Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa
File:                     c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa (raw, json)
Hash identifier:          +N9BYA1IQsf1ivg0vCYoEnztoA5XYN4fjfyRFtkbF6g=
Subject key identifier:   E4:8D:58:2A:5E:38:1E:59:AB:6E:C8:A3:CE:BF:AC:65:A3:22:2E:5F
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584CC61210A4763C1F84A8953A00
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     29789
IP address blocks:        66.254.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:10:a4:76:3c:1f:84:a8:95:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=7f7eff89-d88d-45c0-8586-1187b038d727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:ec:c9:d3:fa:82:7f:18:5b:05:87:53:4b:
                    99:cd:55:c3:0a:0a:5d:c2:10:bf:f6:ef:66:0e:e5:
                    df:48:00:54:ea:59:a1:8e:f5:d4:9a:81:18:68:95:
                    d7:cd:eb:c7:7c:63:1b:57:1c:df:69:09:e7:34:4d:
                    e9:ce:84:4c:cd:55:5e:0d:bb:42:57:92:c3:92:c1:
                    2e:5c:d4:9c:62:48:8e:5a:2c:e5:6b:ee:d3:79:65:
                    f2:41:2e:b4:34:c8:af:4f:15:e1:88:77:0c:f7:92:
                    1a:0e:d8:c1:10:d8:c2:29:df:14:67:08:7f:63:22:
                    e3:94:a9:70:24:2f:ef:e7:6f:01:dd:73:fc:68:cb:
                    71:f7:54:b6:d9:88:53:b6:30:2c:b2:5e:cf:64:42:
                    f1:c4:9a:bc:1f:4c:6a:39:9e:e0:18:ab:c8:1a:a5:
                    a7:b7:89:12:53:36:41:11:7d:d8:68:52:28:45:d7:
                    ab:a1:d4:af:de:c5:5b:b1:7f:63:8a:b0:77:2d:20:
                    49:b7:36:05:a7:16:e8:f3:dc:fa:52:b2:5e:7d:64:
                    3c:39:1f:d5:04:76:8b:92:16:5c:0b:3a:d5:40:0e:
                    ea:71:fc:2d:a7:43:cc:a6:3f:01:67:8c:61:fc:59:
                    66:e6:b5:b5:03:55:05:bc:bd:b4:9a:dd:45:6b:dd:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:58:2A:5E:38:1E:59:AB:6E:C8:A3:CE:BF:AC:65:A3:22:2E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c18257f3-6355-317c-9bc9-ff216dcf5bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:5d:b6:61:fd:a4:64:1b:b4:44:39:9d:c7:be:f8:5e:52:
         a9:8a:c0:23:8a:67:e3:70:24:fb:1d:f2:24:09:f1:87:ea:74:
         14:d0:5f:1d:78:ea:70:cd:ad:44:3b:07:09:eb:79:19:f0:50:
         19:af:eb:da:7b:ca:dc:24:7d:18:2d:fb:a8:5d:7f:33:a1:1c:
         59:de:66:d5:3b:22:01:8c:fb:5d:6a:dd:90:a5:99:57:cd:d3:
         ed:ee:36:2c:db:3c:a3:4c:d3:3c:67:f3:cc:55:cb:fe:82:4e:
         6a:1e:92:89:27:12:1e:cb:6e:d7:31:68:e7:38:83:ad:4a:37:
         02:5c:ae:d3:71:ed:f4:87:18:fd:ca:2a:8a:e8:cf:d3:6f:c7:
         40:f6:46:44:f3:f6:6e:eb:bd:ca:61:29:dc:cf:1e:83:6b:22:
         49:ff:46:c4:3f:99:0d:e2:ef:87:4a:9d:4d:43:7d:1b:fe:4a:
         4f:dc:78:6c:c9:f1:09:37:11:2a:ed:bc:78:63:52:fc:05:cb:
         40:7d:ad:b4:53:56:26:99:3f:dd:3b:6c:23:08:9e:44:2e:ff:
         69:9b:02:88:de:90:98:2e:8a:63:0e:e3:25:f6:a0:6a:5c:46:
         b7:67:75:85:cd:59:07:83:d1:47:8e:41:66:0f:b7:71:9d:c7:
         8a:54:1b:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhCkdjwfhKiVOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2
YTljMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
N2Y3ZWZmODktZDg4ZC00NWMwLTg1ODYtMTE4N2IwMzhkNzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsifsydP6gn8YWwWHU0uZzVXDCgpdwhC/9u9m
DuXfSABU6lmhjvXUmoEYaJXXzevHfGMbVxzfaQnnNE3pzoRMzVVeDbtCV5LDksEu
XNScYkiOWizla+7TeWXyQS60NMivTxXhiHcM95IaDtjBENjCKd8UZwh/YyLjlKlw
JC/v528B3XP8aMtx91S22YhTtjAssl7PZELxxJq8H0xqOZ7gGKvIGqWnt4kSUzZB
EX3YaFIoRderodSv3sVbsX9jirB3LSBJtzYFpxbo89z6UrJefWQ8OR/VBHaLkhZc
CzrVQA7qcfwtp0PMpj8BZ4xh/Flm5rW1A1UFvL20mt1Fa92sKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSNWCpeOB5Zq27Io86/rGWjIi5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl
MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvYzE4MjU3ZjMtNjM1NS0z
MTdjLTliYzktZmYyMTZkY2Y1YmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj
YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl
NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh
MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv5+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADONXbZh/aRkG7REOZ3HvvheUqmKwCOKZ+NwJPsd8iQJ8YfqdBTQXx14
6nDNrUQ7BwnreRnwUBmv69p7ytwkfRgt+6hdfzOhHFneZtU7IgGM+11q3ZClmVfN
0+3uNizbPKNM0zxn88xVy/6CTmoekoknEh7LbtcxaOc4g61KNwJcrtNx7fSHGP3K
Koroz9Nvx0D2RkTz9m7rvcphKdzPHoNrIkn/RsQ/mQ3i74dKnU1DfRv+Sk/ceGzJ
8Qk3ESrtvHhjUvwFy0B9rbRTViaZP907bCMInkQu/2mbAojekJguimMO4yX2oGpc
RrdndYXNWQeD0UeOQWYPt3Gdx4pUG6c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:12 2026 by rpki-client