Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa
File:                     8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa (raw, json)
Hash identifier:          qJTtt9XDFFvY/IoeHgye6mvZWjbyiil6QGsRC0vRDUA=
Subject key identifier:   A3:99:74:FE:2F:94:DC:73:21:06:7B:E7:4F:F9:38:B9:DC:E6:33:35
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584E1FA995DA0CA439AD24760180
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     16509
IP address blocks:        66.178.140.0/24 maxlen: 24
                          66.178.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:95:da:0c:a4:39:ad:24:76:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=98dc2c8e-3940-44a2-a2b6-ed021b869b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:49:c2:33:55:dc:c1:18:78:c6:a8:23:42:
                    5b:91:bb:69:7f:c9:3b:5c:fa:70:74:8e:a1:38:67:
                    21:a2:e9:07:25:24:32:93:63:21:ed:f3:de:e1:42:
                    3b:0f:e8:ff:97:21:15:c7:31:82:61:3d:41:1f:5c:
                    fb:c7:5b:31:b7:2a:47:3a:ad:55:87:61:9d:14:60:
                    cc:4e:b8:a1:d9:6d:5b:59:f4:cf:3c:30:39:20:93:
                    cf:f6:e2:95:45:fc:20:e7:55:15:3f:44:7e:ff:f5:
                    97:67:ce:2f:ac:58:4c:49:e8:fb:e5:0a:64:7f:5e:
                    69:92:de:d3:65:1d:90:b8:a8:11:de:38:bb:61:0c:
                    81:21:ed:ce:3f:98:3d:86:6a:56:70:0d:38:2f:27:
                    f6:57:3e:2d:5a:a0:99:ea:30:9f:46:d4:4c:43:c1:
                    45:f6:bf:c7:a5:29:b2:32:f8:ee:a9:fa:a4:3b:df:
                    7e:f1:dd:2a:06:26:1d:4f:4e:34:7a:76:f0:70:1d:
                    96:5d:6e:99:f1:42:9e:b8:fd:c2:8f:5b:95:aa:10:
                    7f:d3:98:36:a8:e3:2d:ce:c5:fc:94:35:ac:4e:a6:
                    a8:5c:b5:2a:a1:b8:e4:e8:62:3c:0d:84:a1:68:a9:
                    5f:35:14:ea:ee:fa:8d:40:eb:18:08:af:b0:de:5f:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:99:74:FE:2F:94:DC:73:21:06:7B:E7:4F:F9:38:B9:DC:E6:33:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:51:4e:46:09:7b:0b:c3:25:54:ff:fa:dd:b3:3f:b1:12:
         0a:50:90:ab:e7:b1:89:6b:4c:03:53:70:b1:6a:76:8e:ce:55:
         4b:06:61:f1:77:95:f4:a1:b6:22:02:37:a0:cd:48:e6:f7:f0:
         57:58:8d:7c:fd:f4:8c:d0:07:e0:b4:00:c4:09:e5:d5:29:ee:
         9f:97:08:d4:be:f7:4f:ec:3a:b0:57:8a:88:15:f6:32:09:df:
         8b:3c:19:08:e3:5c:03:03:3a:93:a3:57:1a:fa:72:e6:9d:95:
         85:65:41:3b:1a:f8:2e:e6:d3:d2:29:9f:19:41:77:47:69:1c:
         6a:88:22:41:30:da:8d:dc:4c:a2:e0:c6:b5:77:3c:6f:f7:b8:
         0d:b8:02:06:0d:95:90:4b:53:ba:6c:df:23:c2:28:5c:ae:2d:
         c6:5f:bc:f2:57:2e:9e:ea:43:d9:2f:09:7c:c5:23:cd:5f:bb:
         82:40:0d:24:6b:9f:f6:55:aa:4d:19:cc:87:66:57:12:4f:17:
         ac:b6:ab:03:1b:c7:6c:aa:ec:5a:5f:7f:7e:7b:be:a8:17:a9:
         54:0f:13:3d:2a:45:b7:a4:0d:27:ac:5d:d9:45:56:1d:93:bb:
         e3:38:3c:64:8d:7e:20:7a:5f:1d:aa:b5:8c:84:fc:4a:d0:14:
         e7:d5:5a:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZXaDKQ5rSR2AYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj
ZmUyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
OThkYzJjOGUtMzk0MC00NGEyLWEyYjYtZWQwMjFiODY5YjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbxJwjNV3MEYeMaoI0Jbkbtpf8k7XPpwdI6h
OGchoukHJSQyk2Mh7fPe4UI7D+j/lyEVxzGCYT1BH1z7x1sxtypHOq1Vh2GdFGDM
Trih2W1bWfTPPDA5IJPP9uKVRfwg51UVP0R+//WXZ84vrFhMSej75Qpkf15pkt7T
ZR2QuKgR3ji7YQyBIe3OP5g9hmpWcA04Lyf2Vz4tWqCZ6jCfRtRMQ8FF9r/HpSmy
MvjuqfqkO99+8d0qBiYdT040enbwcB2WXW6Z8UKeuP3Cj1uVqhB/05g2qOMtzsX8
lDWsTqaoXLUqobjk6GI8DYShaKlfNRTq7vqNQOsYCK+w3l+Y0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOZdP4vlNxzIQZ750/5OLnc5jM1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw
ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvOGQ5YjQ2ZDQtNmZiMC0z
OWQ4LWFhNWQtNDRmOTM4M2E1MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk
YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx
Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi
YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrKMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHs3UU5GCXsLwyVU//rdsz+xEgpQkKvnsYlrTANTcLFqdo7OVUsGYfF3
lfShtiICN6DNSOb38FdYjXz99IzQB+C0AMQJ5dUp7p+XCNS+90/sOrBXiogV9jIJ
34s8GQjjXAMDOpOjVxr6cuadlYVlQTsa+C7m09IpnxlBd0dpHGqIIkEw2o3cTKLg
xrV3PG/3uA24AgYNlZBLU7ps3yPCKFyuLcZfvPJXLp7qQ9kvCXzFI81fu4JADSRr
n/ZVqk0ZzIdmVxJPF6y2qwMbx2yq7Fpff357vqgXqVQPEz0qRbekDSesXdlFVh2T
u+M4PGSNfiB6Xx2qtYyE/ErQFOfVWvc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:22 2026 by rpki-client