Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/dbdf3cf6-5e74-3587-a9dd-d624184b094c.roa
File:                     dbdf3cf6-5e74-3587-a9dd-d624184b094c.roa (raw, json)
Hash identifier:          telSWSpB9NmhDZDtyOLnLuOQXcJJSPUN7sEM4RzoNpU=
Subject key identifier:   9C:87:C3:A8:5A:BE:B7:11:D5:5B:EE:F6:33:06:03:C8:CA:CC:D7:AD
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584E253F0734EABB5D3F994D6900
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/dbdf3cf6-5e74-3587-a9dd-d624184b094c.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     62537
IP address blocks:        66.85.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:07:34:ea:bb:5d:3f:99:4d:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=8593f9be-8c32-421f-b287-04bbed312a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:15:c8:bd:f4:ce:1c:51:4e:a3:e8:9e:2a:
                    eb:a2:95:e3:f0:53:31:c6:28:63:f1:c2:f5:cf:80:
                    18:23:c0:a3:31:22:64:b0:bd:54:61:cd:c8:e5:36:
                    fb:04:3f:e1:99:31:2c:7d:49:47:91:0d:59:e5:05:
                    60:89:8d:81:ab:2d:a3:6e:61:5e:43:3e:48:bf:ec:
                    87:5d:86:09:59:9c:59:0c:ba:c3:7b:72:51:b4:92:
                    d4:cb:45:13:21:26:90:ae:2c:d6:31:a8:40:93:fb:
                    8b:6a:4a:85:6a:92:f1:25:c8:d3:c1:4a:ab:83:9f:
                    3c:8f:ba:3d:a9:61:89:56:5e:b6:1e:38:d3:9f:68:
                    ff:6a:28:6e:64:f6:10:e3:79:08:b3:5c:04:79:05:
                    68:15:c6:2d:0a:d9:5f:4b:e5:b4:ad:15:91:75:1b:
                    3d:d6:1d:0a:1c:1e:68:78:d3:7f:ef:8e:7f:dc:33:
                    9f:10:9b:3e:3b:c7:ca:b5:21:a6:a8:9d:89:3b:83:
                    d2:d9:16:93:c7:20:6e:5b:5c:f3:b5:f9:10:0e:e2:
                    d0:19:0c:33:a3:e2:5e:f7:26:1a:5e:dd:c2:d9:c2:
                    c2:66:b8:61:d3:c6:7e:4e:f0:2c:83:ef:a3:be:30:
                    aa:4a:93:c5:57:dd:e0:ec:bd:73:11:89:ef:70:2f:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:C3:A8:5A:BE:B7:11:D5:5B:EE:F6:33:06:03:C8:CA:CC:D7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/dbdf3cf6-5e74-3587-a9dd-d624184b094c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:94:27:c6:ab:fe:8a:12:13:0c:29:c6:b7:7c:56:af:7b:
         ba:d3:1d:b8:a6:9a:5f:ed:8f:a5:e1:eb:c7:ca:84:b3:48:76:
         77:39:a0:04:78:71:5a:f2:7e:f6:f0:e9:b8:cd:a7:83:9f:e0:
         4f:8d:f4:d6:42:0c:b2:c4:05:a9:da:16:57:09:5d:ab:d6:05:
         f3:fc:dd:ae:9b:bc:f7:b1:98:ee:62:73:4c:f4:9a:fa:b9:b2:
         e2:15:05:fb:ab:8d:82:71:5c:fc:c4:e8:be:6c:41:f0:80:44:
         d0:d6:52:e8:d3:e3:21:83:25:11:7c:f1:82:96:57:37:dd:a9:
         4c:03:14:db:61:44:ac:29:3b:9f:6f:ac:ad:a6:c9:2c:2e:70:
         cc:0c:33:65:7f:a0:36:aa:92:83:df:27:a8:00:f0:17:2c:ed:
         82:be:55:93:55:04:73:3d:1c:fd:9b:6d:25:0d:f7:ec:bb:ed:
         2e:40:90:15:cb:b8:2d:2e:30:d6:e0:b3:eb:c6:70:d0:78:99:
         ea:9f:ce:e4:26:08:ed:5e:db:da:a5:b7:3c:b4:07:e7:6d:17:
         bb:34:5b:8e:0c:e2:f7:d4:6d:21:14:1b:c1:a4:fb:04:13:db:
         94:99:66:89:93:08:78:36:6c:a5:e9:bb:33:49:9e:a5:fa:5a:
         f6:31:78:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwc06rtdP5lNaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx
NTZmMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ODU5M2Y5YmUtOGMzMi00MjFmLWIyODctMDRiYmVkMzEyYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iUVyL30zhxRTqPonirropXj8FMxxihj8cL1
z4AYI8CjMSJksL1UYc3I5Tb7BD/hmTEsfUlHkQ1Z5QVgiY2Bqy2jbmFeQz5Iv+yH
XYYJWZxZDLrDe3JRtJLUy0UTISaQrizWMahAk/uLakqFapLxJcjTwUqrg588j7o9
qWGJVl62HjjTn2j/aihuZPYQ43kIs1wEeQVoFcYtCtlfS+W0rRWRdRs91h0KHB5o
eNN/745/3DOfEJs+O8fKtSGmqJ2JO4PS2RaTxyBuW1zztfkQDuLQGQwzo+Je9yYa
Xt3C2cLCZrhh08Z+TvAsg++jvjCqSpPFV93g7L1zEYnvcC+d+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyHw6havrcR1Vvu9jMGA8jKzNetMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj
YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvZGJkZjNjZjYtNWU3NC0z
NTg3LWE5ZGQtZDYyNDE4NGIwOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2
ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk
MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk
NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFdlCfGq/6KEhMMKca3fFave7rTHbimml/tj6Xh68fKhLNIdnc5oAR4
cVryfvbw6bjNp4Of4E+N9NZCDLLEBanaFlcJXavWBfP83a6bvPexmO5ic0z0mvq5
suIVBfurjYJxXPzE6L5sQfCARNDWUujT4yGDJRF88YKWVzfdqUwDFNthRKwpO59v
rK2mySwucMwMM2V/oDaqkoPfJ6gA8Bcs7YK+VZNVBHM9HP2bbSUN9+y77S5AkBXL
uC0uMNbgs+vGcNB4meqfzuQmCO1e29qltzy0B+dtF7s0W44M4vfUbSEUG8Gk+wQT
25SZZomTCHg2bKXpuzNJnqX6WvYxeOY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:28 2026 by rpki-client