Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa
File:                     9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa (raw, json)
Hash identifier:          T/Sao3v/uW5uv5nznHMzXr5SoTSTG9dcVnzywjWW4k4=
Subject key identifier:   7E:5E:70:3B:E2:83:56:D5:73:EA:05:A5:80:D7:F4:8A:6A:0C:DD:B2
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584DEF45D4B33D7AA819E267E680
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     10753
IP address blocks:        66.128.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:d4:b3:3d:7a:a8:19:e2:67:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=985526b9-97c5-42ea-9ced-835b32f718c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:c3:ee:a3:1b:6c:8d:bf:b2:86:42:47:cc:
                    74:1d:8e:bf:9c:96:01:aa:20:b5:88:8b:10:e7:cb:
                    f3:64:19:de:50:9e:47:d6:84:d3:99:03:ef:63:1b:
                    74:11:a3:92:e2:51:af:9d:be:3c:8d:31:6d:6a:09:
                    2c:7f:b7:0d:9b:2a:27:5f:24:fa:df:2d:d2:da:8a:
                    d0:5d:82:b1:a0:90:54:1f:69:37:d6:db:a4:f5:72:
                    cf:be:19:04:7a:c8:8f:5f:55:c6:ce:75:3b:74:f9:
                    28:b6:01:fc:71:04:54:0c:7b:72:85:38:ad:64:6f:
                    de:00:df:6f:ac:03:5d:21:71:6e:d7:47:c6:f1:f5:
                    ad:0b:77:30:43:c6:4d:94:27:ed:68:47:c4:f0:73:
                    0a:46:f2:7b:81:84:52:db:51:25:93:21:76:95:66:
                    ba:2b:0a:e0:d0:26:45:b2:4f:ac:b7:f7:47:70:50:
                    3d:5b:43:4a:ea:01:1d:e7:10:8d:14:cf:d0:9b:e5:
                    f8:da:d7:26:cd:59:90:ca:00:e4:23:fe:ec:f9:78:
                    4c:5a:65:b3:a9:c0:31:0f:f5:63:78:6a:14:46:7a:
                    a8:58:fb:50:73:ff:d6:34:fa:57:50:3e:bc:63:14:
                    09:a0:b1:4e:7f:0d:9b:59:de:e8:01:31:e0:42:b2:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5E:70:3B:E2:83:56:D5:73:EA:05:A5:80:D7:F4:8A:6A:0C:DD:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:a6:38:95:4c:e0:df:68:3d:d3:d8:53:90:21:73:de:4e:
         4d:c1:bb:1e:bc:02:11:f0:bd:44:cb:da:58:f9:cc:f2:b2:e6:
         b1:23:ba:88:db:5f:7c:c1:79:da:bc:41:bf:28:3f:4d:15:22:
         89:eb:aa:03:9b:62:a0:55:57:c5:ea:d3:39:65:e4:50:e5:d9:
         41:c3:61:8c:54:cd:b5:b0:da:55:e8:5a:64:b1:fb:76:b6:bf:
         f3:4c:eb:49:f7:18:ec:e5:96:e8:71:c3:a5:1a:4e:13:56:81:
         55:34:28:cc:ce:7f:a8:07:74:ea:90:9b:1a:14:de:a3:12:79:
         b4:0c:4e:59:d9:24:55:7a:ba:d6:76:a2:74:79:7a:ae:b7:5d:
         20:b3:74:07:c1:d8:e5:be:1e:73:b7:8c:f9:db:72:e4:6b:f9:
         f2:5c:b1:f4:7d:45:af:f6:e1:eb:66:82:48:c9:4f:12:9c:4f:
         12:f4:47:d5:b7:fe:bb:16:df:9e:58:55:7f:63:77:32:f4:75:
         0a:0f:8f:a4:5a:97:61:5c:e1:f9:d2:22:f1:77:31:ea:f0:3e:
         3b:da:3c:fc:9f:8f:eb:45:e3:90:6f:ce:c2:52:67:f7:f7:d1:
         58:ea:09:dc:69:e1:57:eb:f5:62:1d:ca:ac:af:5d:43:e2:c5:
         b9:c4:af:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRdSzPXqoGeJn5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3
OGVhMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
OTg1NTI2YjktOTdjNS00MmVhLTljZWQtODM1YjMyZjcxOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf7D7qMbbI2/soZCR8x0HY6/nJYBqiC1iIsQ
58vzZBneUJ5H1oTTmQPvYxt0EaOS4lGvnb48jTFtagksf7cNmyonXyT63y3S2orQ
XYKxoJBUH2k31tuk9XLPvhkEesiPX1XGznU7dPkotgH8cQRUDHtyhTitZG/eAN9v
rANdIXFu10fG8fWtC3cwQ8ZNlCftaEfE8HMKRvJ7gYRS21ElkyF2lWa6Kwrg0CZF
sk+st/dHcFA9W0NK6gEd5xCNFM/Qm+X42tcmzVmQygDkI/7s+XhMWmWzqcAxD/Vj
eGoURnqoWPtQc//WNPpXUD68YxQJoLFOfw2bWd7oATHgQrJtdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5ecDvig1bVc+oFpYDX9IpqDN2yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz
OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvOWFiNjViZTUtMGYyNC0z
MWFkLTlkNGMtYWZmOGQzY2E2NzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz
NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl
NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1
OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABA8pjiVTODfaD3T2FOQIXPeTk3Bux68AhHwvUTL2lj5zPKy5rEjuojb
X3zBedq8Qb8oP00VIonrqgObYqBVV8Xq0zll5FDl2UHDYYxUzbWw2lXoWmSx+3a2
v/NM60n3GOzlluhxw6UaThNWgVU0KMzOf6gHdOqQmxoU3qMSebQMTlnZJFV6utZ2
onR5eq63XSCzdAfB2OW+HnO3jPnbcuRr+fJcsfR9Ra/24etmgkjJTxKcTxL0R9W3
/rsW355YVX9jdzL0dQoPj6Ral2Fc4fnSIvF3MerwPjvaPPyfj+tF45BvzsJSZ/f3
0VjqCdxp4Vfr9WIdyqyvXUPixbnErzQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:29 2026 by rpki-client