Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa
File:                     1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa (raw, json)
Hash identifier:          tpwRKDWCpSgJQbRzwjuhkcPg7ST54uk/e9Sk5UbEEUk=
Subject key identifier:   14:1D:04:E9:38:13:77:D1:CF:53:E7:0A:AA:3E:83:65:92:36:AC:84
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F4328584F71ED984789985343AF753780
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     36614
IP address blocks:        206.124.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:98:47:89:98:53:43:af:75:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=873352f3-f137-480b-bc49-16d2e7e70202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:e9:77:ab:50:a2:b4:2c:90:4c:f4:88:6d:
                    30:f5:59:31:77:12:4f:38:dc:92:e3:fb:1f:f1:b2:
                    41:9f:07:41:5b:95:0a:72:a3:97:cd:6c:c7:0c:51:
                    31:80:5e:24:c8:58:3c:a2:7d:97:4e:aa:86:5f:36:
                    1a:ce:0f:8e:b7:75:0d:54:ac:b2:79:b7:33:e7:52:
                    b4:6a:c1:53:97:a5:7b:d7:3c:b7:4a:86:dc:6f:83:
                    8c:b8:d6:43:d5:25:2d:36:b5:8d:26:0e:4c:f6:93:
                    00:c7:c9:01:0c:2b:8d:a8:91:1c:1f:1e:32:42:f5:
                    13:11:43:aa:3c:8a:af:87:83:7b:b1:f5:c7:7b:46:
                    58:4f:3c:72:ee:53:66:19:51:a1:78:ff:ea:04:78:
                    9a:20:10:cb:1a:c1:25:d7:ac:56:05:34:c8:c0:04:
                    19:24:20:c0:77:0f:b0:f2:dd:7d:ca:68:70:07:2f:
                    d8:6a:1e:93:63:f5:e3:4a:64:73:e7:68:ed:78:21:
                    52:4c:f3:49:5d:8b:f3:ab:0a:e6:2c:cc:67:66:b8:
                    6b:a1:1b:58:3b:cc:15:dc:d6:12:1b:50:a4:4c:d2:
                    24:e3:dc:21:cc:ad:e2:18:49:e1:e5:c7:5c:dd:50:
                    02:5b:d1:7e:52:d5:76:28:8b:8f:88:bd:fa:1b:65:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1D:04:E9:38:13:77:D1:CF:53:E7:0A:AA:3E:83:65:92:36:AC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:c4:9d:46:e2:21:89:88:26:bb:1f:f5:b4:ff:d1:b4:eb:
         de:b6:47:76:c2:47:11:1e:1f:ea:0c:1d:b3:2a:2d:c9:a6:87:
         a1:67:cd:57:76:3e:48:d2:8b:1d:9b:49:33:fa:a1:31:2a:04:
         3a:91:eb:ea:36:0c:17:06:3b:47:fa:ef:e2:28:29:2e:85:b3:
         68:b7:d5:c8:a7:27:14:50:2e:e5:80:26:ce:00:b9:b4:0d:da:
         46:e8:ee:db:bd:e9:00:f7:79:67:2c:d9:86:be:da:13:36:e8:
         b4:8c:63:96:01:17:55:41:94:0a:b7:ee:a4:e6:4b:1e:16:24:
         42:3e:15:85:cf:46:33:04:ea:96:35:10:e8:e4:05:45:79:19:
         09:ac:5a:f3:5d:d5:3c:3f:a3:40:c3:e5:ea:d8:9f:d0:e0:92:
         82:fd:8c:69:08:78:c0:86:15:31:25:12:f8:9e:57:49:24:b2:
         19:e1:70:83:58:f9:38:c1:65:85:11:41:20:8a:5e:92:ab:8b:
         51:4e:2c:d7:4f:06:78:ff:47:98:9b:04:d0:43:c9:c9:f0:9c:
         ca:1b:83:7c:37:15:34:24:76:b9:b9:3b:87:09:88:27:64:d8:
         5b:fe:db:3e:cd:48:9d:0e:71:ea:67:c3:39:bb:fb:2c:57:db:
         da:2a:64:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZhHiZhTQ691N4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy
MjcwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
ODczMzUyZjMtZjEzNy00ODBiLWJjNDktMTZkMmU3ZTcwMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6vpd6tQorQskEz0iG0w9VkxdxJPONyS4/sf
8bJBnwdBW5UKcqOXzWzHDFExgF4kyFg8on2XTqqGXzYazg+Ot3UNVKyyebcz51K0
asFTl6V71zy3Sobcb4OMuNZD1SUtNrWNJg5M9pMAx8kBDCuNqJEcHx4yQvUTEUOq
PIqvh4N7sfXHe0ZYTzxy7lNmGVGheP/qBHiaIBDLGsEl16xWBTTIwAQZJCDAdw+w
8t19ymhwBy/Yah6TY/XjSmRz52jteCFSTPNJXYvzqwrmLMxnZrhroRtYO8wV3NYS
G1CkTNIk49whzK3iGEnh5cdc3VACW9F+UtV2KIuPiL36G2WQdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQdBOk4E3fRz1PnCqo+g2WSNqyEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw
ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvMWE3ZWZkODItNzRlNy0z
NjEyLThiZWEtYWM2MmUyZDQzNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4
OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1
MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx
Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFznygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbGxJ1G4iGJiCa7H/W0/9G06962R3bCRxEeH+oMHbMqLcmmh6FnzVd2
PkjSix2bSTP6oTEqBDqR6+o2DBcGO0f67+IoKS6Fs2i31cinJxRQLuWAJs4AubQN
2kbo7tu96QD3eWcs2Ya+2hM26LSMY5YBF1VBlAq37qTmSx4WJEI+FYXPRjME6pY1
EOjkBUV5GQmsWvNd1Tw/o0DD5erYn9DgkoL9jGkIeMCGFTElEvieV0kkshnhcINY
+TjBZYURQSCKXpKri1FOLNdPBnj/R5ibBNBDycnwnMobg3w3FTQkdrm5O4cJiCdk
2Fv+2z7NSJ0Ocepnwzm7+yxX29oqZCE=
-----END CERTIFICATE-----
Generated at Sat Oct 10 02:10:22 2026 by rpki-client