Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e9e8f1de-de87-3995-b7ae-5bb9f0cb5c7b.roa
File:                     e9e8f1de-de87-3995-b7ae-5bb9f0cb5c7b.roa (raw, json)
Hash identifier:          ZmCk+5pFoCxwwiQyTFixxtoTIDz+/k20bAeVcyTHgeE=
Subject key identifier:   5B:6A:6D:4F:FA:DD:10:79:32:17:D7:AF:2C:07:E4:F6:54:31:3A:B2
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584DDD207267028E907EC8B8ACC0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e9e8f1de-de87-3995-b7ae-5bb9f0cb5c7b.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     23280
IP address blocks:        66.22.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:72:67:02:8e:90:7e:c8:b8:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=f7b952c1-f0c5-4ece-929a-e9927ffbb3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:27:01:a4:f2:f1:29:2d:e9:df:ca:9f:ed:
                    a3:48:dc:3d:d6:28:9c:92:7a:f0:37:ab:b9:c0:49:
                    f7:46:c8:5e:cf:50:47:13:b8:d1:14:d7:35:14:a4:
                    de:7f:89:01:b1:42:c1:f1:5a:5f:cc:b6:b2:5f:18:
                    41:20:67:9e:6e:d9:64:fd:97:bb:8c:ed:7d:07:bc:
                    d1:db:08:de:80:2b:fe:0d:93:8b:de:94:a7:a7:f1:
                    07:cc:b4:82:70:4d:a6:c2:68:bb:e8:7b:82:f5:a2:
                    30:d6:38:a7:13:c0:fc:02:de:ea:3f:54:99:3a:87:
                    b3:d1:57:e3:ab:37:85:6f:d0:fd:d2:51:7f:ba:bc:
                    ef:8f:22:e9:45:f3:51:78:06:6b:a4:5b:1c:13:a0:
                    08:bd:7d:e0:85:78:65:11:07:8e:ab:d1:24:9c:24:
                    36:c4:48:54:28:c7:1c:57:06:34:b3:5c:7a:b9:f2:
                    ed:4d:5c:46:a2:08:39:64:7d:10:69:41:d3:9e:6d:
                    6a:5f:c8:25:77:9f:de:a8:bb:99:d9:c3:fc:52:4d:
                    aa:c7:5a:50:9e:21:c7:5d:21:6e:5d:0b:0e:4c:ae:
                    25:96:df:9e:a3:60:8a:ca:30:65:59:f3:03:98:10:
                    e9:8f:b3:5c:5d:e4:b1:af:79:a8:09:cd:ad:dc:40:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6A:6D:4F:FA:DD:10:79:32:17:D7:AF:2C:07:E4:F6:54:31:3A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e9e8f1de-de87-3995-b7ae-5bb9f0cb5c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:00:13:d1:74:db:0f:94:ab:6a:fe:77:6a:55:3a:3f:00:
         03:4d:46:bd:fd:0a:e2:aa:62:ee:bb:ba:82:36:1c:3d:54:ed:
         4a:34:61:fb:4b:9e:08:4e:1e:04:07:09:5d:11:01:1a:af:2f:
         dd:72:e4:49:9a:8f:1e:0b:4a:6e:32:82:20:b5:a6:dc:1c:ce:
         d0:2d:e1:57:6c:d8:30:f1:a1:fd:30:a8:6e:4a:fd:81:02:50:
         95:61:eb:87:fd:34:c9:1a:d3:68:74:d4:ef:98:d7:83:af:7c:
         1b:80:74:8c:f3:b0:2d:0b:74:27:95:14:45:c4:c6:fc:74:76:
         1a:e0:a7:11:1e:ce:1b:df:96:7c:ff:42:dd:f4:ff:06:fe:02:
         d8:f3:f4:c5:28:95:1f:26:ea:14:28:f0:bc:12:a8:d1:b1:1a:
         cb:90:c0:c8:19:03:35:37:b8:10:8b:05:ab:2c:5c:10:56:e9:
         28:90:1d:01:ad:cc:8d:7f:7f:f2:7a:7e:b7:bb:f5:04:17:4d:
         ea:52:77:dd:15:d3:ff:49:9f:53:ba:b8:a8:c8:47:76:cf:2c:
         98:cd:d8:45:94:c6:3f:5b:4a:f3:e8:62:89:e4:64:88:9b:a9:
         7f:0f:3d:1f:a4:bc:0d:b1:12:18:40:99:59:48:9f:c8:7a:49:
         a9:58:e5:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIHJnAo6Qfsi4rMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk
ZjdiOTUyYzEtZjBjNS00ZWNlLTkyOWEtZTk5MjdmZmJiM2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvAnAaTy8Skt6d/Kn+2jSNw91iicknrwN6u5
wEn3Rshez1BHE7jRFNc1FKTef4kBsULB8VpfzLayXxhBIGeebtlk/Ze7jO19B7zR
2wjegCv+DZOL3pSnp/EHzLSCcE2mwmi76HuC9aIw1jinE8D8At7qP1SZOoez0Vfj
qzeFb9D90lF/urzvjyLpRfNReAZrpFscE6AIvX3ghXhlEQeOq9EknCQ2xEhUKMcc
VwY0s1x6ufLtTVxGogg5ZH0QaUHTnm1qX8gld5/eqLuZ2cP8Uk2qx1pQniHHXSFu
XQsOTK4llt+eo2CKyjBlWfMDmBDpj7NcXeSxr3moCc2t3EBa6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtqbU/63RB5MhfXrywH5PZUMTqyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZTllOGYxZGUtZGU4Ny0z
OTk1LWI3YWUtNWJiOWYwY2I1YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQha+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVeABPRdNsPlKtq/ndqVTo/AANNRr39CuKqYu67uoI2HD1U7Uo0YftL
nghOHgQHCV0RARqvL91y5Emajx4LSm4ygiC1ptwcztAt4Vds2DDxof0wqG5K/YEC
UJVh64f9NMka02h01O+Y14OvfBuAdIzzsC0LdCeVFEXExvx0dhrgpxEezhvflnz/
Qt30/wb+Atjz9MUolR8m6hQo8LwSqNGxGsuQwMgZAzU3uBCLBassXBBW6SiQHQGt
zI1/f/J6fre79QQXTepSd90V0/9Jn1O6uKjIR3bPLJjN2EWUxj9bSvPoYonkZIib
qX8PPR+kvA2xEhhAmVlIn8h6SalY5X8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:25:41 2026 by rpki-client