Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa
File:                     e38b3713-7424-3f1d-a9e9-72d69242e5df.roa (raw, json)
Hash identifier:          aebaq8Te2WgC1sbCopO+BvQO0RBhNW/hLUBhV3Aimi4=
Subject key identifier:   43:62:33:E9:05:43:1B:09:A4:3A:FD:AD:EB:E1:C6:DE:2F:07:D4:D8
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584D55BA45B569237DBDEBDAB880
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     8560
IP address blocks:        66.179.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:45:b5:69:23:7d:bd:eb:da:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=9289fdb8-dbf0-45ac-9d04-47c7c76bbbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:c3:a1:c8:b2:d0:79:ac:bb:d7:25:b7:ba:
                    86:e4:50:63:68:e2:f5:44:16:bd:a2:d5:97:63:98:
                    19:0c:2a:ee:bc:27:0e:af:2a:4e:8a:92:4e:2b:54:
                    fd:90:a0:3d:e0:de:99:b4:f2:5c:14:ca:17:85:9b:
                    fb:10:98:b2:eb:bd:e8:a7:9e:d0:a7:da:44:24:65:
                    2b:15:24:5c:d9:fa:d9:29:d0:97:eb:52:29:a7:06:
                    c9:a8:12:78:15:a3:f5:e3:70:3f:b2:cf:b6:3c:d0:
                    9f:61:3d:ec:1a:3b:d1:a9:98:a4:56:5e:77:f8:80:
                    5f:7d:c3:02:f3:c3:6e:eb:87:75:25:8b:2a:69:2e:
                    1c:a2:f5:80:a0:45:5b:87:af:fa:21:41:f1:20:bc:
                    ac:4b:bb:cc:77:8c:b9:92:cf:0c:d9:f6:66:e3:71:
                    50:e2:9e:b7:d7:dc:2b:48:9c:c5:e7:0f:90:ee:a5:
                    f3:d0:cb:73:90:36:74:82:1d:2f:85:2a:4a:30:79:
                    d7:78:18:c3:d9:b8:6b:e1:b0:39:26:fa:23:76:e0:
                    74:58:f9:ea:6b:ae:83:40:15:f0:12:cc:34:d8:4a:
                    a7:5b:de:85:cc:e7:61:8b:0a:b2:c0:8b:46:87:19:
                    34:e7:aa:ae:d9:23:23:22:62:99:21:ac:9e:24:92:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:62:33:E9:05:43:1B:09:A4:3A:FD:AD:EB:E1:C6:DE:2F:07:D4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:75:dd:2e:b9:69:6a:2d:d0:db:21:27:1a:95:a6:bf:b5:fb:
         12:09:4b:b3:ae:6d:47:26:55:84:c6:3d:17:1e:33:22:b3:42:
         9a:69:96:8b:39:eb:42:51:50:10:67:77:97:39:63:eb:58:8c:
         48:40:d1:92:e3:04:93:b3:ad:b5:b3:9d:fe:8f:05:c1:9b:ec:
         ca:95:df:e5:fe:23:0c:c7:36:62:2d:84:71:32:b6:05:cd:1d:
         bc:cb:43:ec:71:0d:85:1a:d9:2d:12:80:46:7e:21:9a:fc:26:
         3f:b7:a9:53:4d:f9:f0:21:d7:eb:ca:ce:44:20:34:61:e8:0e:
         b2:70:72:ce:1c:5d:5c:98:e2:ce:6b:42:59:ae:a7:b9:62:28:
         52:e2:8a:27:b9:72:f2:81:b6:c5:8b:75:3e:25:7c:6b:65:d7:
         68:d9:02:76:f3:b5:0f:53:8d:ce:29:79:a2:ec:ad:a9:8b:12:
         13:7a:32:56:7e:05:8c:9e:9c:64:32:25:d2:5a:bf:ed:83:d9:
         77:9b:5e:1f:7e:89:11:ba:f5:68:43:c8:ea:d9:d8:2f:37:cc:
         53:1f:7a:37:f8:b9:f6:c4:7a:c2:14:73:a6:bd:e5:05:ba:ce:
         87:f5:0e:66:96:ca:b5:99:ea:11:2a:9d:7e:77:bd:94:b5:ef:
         ef:de:b4:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukW1aSN9vevauIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OTI4OWZkYjgtZGJmMC00NWFjLTlkMDQtNDdjN2M3NmJiYmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3Dociy0Hmsu9clt7qG5FBjaOL1RBa9otWX
Y5gZDCruvCcOrypOipJOK1T9kKA94N6ZtPJcFMoXhZv7EJiy673op57Qp9pEJGUr
FSRc2frZKdCX61IppwbJqBJ4FaP143A/ss+2PNCfYT3sGjvRqZikVl53+IBffcMC
88Nu64d1JYsqaS4covWAoEVbh6/6IUHxILysS7vMd4y5ks8M2fZm43FQ4p6319wr
SJzF5w+Q7qXz0MtzkDZ0gh0vhSpKMHnXeBjD2bhr4bA5JvojduB0WPnqa66DQBXw
Esw02EqnW96FzOdhiwqywItGhxk056qu2SMjImKZIayeJJKxJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENiM+kFQxsJpDr9revhxt4vB9TYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvZTM4YjM3MTMtNzQyNC0z
ZjFkLWE5ZTktNzJkNjkyNDJlNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrO8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABN13S65aWot0NshJxqVpr+1+xIJS7OubUcmVYTGPRceMyKzQppplos5
60JRUBBnd5c5Y+tYjEhA0ZLjBJOzrbWznf6PBcGb7MqV3+X+IwzHNmIthHEytgXN
HbzLQ+xxDYUa2S0SgEZ+IZr8Jj+3qVNN+fAh1+vKzkQgNGHoDrJwcs4cXVyY4s5r
Qlmup7liKFLiiie5cvKBtsWLdT4lfGtl12jZAnbztQ9Tjc4peaLsramLEhN6MlZ+
BYyenGQyJdJav+2D2XebXh9+iRG69WhDyOrZ2C83zFMfejf4ufbEesIUc6a95QW6
zof1DmaWyrWZ6hEqnX53vZS17+/etGA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:42 2026 by rpki-client