Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/da5332a3-ea66-333a-9120-8d7b09eb57bf.roa
File:                     da5332a3-ea66-333a-9120-8d7b09eb57bf.roa (raw, json)
Hash identifier:          1XNm57eBkZGIzhyduojVqB0k56lk7808Vuf0IIeHI/U=
Subject key identifier:   9C:61:A9:A4:8A:FE:71:12:8C:30:2E:CA:5A:7E:13:EA:90:D1:D3:A1
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584F49750CE1994857A3B50ABF50
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/da5332a3-ea66-333a-9120-8d7b09eb57bf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        66.114.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:0c:e1:99:48:57:a3:b5:0a:bf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=358ac3fe-d923-4b38-9a0a-8c3c1758f8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:ba:8b:b0:43:ad:b1:42:41:83:b1:63:50:
                    f9:76:75:b3:0b:d2:6b:0f:a8:6d:3b:8a:c5:8b:e0:
                    5f:88:9f:3d:58:f1:05:8e:91:8a:51:7d:64:ce:cb:
                    ff:1c:21:25:db:63:13:e6:e2:d7:b1:7c:35:f5:17:
                    0e:5c:fa:86:9a:fc:7d:1e:c6:06:93:34:91:00:c1:
                    7b:80:70:53:9f:13:22:35:e8:94:79:ff:3f:55:0a:
                    21:2c:fd:63:86:20:d2:70:43:c1:b9:4b:ad:72:9f:
                    50:21:fb:d0:60:7f:8a:0c:13:ff:45:1a:11:9b:70:
                    83:3e:85:37:e1:82:b4:f2:06:2e:50:1f:64:d8:18:
                    0b:23:dd:98:f5:63:5b:bd:cd:57:01:59:61:f9:a0:
                    9c:0c:23:29:69:4a:6d:1a:51:f0:04:40:c8:24:26:
                    d7:85:0d:5a:ef:b1:99:06:de:59:87:af:59:a3:c4:
                    6e:90:87:b2:8c:1e:7a:99:8e:ae:c9:b5:12:be:a2:
                    30:e9:aa:0e:df:68:a0:7b:fd:c2:8a:9d:a0:fb:a2:
                    65:64:46:c4:55:23:4a:fc:d8:a3:bf:6c:77:55:14:
                    f7:1f:af:6c:0b:34:cf:46:ca:a0:82:72:2b:14:22:
                    7e:a1:36:69:01:f1:45:ab:e7:8d:aa:d2:37:b5:20:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:A9:A4:8A:FE:71:12:8C:30:2E:CA:5A:7E:13:EA:90:D1:D3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/da5332a3-ea66-333a-9120-8d7b09eb57bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:50:3c:29:e6:3d:c2:4b:13:00:b7:f2:0d:f6:0a:14:20:39:
         73:ef:b1:78:7c:75:97:fc:d1:41:9d:8c:c0:e6:d8:52:22:59:
         16:60:f8:4d:9a:4c:a3:b0:9d:ee:14:e8:51:4b:74:eb:a3:b8:
         e9:ec:74:0b:36:32:6d:ab:15:ef:84:3c:23:00:5b:9d:f0:c3:
         dc:74:2a:c2:b9:3b:ca:62:27:8f:da:24:90:f9:6f:b7:52:b6:
         3d:a9:ea:df:b0:19:37:8a:82:a0:f4:15:40:5f:15:ba:ef:53:
         db:d3:88:cb:a5:49:eb:85:9a:58:38:2f:cb:1c:6b:46:b6:39:
         7a:44:8c:73:42:94:a3:72:c5:c8:fc:04:2a:9a:63:9b:25:44:
         bf:59:80:94:ae:d7:29:b7:12:d3:a9:cf:50:65:c6:3d:fc:90:
         27:8d:22:b2:f6:85:fa:74:08:9a:d5:ed:08:bf:67:57:b4:1a:
         b0:3d:fb:02:61:9e:4a:f2:05:5f:b6:78:00:cd:ba:ee:13:26:
         fb:07:65:b8:42:d2:e5:08:2f:6f:03:aa:7e:e2:81:0f:5f:3b:
         58:f7:c5:7f:75:53:07:7c:a0:5b:4d:64:54:83:20:c5:63:4b:
         dd:a9:9c:1f:28:16:0b:e5:98:87:c9:21:ff:5e:fa:6b:ae:87:
         d9:08:d5:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQzhmUhXo7UKv1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzU4YWMzZmUtZDkyMy00YjM4LTlhMGEtOGMzYzE3NThmOGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1C6i7BDrbFCQYOxY1D5dnWzC9JrD6htO4rF
i+BfiJ89WPEFjpGKUX1kzsv/HCEl22MT5uLXsXw19RcOXPqGmvx9HsYGkzSRAMF7
gHBTnxMiNeiUef8/VQohLP1jhiDScEPBuUutcp9QIfvQYH+KDBP/RRoRm3CDPoU3
4YK08gYuUB9k2BgLI92Y9WNbvc1XAVlh+aCcDCMpaUptGlHwBEDIJCbXhQ1a77GZ
Bt5Zh69Zo8RukIeyjB56mY6uybUSvqIw6aoO32ige/3Cip2g+6JlZEbEVSNK/Nij
v2x3VRT3H69sCzTPRsqggnIrFCJ+oTZpAfFFq+eNqtI3tSAnNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxhqaSK/nESjDAuylp+E+qQ0dOhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvZGE1MzMyYTMtZWE2Ni0z
MzNhLTkxMjAtOGQ3YjA5ZWI1N2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnIzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFQPCnmPcJLEwC38g32ChQgOXPvsXh8dZf80UGdjMDm2FIiWRZg+E2a
TKOwne4U6FFLdOujuOnsdAs2Mm2rFe+EPCMAW53ww9x0KsK5O8piJ4/aJJD5b7dS
tj2p6t+wGTeKgqD0FUBfFbrvU9vTiMulSeuFmlg4L8sca0a2OXpEjHNClKNyxcj8
BCqaY5slRL9ZgJSu1ym3EtOpz1Blxj38kCeNIrL2hfp0CJrV7Qi/Z1e0GrA9+wJh
nkryBV+2eADNuu4TJvsHZbhC0uUIL28Dqn7igQ9fO1j3xX91Uwd8oFtNZFSDIMVj
S92pnB8oFgvlmIfJIf9e+muuh9kI1Yo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:37:08 2026 by rpki-client