Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
File:                     7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa (raw, json)
Hash identifier:          vABnEU8i6fiXinOs5/LN+i6ZKYBhpyrB9rH6Cvt5gf0=
Subject key identifier:   72:3A:CA:66:24:C0:A0:BD:5A:6A:FE:73:17:BC:60:AF:68:7F:08:83
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584F31B7C1AF671EA3D715590900
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     12684
IP address blocks:        66.119.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c1:af:67:1e:a3:d7:15:59:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=a22a97d0-7e60-445d-83c9-c6443e655359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:65:f3:b4:50:1d:fe:51:e4:6b:ea:74:5c:
                    22:11:f4:2d:10:49:53:8b:d4:e0:53:df:f1:8d:9a:
                    30:1d:62:7c:9d:cb:c8:2a:0b:72:80:cd:ba:71:a6:
                    43:6b:19:f8:bc:04:5a:e9:24:11:d1:be:5d:52:09:
                    f7:fe:53:55:ce:66:8f:29:91:8a:31:9d:1d:a6:01:
                    45:3b:d6:fd:21:fb:0a:55:0b:92:04:2a:e0:5b:58:
                    e1:e5:c4:e2:92:48:b5:ed:17:f6:65:78:56:d4:06:
                    69:96:dd:75:5c:07:2c:00:b4:85:3a:ee:0c:93:be:
                    90:cb:0d:64:1e:5d:c6:9c:39:2e:4e:1d:c2:dd:9d:
                    a4:12:0f:df:20:76:a2:44:65:53:cd:cf:61:c6:b5:
                    6e:b4:00:57:25:d1:d6:f5:a7:cf:93:7a:fd:1e:5c:
                    31:6f:27:76:b5:1e:6e:46:00:54:c0:ef:cd:75:f3:
                    ea:92:aa:9b:c9:0e:ee:f7:ed:4f:e2:8b:d3:db:c5:
                    00:bd:07:48:57:16:5f:f2:67:bd:e7:2d:65:ba:28:
                    31:9e:4b:15:91:d8:01:17:22:18:d8:91:59:7b:d1:
                    3c:5a:cb:3d:59:c1:4a:eb:9c:16:5f:6b:4b:4a:ba:
                    b1:ac:f5:67:92:13:45:f3:74:9e:d9:8b:e2:4b:af:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:CA:66:24:C0:A0:BD:5A:6A:FE:73:17:BC:60:AF:68:7F:08:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9b:0e:96:d1:f1:0b:db:29:ff:5c:0f:05:28:16:c0:57:f5:
         de:21:c7:df:a4:24:1e:c4:f9:1e:63:9b:5e:e6:03:00:4c:26:
         e4:cc:a3:65:5a:a3:f3:1a:31:ff:8f:2b:bb:6d:fa:43:1c:9b:
         a0:b0:ac:e5:d1:ce:6d:ee:dd:38:17:54:7d:7a:47:f8:a1:24:
         f2:f3:a9:50:dc:74:83:0a:47:be:59:96:1a:13:4d:c8:5d:d4:
         4e:3f:b7:28:fa:f5:e9:39:dc:58:47:bb:a9:f7:4d:6e:3c:33:
         50:22:1f:3c:90:c0:b3:dd:a5:ef:f4:c6:e9:01:59:a9:0c:76:
         5a:e2:64:9b:55:d1:a9:cc:82:a5:ba:e1:a6:88:53:60:d3:79:
         f8:d9:55:3e:f8:38:4b:f1:51:9c:29:dc:7e:d4:a9:c5:dd:65:
         e7:ba:2e:73:23:f2:fa:45:a9:11:63:ec:2b:39:b2:87:9a:20:
         8f:1d:e0:b6:c5:21:32:16:92:36:22:d0:1f:f6:28:5e:62:d7:
         7d:da:b8:c5:cf:4d:9a:0b:07:25:6d:29:f7:df:c9:b3:54:0d:
         ec:fe:26:90:7c:b0:b5:87:43:46:74:13:51:2a:b3:c1:9d:08:
         c0:89:14:8d:80:d3:48:59:7a:e1:7d:f5:1a:9c:02:d6:0c:2e:
         e0:b9:27:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8GvZx6j1xVZCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3
NjVjMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk
YTIyYTk3ZDAtN2U2MC00NDVkLTgzYzktYzY0NDNlNjU1MzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWxl87RQHf5R5GvqdFwiEfQtEElTi9TgU9/x
jZowHWJ8ncvIKgtygM26caZDaxn4vARa6SQR0b5dUgn3/lNVzmaPKZGKMZ0dpgFF
O9b9IfsKVQuSBCrgW1jh5cTikki17Rf2ZXhW1AZplt11XAcsALSFOu4Mk76Qyw1k
Hl3GnDkuTh3C3Z2kEg/fIHaiRGVTzc9hxrVutABXJdHW9afPk3r9Hlwxbyd2tR5u
RgBUwO/NdfPqkqqbyQ7u9+1P4ovT28UAvQdIVxZf8me95y1luigxnksVkdgBFyIY
2JFZe9E8Wss9WcFK65wWX2tLSrqxrPVnkhNF83Se2YviS68OKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHI6ymYkwKC9Wmr+cxe8YK9ofwiDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj
MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvN2ZhYjIyMDItOGFlNy0z
ZmU4LWIyOTAtZTg3NjA1ZmIyY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj
MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi
NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl
MTFiYjc2NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQndUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6bDpbR8QvbKf9cDwUoFsBX9d4hx9+kJB7E+R5jm17mAwBMJuTMo2Va
o/MaMf+PK7tt+kMcm6CwrOXRzm3u3TgXVH16R/ihJPLzqVDcdIMKR75ZlhoTTchd
1E4/tyj69ek53FhHu6n3TW48M1AiHzyQwLPdpe/0xukBWakMdlriZJtV0anMgqW6
4aaIU2DTefjZVT74OEvxUZwp3H7UqcXdZee6LnMj8vpFqRFj7Cs5soeaII8d4LbF
ITIWkjYi0B/2KF5i133auMXPTZoLByVtKfffybNUDez+JpB8sLWHQ0Z0E1Eqs8Gd
CMCJFI2A00hZeuF99RqcAtYMLuC5J2k=
-----END CERTIFICATE-----
Generated at Wed Sep 23 06:55:10 2026 by rpki-client