Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8448a058-efbb-3482-84d7-e1c11cb7696c.roa
File:                     8448a058-efbb-3482-84d7-e1c11cb7696c.roa (raw, json)
Hash identifier:          QpI/z9Odt+kpy6qNovIfvsi3mUUrB8HDuz4/pksJAjk=
Subject key identifier:   C9:74:DB:17:11:5F:AB:63:4B:E0:4A:93:65:5D:39:38:96:BA:82:77
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5E62CDB593F76411F629AA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8448a058-efbb-3482-84d7-e1c11cb7696c.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     395793
IP address blocks:        66.134.64.0/23 maxlen: 24
                          66.134.66.0/23 maxlen: 24
                          66.134.68.0/23 maxlen: 24
                          66.134.70.0/23 maxlen: 24
                          66.134.76.0/23 maxlen: 24
                          66.134.78.0/23 maxlen: 24
                          66.134.80.0/23 maxlen: 24
                          68.167.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cd:b5:93:f7:64:11:f6:29:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=6cd6fa9a-acc5-48de-8d60-a30d31aaf567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:2d:c3:4c:46:b6:d5:d6:5d:96:f1:8c:f2:
                    2a:88:8e:77:b0:10:1c:2f:60:e8:7b:6e:65:8c:3b:
                    42:e2:ba:e3:a9:89:0c:c2:d9:7b:9a:48:9e:3a:37:
                    d6:90:2d:ef:d6:7e:1f:73:99:25:ee:19:e9:0d:e4:
                    c0:06:e4:ea:a5:62:e3:12:b4:47:f3:20:e2:57:f8:
                    95:64:b5:7c:1d:4c:f9:87:bc:10:5b:9d:cd:95:b8:
                    91:f9:ca:ba:ce:a5:c5:67:53:6d:16:f8:be:45:e7:
                    ed:75:c6:14:4c:ec:e7:b9:80:07:a7:75:b7:d4:69:
                    65:31:53:e9:0e:69:86:2a:82:af:21:5d:4b:ad:b4:
                    71:a4:99:94:16:31:2b:c9:8d:ad:81:d0:1c:4d:0e:
                    d3:bb:9e:97:e5:28:6f:22:30:78:93:41:81:6e:08:
                    1b:cb:61:7c:54:63:83:1c:85:92:6c:9e:d3:c5:21:
                    45:8e:ba:81:52:48:5c:8e:2d:03:00:0b:41:a4:cd:
                    13:49:a0:3d:69:3c:5e:9b:9e:69:eb:b5:01:18:29:
                    5d:b1:b3:06:79:d2:8b:78:66:f5:fe:df:07:32:e8:
                    f2:2d:41:ea:66:03:6a:da:81:1f:e2:5c:4f:f9:a6:
                    8d:d0:85:dc:54:37:da:e6:cb:87:f9:82:23:26:17:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:DB:17:11:5F:AB:63:4B:E0:4A:93:65:5D:39:38:96:BA:82:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8448a058-efbb-3482-84d7-e1c11cb7696c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.134.64.0/21
                  66.134.76.0-66.134.81.255
                  68.167.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:9c:7f:e9:b9:93:0e:41:d8:4f:86:69:4b:40:50:04:65:
         c4:4d:bd:22:f1:80:b5:de:cc:4f:26:e6:22:f3:27:af:bc:5c:
         af:ae:01:9d:21:08:57:5d:0e:2d:c4:eb:b1:80:2d:5c:84:08:
         d1:cb:23:9e:35:4d:3e:a5:57:0b:2c:f7:a5:66:6a:e4:b8:cb:
         ec:3a:32:6c:19:63:7a:9e:7c:49:58:a7:cd:a9:25:f8:2f:7e:
         4b:d0:09:2d:37:1e:45:ef:3e:13:ef:74:0f:0c:9f:eb:54:ac:
         6d:82:3f:30:ab:75:df:fa:b2:b0:7f:3b:e3:9f:91:74:b8:fb:
         bd:a6:3c:a2:18:06:b8:a5:24:ea:6d:6a:c5:d2:8a:2a:cd:f8:
         44:86:40:2b:e6:17:d0:e6:19:e4:50:ea:86:7b:6f:bd:39:47:
         0c:5e:40:11:db:2a:64:38:d0:2e:28:04:b3:e5:6a:8c:0e:45:
         49:2e:78:98:af:4c:ae:2c:6c:e8:ce:0e:99:05:4d:a9:cf:f9:
         04:39:7b:65:07:9d:66:60:3a:7a:fe:80:da:66:ff:1c:5f:c5:
         32:7f:ff:2a:6a:eb:54:3c:5f:58:d2:3e:38:22:95:ba:44:df:
         a5:a2:77:8d:d0:d6:6d:bb:03:51:c8:12:70:08:18:d7:b6:7d:
         16:4e:57:4e
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE9eYs21k/dkEfYpqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
NmNkNmZhOWEtYWNjNS00OGRlLThkNjAtYTMwZDMxYWFmNTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCwtw0xGttXWXZbxjPIqiI53sBAcL2Doe25l
jDtC4rrjqYkMwtl7mkieOjfWkC3v1n4fc5kl7hnpDeTABuTqpWLjErRH8yDiV/iV
ZLV8HUz5h7wQW53NlbiR+cq6zqXFZ1NtFvi+ReftdcYUTOznuYAHp3W31GllMVPp
DmmGKoKvIV1LrbRxpJmUFjEryY2tgdAcTQ7Tu56X5ShvIjB4k0GBbggby2F8VGOD
HIWSbJ7TxSFFjrqBUkhcji0DAAtBpM0TSaA9aTxem55p67UBGCldsbMGedKLeGb1
/t8HMujyLUHqZgNq2oEf4lxP+aaN0IXcVDfa5suH+YIjJhe4RwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFMl02xcRX6tjS+BKk2VdOTiWuoJ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODQ0OGEwNTgtZWZiYi0z
NDgyLTg0ZDctZTFjMTFjYjc2OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDQoZAMAwD
BAJChkwDBAFChlADBAFEp74wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGV+cf+m5kw5B2E+GaUtAUARlxE29
IvGAtd7MTybmIvMnr7xcr64BnSEIV10OLcTrsYAtXIQI0csjnjVNPqVXCyz3pWZq
5LjL7DoybBljep58SVinzakl+C9+S9AJLTceRe8+E+90Dwyf61SsbYI/MKt13/qy
sH8745+RdLj7vaY8ohgGuKUk6m1qxdKKKs34RIZAK+YX0OYZ5FDqhntvvTlHDF5A
EdsqZDjQLigEs+VqjA5FSS54mK9Mrixs6M4OmQVNqc/5BDl7ZQedZmA6ev6A2mb/
HF/FMn//KmrrVDxfWNI+OCKVukTfpaJ3jdDWbbsDUcgScAgY17Z9Fk5XTg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:53:10 2026 by rpki-client