Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/826d05b2-f4f7-3ef9-b27d-9b418dcd0407.roa
File:                     826d05b2-f4f7-3ef9-b27d-9b418dcd0407.roa (raw, json)
Hash identifier:          5zUPAjV21zmiYl6H/95Om77Gw+gmhVTX+DMsRwW1Y6A=
Subject key identifier:   5B:01:99:8C:06:BE:F5:59:C2:07:0C:24:9D:2D:77:AF:B7:96:14:09
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CB33CB76BF0C2968010CF2200
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/826d05b2-f4f7-3ef9-b27d-9b418dcd0407.roa
Signing time:             Fri 30 Jan 2026 20:06:40 +0000
ROA not before:           Fri 30 Jan 2026 20:06:40 +0000
ROA not after:            Thu 30 Apr 2026 19:06:40 +0000
asID:                     402159
IP address blocks:        66.115.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b3:3c:b7:6b:f0:c2:96:80:10:cf:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jan 30 20:06:40 2026 GMT
            Not After : Apr 30 19:06:40 2026 GMT
        Subject: CN=2f4a8451-f4dc-4d0b-948e-ee339539f2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:c6:25:fc:77:11:5b:af:de:2d:de:76:10:
                    2c:bb:64:f4:a2:8a:9b:53:56:5c:c5:be:57:8d:be:
                    20:ca:61:09:51:07:fb:82:bb:92:ce:3f:2c:ad:e8:
                    6b:5f:54:a2:8c:18:a0:f4:6d:99:d3:32:3f:b0:46:
                    ec:d1:1c:c6:1c:04:1b:5c:41:92:e9:1d:b3:1d:2c:
                    98:b4:52:9e:d9:d1:73:d6:41:93:32:58:b6:c4:9d:
                    14:d6:0b:6d:6d:54:e3:c8:e4:5c:56:d1:d3:55:59:
                    dd:05:07:8e:6b:62:0a:c9:a2:ce:17:28:62:f4:00:
                    ea:e3:09:65:70:f3:ba:f1:e0:80:43:cc:2c:cb:ea:
                    d0:4e:8e:ca:ca:4d:0f:6b:e5:c7:08:9f:d5:58:5d:
                    b3:80:4f:de:4a:eb:1b:72:4b:82:cb:dd:6c:cf:e3:
                    6d:a5:04:97:61:84:84:78:fc:83:fb:67:f7:01:81:
                    0f:07:cf:bb:18:cb:61:45:d6:7a:ae:7b:63:03:bc:
                    ac:56:29:b6:c7:fc:51:88:3e:63:13:a9:a9:9f:4e:
                    29:de:72:7b:1d:4f:5b:aa:e3:17:3f:2d:cf:b6:e0:
                    7f:80:74:26:50:6f:66:f6:96:ae:e8:8a:11:1a:d7:
                    dc:b3:78:55:8b:c4:ab:ad:1d:a6:92:31:91:7c:b4:
                    fb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:99:8C:06:BE:F5:59:C2:07:0C:24:9D:2D:77:AF:B7:96:14:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/826d05b2-f4f7-3ef9-b27d-9b418dcd0407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:5f:7d:e0:ff:83:d2:93:c6:ae:18:d5:2b:b9:f2:fc:3d:
         36:12:9d:bc:28:fb:17:7d:28:8c:88:cd:ed:87:6a:0d:aa:c6:
         57:9f:d9:dc:aa:6d:49:92:56:05:b5:9a:95:6f:cf:fa:3f:9c:
         da:d4:c9:e5:28:bd:ba:2d:6a:56:4c:47:5b:99:4f:98:0e:de:
         f4:2e:f5:c2:76:a7:56:03:da:68:81:a1:66:5f:c7:06:24:05:
         56:04:19:2e:60:7f:59:51:57:7a:f9:b5:38:85:c0:b1:8d:2b:
         f1:a2:19:bd:8d:f4:bf:22:9f:a1:25:b6:16:d6:ed:59:9f:1a:
         7d:75:f4:f1:0c:0e:83:78:05:73:c6:f7:4a:cc:f4:d8:9c:cf:
         d9:e3:5a:d2:78:bf:35:e6:ea:00:d5:d5:bc:48:0c:7c:f9:d4:
         ec:1b:c8:07:f6:55:c7:8b:d1:ca:49:d1:a6:40:bc:16:22:84:
         2d:f5:1a:ff:91:db:6f:b7:6f:6a:45:9e:d5:6d:bd:01:3b:81:
         fe:0d:85:c6:e8:9c:df:27:90:b4:b2:01:95:b9:e4:0e:70:f0:
         0b:b7:fd:e7:58:01:d8:66:42:ce:00:a3:44:da:89:7f:86:70:
         b8:61:45:04:eb:34:7e:db:f0:c6:91:ad:dd:c8:18:6a:f7:13:
         10:9c:f1:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyzPLdr8MKWgBDPIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDEzMDIwMDY0MFoXDTI2MDQzMDE5MDY0MFowLzEtMCsGA1UEAxMk
MmY0YTg0NTEtZjRkYy00ZDBiLTk0OGUtZWUzMzk1MzlmMmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk7GJfx3EVuv3i3edhAsu2T0ooqbU1Zcxb5X
jb4gymEJUQf7gruSzj8srehrX1SijBig9G2Z0zI/sEbs0RzGHAQbXEGS6R2zHSyY
tFKe2dFz1kGTMli2xJ0U1gttbVTjyORcVtHTVVndBQeOa2IKyaLOFyhi9ADq4wll
cPO68eCAQ8wsy+rQTo7Kyk0Pa+XHCJ/VWF2zgE/eSusbckuCy91sz+NtpQSXYYSE
ePyD+2f3AYEPB8+7GMthRdZ6rntjA7ysVim2x/xRiD5jE6mpn04p3nJ7HU9bquMX
Py3PtuB/gHQmUG9m9pau6IoRGtfcs3hVi8SrrR2mkjGRfLT7vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsBmYwGvvVZwgcMJJ0td6+3lhQJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODI2ZDA1YjItZjRmNy0z
ZWY5LWIyN2QtOWI0MThkY2QwNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUtX33g/4PSk8auGNUrufL8PTYSnbwo+xd9KIyIze2Hag2qxlef2dyq
bUmSVgW1mpVvz/o/nNrUyeUovbotalZMR1uZT5gO3vQu9cJ2p1YD2miBoWZfxwYk
BVYEGS5gf1lRV3r5tTiFwLGNK/GiGb2N9L8in6ElthbW7VmfGn119PEMDoN4BXPG
90rM9Nicz9njWtJ4vzXm6gDV1bxIDHz51OwbyAf2VceL0cpJ0aZAvBYihC31Gv+R
22+3b2pFntVtvQE7gf4NhcbonN8nkLSyAZW55A5w8Au3/edYAdhmQs4Ao0TaiX+G
cLhhRQTrNH7b8MaRrd3IGGr3ExCc8eg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:57 2026 by rpki-client