Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa
File:                     7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa (raw, json)
Hash identifier:          M3J4C2zyEup2fVwwYI/zX6GPU0Uu5p7muNmUPz2gcl8=
Subject key identifier:   99:95:C4:C8:F5:38:8F:F5:AD:E5:30:15:5E:A5:E3:1D:58:7F:67:9A
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584F00DCC5D63A2F124483BFD700
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     14955
IP address blocks:        66.35.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c5:d6:3a:2f:12:44:83:bf:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=e82f486b-c747-4d8a-b36c-b4e9a979b3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:c5:f4:1b:46:c8:de:95:6d:f6:01:e4:00:
                    7e:14:b0:39:4b:86:c1:a9:67:20:18:35:cb:94:44:
                    a4:e2:d3:b4:8a:bf:09:77:c8:f4:a7:33:07:62:56:
                    21:93:5c:41:24:5d:b2:b0:94:8a:82:9f:e0:61:b4:
                    a4:bc:ea:e2:f7:21:c0:14:42:3b:6e:22:f9:94:12:
                    27:65:f6:1f:bd:e4:6f:cc:79:3b:52:b5:d4:c1:c9:
                    6c:38:89:d2:5d:96:0c:44:df:32:7d:da:77:59:8d:
                    90:8c:9e:b1:e0:94:cd:33:39:df:dc:ba:24:91:58:
                    cb:b4:4a:fa:ef:70:33:4b:df:fb:f7:42:63:5e:0c:
                    fc:7a:21:4d:e0:04:9c:f2:9d:96:8e:4b:47:b1:44:
                    c4:96:fb:04:5f:f1:ac:c1:ca:2e:e5:7d:8d:a4:25:
                    1d:52:53:16:98:17:a4:f5:bd:e8:a3:2a:77:38:a5:
                    64:2b:c3:29:8d:69:a0:a7:f6:e3:ed:db:0f:2d:53:
                    a6:e0:39:bc:f8:87:b6:b5:5f:34:c5:cb:e2:91:27:
                    e7:11:f1:95:2d:72:11:80:93:3c:77:b2:0f:bb:77:
                    2a:41:68:a4:a7:f8:0b:1d:61:37:73:e2:a2:8b:77:
                    ff:5b:d6:05:a0:86:1f:e8:83:55:bc:3a:5f:33:8b:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:C4:C8:F5:38:8F:F5:AD:E5:30:15:5E:A5:E3:1D:58:7F:67:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7d668e5e-3e73-34f9-b551-97a9f85ddc54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:75:ae:bd:9b:fe:de:8e:e8:05:0c:a8:1b:f1:6a:b3:37:
         a4:c1:d4:8d:ac:78:e8:b8:b5:cc:d3:2c:7f:6b:25:2c:c9:41:
         fd:1e:61:f7:bd:36:23:3d:a5:7d:00:f5:51:00:6b:cd:a6:59:
         d2:99:cd:f9:4e:43:a8:16:35:00:ed:8a:ee:04:e0:c8:4d:9d:
         9b:5a:8a:45:1a:d5:c9:e6:83:93:d8:0e:c5:1f:ad:dd:53:3f:
         57:05:01:ec:21:65:f6:33:c3:79:d6:23:ba:4d:56:32:2b:69:
         2e:bf:49:ca:37:64:f6:8c:09:48:25:ce:ee:c0:68:4a:16:00:
         7b:3c:31:d4:b6:a0:18:6e:c7:09:cd:e3:29:8b:34:2c:da:86:
         11:38:e5:3f:f7:9e:b3:bf:63:04:42:54:ef:f5:28:77:bb:d6:
         2c:19:37:c9:a2:88:ca:86:32:c2:73:9b:12:82:ad:95:09:81:
         7c:78:64:fe:2c:41:9c:d3:c3:e5:43:f5:d5:c0:62:54:f1:76:
         cf:a6:8c:3a:a3:91:4b:06:88:ec:fb:9b:7a:cb:d1:a9:f2:01:
         d8:ba:c4:21:68:cb:0b:30:b5:31:ea:df:40:6a:55:62:21:4c:
         11:61:3f:f6:59:64:53:c7:8f:d7:6e:a8:87:08:7d:c5:89:1c:
         d0:d4:15:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MXWOi8SRIO/1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3NzU5YjQtYTI0Ny00N2VhLWJhZGItYmI4MDliYzgw
YTMxMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZTgyZjQ4NmItYzc0Ny00ZDhhLWIzNmMtYjRlOWE5NzliM2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApALF9BtGyN6VbfYB5AB+FLA5S4bBqWcgGDXL
lESk4tO0ir8Jd8j0pzMHYlYhk1xBJF2ysJSKgp/gYbSkvOri9yHAFEI7biL5lBIn
ZfYfveRvzHk7UrXUwclsOInSXZYMRN8yfdp3WY2QjJ6x4JTNMznf3LokkVjLtEr6
73AzS9/790JjXgz8eiFN4ASc8p2WjktHsUTElvsEX/Gswcou5X2NpCUdUlMWmBek
9b3ooyp3OKVkK8MpjWmgp/bj7dsPLVOm4Dm8+Ie2tV80xcvikSfnEfGVLXIRgJM8
d7IPu3cqQWikp/gLHWE3c+Kii3f/W9YFoIYf6INVvDpfM4sPbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmVxMj1OI/1reUwFV6l4x1Yf2eaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3
NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgwOWJjODBhMzEvN2Q2NjhlNWUtM2U3My0z
NGY5LWI1NTEtOTdhOWY4NWRkYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjc3NzU5YjQtYTI0Ny00N2VhLWJh
ZGItYmI4MDliYzgwYTMxLzY3Nzc1OWI0LWEyNDctNDdlYS1iYWRiLWJiODA5YmM4
MGEzMS5jcmwwHwYDVR0jBBgwFoAUSYDsXxW6YmUcIIY+JjxTmnHJOiwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgw
OWJjODBhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqrda69m/7ejugFDKgb8WqzN6TB1I2seOi4tczTLH9rJSzJQf0eYfe9
NiM9pX0A9VEAa82mWdKZzflOQ6gWNQDtiu4E4MhNnZtaikUa1cnmg5PYDsUfrd1T
P1cFAewhZfYzw3nWI7pNVjIraS6/Sco3ZPaMCUglzu7AaEoWAHs8MdS2oBhuxwnN
4ymLNCzahhE45T/3nrO/YwRCVO/1KHe71iwZN8miiMqGMsJzmxKCrZUJgXx4ZP4s
QZzTw+VD9dXAYlTxds+mjDqjkUsGiOz7m3rL0anyAdi6xCFoywswtTHq30BqVWIh
TBFhP/ZZZFPHj9duqIcIfcWJHNDUFWQ=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:03:41 2026 by rpki-client