Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/17e7a1b2-6d64-39db-91ba-f3481a235506.roa
File:                     17e7a1b2-6d64-39db-91ba-f3481a235506.roa (raw, json)
Hash identifier:          csDXFdUBaqXSesWIn5t5Qe2xoPGxQnN6S1VvtkpOD1s=
Subject key identifier:   37:E1:94:D9:DF:B5:D6:BE:2B:57:FF:77:10:47:3B:59:22:AA:D3:D4
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584D7E78B14AE6C975EDF65BDE20
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/17e7a1b2-6d64-39db-91ba-f3481a235506.roa
Signing time:             Mon 13 Apr 2026 15:16:36 +0000
ROA not before:           Mon 13 Apr 2026 15:16:36 +0000
ROA not after:            Sun 12 Jul 2026 15:16:36 +0000
asID:                     14955
IP address blocks:        66.35.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:78:b1:4a:e6:c9:75:ed:f6:5b:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Apr 13 15:16:36 2026 GMT
            Not After : Jul 12 15:16:36 2026 GMT
        Subject: CN=db1ecdff-e7c4-4f7b-bb34-98b915b1a134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:21:ac:16:20:ce:7f:c9:7c:19:c8:d2:cb:
                    ef:8e:74:f8:66:cf:3a:b8:f9:d4:7d:a8:b6:f5:f3:
                    47:a9:4e:46:66:3c:70:f4:e9:4e:f0:78:62:35:ae:
                    74:e4:d3:63:39:22:ff:42:63:f2:43:2d:64:39:de:
                    04:3d:72:7d:ce:9f:40:a4:71:62:cb:01:1a:3f:5d:
                    ca:8d:e8:a3:ed:c9:3f:fa:56:4e:de:f8:86:07:41:
                    a9:e3:5c:a5:a8:27:d0:4f:99:1c:d2:98:b2:29:84:
                    36:33:96:65:97:da:a9:4d:af:40:c2:9d:ad:ec:c2:
                    d5:43:83:a7:fc:34:38:51:f7:60:22:41:7f:c8:9a:
                    2d:53:2e:f3:0d:d9:8e:d1:25:0d:a4:50:e8:68:75:
                    14:88:92:14:f5:c7:a2:12:80:60:aa:5b:84:0d:4a:
                    5a:a5:e4:0f:5a:31:10:c0:82:95:b1:01:86:0f:44:
                    c7:63:2e:70:9e:bc:ec:d2:0f:d4:18:3e:06:79:7f:
                    8d:bc:ca:94:47:ff:31:2f:26:48:ce:50:73:11:cc:
                    af:3d:1d:d8:81:0f:17:eb:2c:12:32:5c:72:f7:42:
                    b4:b1:eb:e3:4a:56:88:4f:0e:18:20:0a:2c:04:4e:
                    00:6f:61:b6:b8:38:c2:4f:56:6b:fe:db:96:a6:39:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E1:94:D9:DF:B5:D6:BE:2B:57:FF:77:10:47:3B:59:22:AA:D3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/17e7a1b2-6d64-39db-91ba-f3481a235506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:65:da:a0:8d:9e:82:7e:46:3e:80:f9:93:79:50:33:32:82:
         c0:00:f7:5b:8f:80:ad:50:e2:23:5f:8f:80:0c:30:60:ee:5f:
         04:30:0c:fe:5a:ad:62:a1:75:53:23:16:e9:37:22:cf:a8:01:
         f7:33:e6:fc:23:d1:e1:d0:29:d8:f8:c1:8f:5a:e3:b5:b6:ad:
         dd:30:0d:51:11:b0:3a:33:cd:86:dc:35:b8:50:5e:7a:c5:57:
         9e:1a:d5:bb:97:42:8c:88:1e:7e:d9:09:07:97:9a:af:21:ec:
         36:48:61:20:56:22:9b:d0:b5:cd:27:22:ef:01:47:77:45:37:
         af:87:7a:61:41:73:a1:4c:48:2f:bd:20:36:fe:bb:62:74:c0:
         03:8c:a4:b8:ba:e5:53:7c:05:7a:d0:04:d8:82:64:d4:c6:d3:
         71:d0:54:71:4f:66:c6:ec:d7:cd:15:66:00:95:37:53:25:04:
         fd:57:c5:28:4a:0b:b6:66:42:e7:e8:7d:45:65:18:39:81:5d:
         6c:f1:1e:a4:d0:9b:4a:7c:fe:77:53:5c:6c:46:df:39:6a:e7:
         6f:d3:20:69:2a:78:ce:f4:fc:50:67:8d:cb:43:6d:b4:8c:2e:
         07:24:b6:66:56:30:59:d5:d3:61:6f:47:3c:ae:50:b9:24:03:
         06:f9:ea:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+eLFK5sl17fZb3iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3NzU5YjQtYTI0Ny00N2VhLWJhZGItYmI4MDliYzgw
YTMxMB4XDTI2MDQxMzE1MTYzNloXDTI2MDcxMjE1MTYzNlowLzEtMCsGA1UEAxMk
ZGIxZWNkZmYtZTdjNC00ZjdiLWJiMzQtOThiOTE1YjFhMTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22IhrBYgzn/JfBnI0svvjnT4Zs86uPnUfai2
9fNHqU5GZjxw9OlO8HhiNa505NNjOSL/QmPyQy1kOd4EPXJ9zp9ApHFiywEaP13K
jeij7ck/+lZO3viGB0Gp41ylqCfQT5kc0piyKYQ2M5Zll9qpTa9Awp2t7MLVQ4On
/DQ4UfdgIkF/yJotUy7zDdmO0SUNpFDoaHUUiJIU9ceiEoBgqluEDUpapeQPWjEQ
wIKVsQGGD0THYy5wnrzs0g/UGD4GeX+NvMqUR/8xLyZIzlBzEcyvPR3YgQ8X6ywS
Mlxy90K0sevjSlaITw4YIAosBE4Ab2G2uDjCT1Zr/tuWpjnELwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfhlNnftda+K1f/dxBHO1kiqtPUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3
NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgwOWJjODBhMzEvMTdlN2ExYjItNmQ2NC0z
OWRiLTkxYmEtZjM0ODFhMjM1NTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjc3NzU5YjQtYTI0Ny00N2VhLWJh
ZGItYmI4MDliYzgwYTMxLzY3Nzc1OWI0LWEyNDctNDdlYS1iYWRiLWJiODA5YmM4
MGEzMS5jcmwwHwYDVR0jBBgwFoAUSYDsXxW6YmUcIIY+JjxTmnHJOiwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgw
OWJjODBhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiNyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNl2qCNnoJ+Rj6A+ZN5UDMygsAA91uPgK1Q4iNfj4AMMGDuXwQwDP5a
rWKhdVMjFuk3Is+oAfcz5vwj0eHQKdj4wY9a47W2rd0wDVERsDozzYbcNbhQXnrF
V54a1buXQoyIHn7ZCQeXmq8h7DZIYSBWIpvQtc0nIu8BR3dFN6+HemFBc6FMSC+9
IDb+u2J0wAOMpLi65VN8BXrQBNiCZNTG03HQVHFPZsbs180VZgCVN1MlBP1XxShK
C7ZmQufofUVlGDmBXWzxHqTQm0p8/ndTXGxG3zlq52/TIGkqeM70/FBnjctDbbSM
LgcktmZWMFnV02FvRzyuULkkAwb56nk=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:24:51 2026 by rpki-client