Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa
File:                     25868134-7ff6-361c-806c-bb00bedcb12d.roa (raw, json)
Hash identifier:          51cb52dcNSl3pHTCOKmb54P2lfDmfOmZoTjhlF1pTb4=
Subject key identifier:   F2:FA:AA:89:26:8B:07:6B:CB:D2:05:5D:83:5A:02:77:0B:5D:C1:74
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CCBA762DBBA17F69F5D6709A0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     13576
IP address blocks:        66.115.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:62:db:ba:17:f6:9f:5d:67:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=f16c4e75-35cb-40fd-985d-27d23bc1dcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:c1:30:a3:41:e2:9e:2e:bd:6e:ca:4b:e7:
                    e6:20:a0:26:5f:c4:69:c9:db:e7:51:01:f0:53:88:
                    fd:fa:1c:54:8b:4c:df:f2:c5:41:ab:0c:e8:87:75:
                    ec:77:a9:6f:16:9b:08:90:fd:52:5a:1c:d6:f0:3d:
                    dc:c0:0e:9f:70:b3:4c:f7:67:e5:23:e3:1d:d9:50:
                    13:95:84:21:c5:8d:de:19:2e:3b:65:11:f7:ea:86:
                    88:91:3f:e6:13:1f:86:ad:6b:a6:07:ef:3f:1e:61:
                    fe:98:69:0a:86:b6:57:9f:cf:f1:86:9b:f7:cf:7b:
                    b5:e3:a0:4a:b1:d7:25:c7:0c:c6:55:07:bb:6e:8c:
                    50:15:ce:a0:ad:34:de:bc:80:d5:7b:9b:41:01:9a:
                    dd:f1:83:12:bd:f0:ed:ce:96:bf:b3:5f:48:10:77:
                    b9:2c:50:21:20:32:09:b4:0f:8d:9e:79:bf:ca:60:
                    54:21:ee:c8:79:1d:d3:71:f1:f8:03:b5:2a:04:5e:
                    0a:e1:19:80:86:ff:f3:19:05:e1:a7:67:14:04:25:
                    64:b9:1d:5a:fc:10:05:ad:26:3f:ee:27:6d:22:77:
                    60:e8:16:bf:9a:62:e1:5d:43:e1:9a:2f:c3:6e:cb:
                    fb:9b:7c:72:df:0d:61:dd:0a:9c:f7:f8:b1:d6:9f:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FA:AA:89:26:8B:07:6B:CB:D2:05:5D:83:5A:02:77:0B:5D:C1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:a2:b8:5a:c9:6b:0e:b6:4c:1a:66:27:62:a6:58:ad:91:22:
         c7:20:fa:07:c1:1c:9c:63:62:2a:3c:36:89:c3:d6:3f:99:5a:
         bc:b9:18:95:3c:65:c9:e6:21:8a:c8:ce:6e:6e:50:aa:af:e4:
         c9:16:e8:e9:f8:03:19:f6:ae:0f:a6:88:33:a6:e4:d1:c5:d5:
         8d:8c:8e:cf:12:7a:20:bf:a0:5e:15:cf:f5:8a:d0:2c:7a:f7:
         dc:42:66:b2:a0:78:af:f5:52:13:5e:b0:e9:c8:f8:f6:24:5d:
         a4:ef:eb:f4:c4:4f:64:b2:38:33:64:d3:d0:5a:60:92:ec:4b:
         16:5d:0d:25:e6:33:8d:86:e0:f1:d3:9f:38:67:6a:f1:a9:86:
         59:3e:8f:52:51:60:cd:14:e3:5e:7a:5a:7b:26:66:ea:ab:16:
         02:70:1f:a8:2c:4e:7f:88:b0:50:5b:f3:96:0b:35:27:53:58:
         46:f6:b6:e3:7c:d1:3e:8f:9c:b9:10:3f:f3:3f:dd:df:d4:ef:
         81:83:5d:4c:1f:00:65:7d:a8:7d:b5:16:e0:41:db:3d:14:2f:
         c9:d7:c2:88:39:9a:b4:41:11:1c:6d:9c:32:6c:52:27:22:7b:
         bd:77:29:aa:47:d4:1a:eb:f3:f6:1f:8e:80:9e:64:bd:33:e1:
         23:8b:31:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp2Lbuhf2n11nCaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
ZjE2YzRlNzUtMzVjYi00MGZkLTk4NWQtMjdkMjNiYzFkY2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S3BMKNB4p4uvW7KS+fmIKAmX8RpydvnUQHw
U4j9+hxUi0zf8sVBqwzoh3Xsd6lvFpsIkP1SWhzW8D3cwA6fcLNM92flI+Md2VAT
lYQhxY3eGS47ZRH36oaIkT/mEx+GrWumB+8/HmH+mGkKhrZXn8/xhpv3z3u146BK
sdclxwzGVQe7boxQFc6grTTevIDVe5tBAZrd8YMSvfDtzpa/s19IEHe5LFAhIDIJ
tA+Nnnm/ymBUIe7IeR3TcfH4A7UqBF4K4RmAhv/zGQXhp2cUBCVkuR1a/BAFrSY/
7idtIndg6Ba/mmLhXUPhmi/Dbsv7m3xy3w1h3Qqc9/ix1p89MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPL6qokmiwdry9IFXYNaAncLXcF0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjU4NjgxMzQtN2ZmNi0z
NjFjLTgwNmMtYmIwMGJlZGNiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANiiuFrJaw62TBpmJ2KmWK2RIscg+gfBHJxjYio8NonD1j+ZWry5GJU8
ZcnmIYrIzm5uUKqv5MkW6On4Axn2rg+miDOm5NHF1Y2Mjs8SeiC/oF4Vz/WK0Cx6
99xCZrKgeK/1UhNesOnI+PYkXaTv6/TET2SyODNk09BaYJLsSxZdDSXmM42G4PHT
nzhnavGphlk+j1JRYM0U4156WnsmZuqrFgJwH6gsTn+IsFBb85YLNSdTWEb2tuN8
0T6PnLkQP/M/3d/U74GDXUwfAGV9qH21FuBB2z0UL8nXwog5mrRBERxtnDJsUici
e713KapH1Brr8/YfjoCeZL0z4SOLMaQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:20 2026 by rpki-client