Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa
File:                     fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa (raw, json)
Hash identifier:          c/6bvkX8oAqUA1n2ykv/MjO6UpIvyRxLc1UqaRGKS5s=
Subject key identifier:   61:05:EB:B8:3E:42:51:F4:B4:0F:48:46:3C:8C:10:A1:8C:3E:55:18
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584EA7977F1918E7187EECA07480
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        66.178.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:7f:19:18:e7:18:7e:ec:a0:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d53219c-757d-45b8-b808-1d5a6bd0ec25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:f0:66:46:15:9f:33:e9:74:a7:d7:50:39:
                    b9:3a:39:67:fa:0b:c6:67:40:37:a3:4b:c9:8c:ac:
                    43:41:e5:d3:25:91:38:ef:2f:e7:e2:65:51:5c:d4:
                    24:91:35:f7:2c:e2:25:83:b5:62:c3:4c:48:24:41:
                    3d:f5:c8:3a:4c:ff:12:2f:7a:f6:aa:14:dc:e9:d6:
                    55:5c:bd:6c:0b:58:94:29:80:74:61:0a:e5:25:5d:
                    9e:00:d5:01:e0:a0:41:0a:32:5a:96:89:69:6a:1e:
                    b6:e4:2c:68:9b:02:87:12:ad:e5:62:98:cf:df:c5:
                    e5:ce:e3:59:6f:4b:17:f8:e5:8f:33:e2:1f:33:c1:
                    e9:ee:a7:a7:54:1e:56:88:f3:47:3f:95:b1:f2:da:
                    1e:35:75:55:bf:13:bf:18:b1:65:7b:a3:3c:1b:63:
                    2a:f4:47:6b:e0:3f:e0:38:b8:51:a2:cc:14:fa:cd:
                    09:85:d4:9d:4d:05:93:03:d9:46:68:4c:08:c1:3b:
                    92:66:ba:8d:6b:58:bb:16:08:f8:82:1f:f4:c9:c4:
                    d3:ff:2f:a9:29:74:24:1e:53:43:5e:53:a0:17:6d:
                    a4:fb:1c:e8:ab:6d:92:f1:6d:92:56:10:ac:bb:a6:
                    8d:4d:69:d2:0a:7e:83:9a:01:bc:56:b4:17:3a:93:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:05:EB:B8:3E:42:51:F4:B4:0F:48:46:3C:8C:10:A1:8C:3E:55:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/fc7ae7f5-17b9-3107-92b9-48de9abb8412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:06:5a:2b:06:bd:ef:de:22:0e:f0:88:91:b0:45:9d:6e:a2:
         b2:f3:dd:06:a7:e4:0f:b4:42:ca:6e:15:22:98:be:96:64:a1:
         9e:9b:a6:76:36:1a:5e:a4:ee:55:89:72:48:ef:3a:68:2d:04:
         78:41:66:49:d6:cd:0e:0f:14:7b:d7:3f:93:a7:b7:a6:03:60:
         2e:43:d6:a3:91:59:8b:a7:44:87:be:03:fd:a3:09:f4:92:48:
         03:1b:e9:62:45:dc:a3:63:43:ce:f1:35:0a:9a:ee:61:54:31:
         c7:4f:cf:90:60:26:35:88:82:a8:ca:06:06:2a:28:04:06:e0:
         fc:37:18:cc:21:15:ff:2f:3e:13:16:7a:85:14:42:05:17:12:
         7f:d5:bb:37:04:43:ff:5b:f8:39:d8:f9:99:d5:46:71:1f:89:
         3b:5c:be:0c:61:4b:77:48:51:9b:ae:00:36:e2:e9:a2:38:b1:
         b4:c8:e4:ea:10:62:4e:e8:c6:83:c8:7f:ee:2c:0a:5f:a9:fb:
         e7:6b:36:12:8b:25:df:08:1b:72:f9:fc:10:8d:c1:dd:0b:23:
         cb:27:f4:ba:cc:6f:e7:69:1e:20:63:33:5d:89:97:11:46:88:
         dd:92:66:15:2f:11:11:6a:87:89:87:58:97:69:96:f7:e3:8b:
         18:50:74:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl38ZGOcYfuygdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj
ZmUyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmQ1MzIxOWMtNzU3ZC00NWI4LWI4MDgtMWQ1YTZiZDBlYzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lHwZkYVnzPpdKfXUDm5Ojln+gvGZ0A3o0vJ
jKxDQeXTJZE47y/n4mVRXNQkkTX3LOIlg7Viw0xIJEE99cg6TP8SL3r2qhTc6dZV
XL1sC1iUKYB0YQrlJV2eANUB4KBBCjJalolpah625CxomwKHEq3lYpjP38XlzuNZ
b0sX+OWPM+IfM8Hp7qenVB5WiPNHP5Wx8toeNXVVvxO/GLFle6M8G2Mq9Edr4D/g
OLhRoswU+s0JhdSdTQWTA9lGaEwIwTuSZrqNa1i7Fgj4gh/0ycTT/y+pKXQkHlND
XlOgF22k+xzoq22S8W2SVhCsu6aNTWnSCn6DmgG8VrQXOpMeIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEF67g+QlH0tA9IRjyMEKGMPlUYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw
ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvZmM3YWU3ZjUtMTdiOS0z
MTA3LTkyYjktNDhkZTlhYmI4NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk
YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx
Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi
YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkGWisGve/eIg7wiJGwRZ1uorLz3Qan5A+0QspuFSKYvpZkoZ6bpnY2
Gl6k7lWJckjvOmgtBHhBZknWzQ4PFHvXP5Ont6YDYC5D1qORWYunRIe+A/2jCfSS
SAMb6WJF3KNjQ87xNQqa7mFUMcdPz5BgJjWIgqjKBgYqKAQG4Pw3GMwhFf8vPhMW
eoUUQgUXEn/VuzcEQ/9b+DnY+ZnVRnEfiTtcvgxhS3dIUZuuADbi6aI4sbTI5OoQ
Yk7oxoPIf+4sCl+p++drNhKLJd8IG3L5/BCNwd0LI8sn9LrMb+dpHiBjM12JlxFG
iN2SZhUvERFqh4mHWJdplvfjixhQdNY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:20 2026 by rpki-client