24
                  172.82.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:d9:18:9e:9a:19:8e:fe:13:17:29:3a:fa:d6:cb:a7:4b:
         b5:72:b6:99:a7:ed:41:28:82:73:36:e8:ca:ea:c5:df:aa:9c:
         74:d7:4b:87:91:31:f2:8e:98:4c:fb:5d:d2:bc:2a:43:97:c8:
         09:af:05:c8:78:36:a8:2a:57:67:bf:5c:98:6f:bf:0d:7e:92:
         5e:1c:49:34:85:fb:e4:f5:c1:e0:d0:43:b6:3f:fd:cd:d7:de:
         e0:ab:78:61:bb:be:76:ec:3f:65:7a:9b:14:09:d0:c7:ef:eb:
         53:7d:a9:23:bb:79:28:33:07:cd:c0:6d:ad:a5:58:cd:75:c1:
         89:6c:42:a1:11:05:3d:25:71:b5:24:60:cb:59:2e:fc:ab:3b:
         e1:c7:a8:18:8a:d9:fe:48:db:b7:04:56:cd:2f:0d:e8:4d:ef:
         36:02:79:39:9c:ca:8c:49:2c:e7:d4:db:5d:40:6a:97:ab:bf:
         cc:ea:e1:5f:de:a4:eb:6d:04:35:6c:d0:7a:ba:af:3a:ec:d6:
         50:a7:18:22:da:5e:e5:ab:5d:42:3d:f8:dc:f9:92:ed:e4:20:
         b9:9e:2a:f7:c3:83:3c:dc:6b:a8:6b:16:c9:31:bf:9c:87:09:
         80:a3:62:6a:af:66:09:ab:1e:b9:01:af:d9:3f:54:03:66:e5:
         7d:8f:bc:56
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9CkH6P4kX6nSGvZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MDkyMjEzNDk1NloXDTI2MTEyMDE1NTY1MFowLzEtMCsGA1UEAxMk
YzdhZjBjMzMtZDc4MS00YTkwLTkwZTItMjQ0NThmNWEwN2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBthBKPfHQstYgaa7uBRt0xrVXyYF+zwZs6I
+SviuZR8o4W6WDtw/yfBTe0h2CQh1QPcWc+xt1gob6D44cmrGkew6sGVTXJYITOI
gMs3WncJ66Lk9AJ8cdGCYEsp+xNfMRbgX/uwX0QDR9amyLS5asla7fV/6dZSrx2b
tugpqfOM9KdxkWLiWyBcS8xICp3SE8Qq8vF2/6XWDAL2sbv2ttGoHMg18pIz9tRZ
5uJCwY/f0+xqU06XaIVHdTxPvgbt3jaUeA0n8+RTgOBUOq0JsKZWihT+8NKwdTf5
hoBJGpya8T9rraL5u3uwU3DZjLXpLb3ijUpSXEsr/Ejtjp2tswIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAgh2yLFGB4IpV7OsUGUfMvDuiNHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvZTE4ODRmNjctMzhiZS0z
MTBmLTgyMjgtZjgxNGY0ODYyZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaKZCAwQA
rFKsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALSE2RiemhmO/hMXKTr61sunS7Vytpmn7UEognM26Mrqxd+q
nHTXS4eRMfKOmEz7XdK8KkOXyAmvBch4NqgqV2e/XJhvvw1+kl4cSTSF++T1weDQ
Q7Y//c3X3uCreGG7vnbsP2V6mxQJ0Mfv61N9qSO7eSgzB83Aba2lWM11wYlsQqER
BT0lcbUkYMtZLvyrO+HHqBiK2f5I27cEVs0vDehN7zYCeTmcyoxJLOfU211Aaper
v8zq4V/epOttBDVs0Hq6rzrs1lCnGCLaXuWrXUI9+Nz5ku3kILmeKvfDgzzca6hr
Fskxv5yHCYCjYmqvZgmrHrkBr9k/VANm5X2PvFY=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:38:23 2026 by rpki-client