Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/e9a72a96-2956-3e57-bccf-68af4aef7e21.roa
File:                     e9a72a96-2956-3e57-bccf-68af4aef7e21.roa (raw, json)
Hash identifier:          Pj3TfjzLiCNQvwWG+oJw8v87WEIcZ11igHXEMtdhvSs=
Subject key identifier:   D2:30:7C:67:35:84:46:53:B8:9C:74:F9:3D:8D:81:5B:E1:3C:4E:8B
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584E9BE51CD6B70B3F82C668BBC0
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/e9a72a96-2956-3e57-bccf-68af4aef7e21.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396032
IP address blocks:        66.114.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1c:d6:b7:0b:3f:82:c6:68:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=a1c6ef32-a48a-4607-bd9f-99bc5dd80f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:4e:86:78:9a:01:7a:64:56:31:e4:c1:e7:
                    96:52:12:2a:45:22:31:72:ff:9c:38:07:6b:e9:5e:
                    ee:41:8a:67:c6:e5:ea:e0:2e:91:8a:00:a4:6d:12:
                    da:5c:99:e5:e2:22:9e:f8:85:ae:56:8f:73:56:57:
                    3b:9d:08:99:16:86:6f:d5:20:4c:ae:de:b7:6c:c1:
                    42:e2:5c:88:b7:ef:ee:62:ea:c4:32:4e:ef:c7:76:
                    7b:4b:38:2e:16:30:8f:ba:0a:31:95:7e:f3:01:f7:
                    e4:67:69:50:22:d6:98:48:8f:b9:28:dc:05:a8:cb:
                    50:c9:19:55:86:f5:52:22:4d:0e:ae:bd:c7:aa:1e:
                    ba:cf:cf:86:cf:27:27:9e:5c:9b:b3:5b:7e:cc:e5:
                    d0:e7:24:63:e5:19:d4:fd:de:6b:21:40:ef:67:f2:
                    7e:da:bc:1f:cc:03:b1:66:ff:ed:df:6b:64:88:d2:
                    86:68:3c:4a:cd:b8:47:a4:b9:29:aa:5d:74:85:57:
                    6c:c3:4a:ed:48:b7:5c:db:a0:3b:33:08:6a:47:9c:
                    78:32:b4:fb:79:97:b4:6c:a9:f4:c5:a9:6b:b1:53:
                    91:bc:2d:4c:6f:49:4f:b3:d7:ef:76:ea:b3:2f:63:
                    17:4a:b1:55:4a:53:2b:c0:8d:4d:f8:b7:6a:68:d8:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:7C:67:35:84:46:53:B8:9C:74:F9:3D:8D:81:5B:E1:3C:4E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/e9a72a96-2956-3e57-bccf-68af4aef7e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:3c:18:2c:9f:6b:4c:19:15:0c:b8:1f:62:a8:ea:06:4e:aa:
         c2:71:4d:4f:27:16:b3:9c:c0:e9:28:e6:f6:e5:7e:78:b3:bb:
         04:f9:ee:e0:c8:2b:9d:47:8f:d7:05:da:b4:9d:a0:9f:da:16:
         56:31:2d:2a:be:69:8c:7f:20:15:18:fb:20:9c:9e:87:1d:48:
         6d:d3:73:66:24:fd:52:72:a9:77:75:54:62:a9:38:61:78:af:
         fb:e3:17:c9:dc:b2:58:3f:74:57:2b:2a:0c:ce:88:33:c0:fc:
         1d:06:c6:b6:e1:d8:cb:ee:73:b5:d2:23:17:90:b5:cc:eb:4c:
         60:40:f7:79:a2:b4:bd:55:ea:2a:bf:3c:e8:71:49:05:c1:32:
         c2:74:ce:33:c4:61:d6:ed:47:73:1b:19:c8:89:1c:9f:59:06:
         3e:96:11:a1:a0:85:19:0f:5f:6c:81:32:41:ba:c9:85:eb:a8:
         e7:1e:22:4b:ac:43:17:e5:57:7e:0b:00:60:00:75:19:e6:b2:
         d9:54:55:11:e5:13:36:38:c4:8b:4f:70:22:7b:e2:bd:90:6a:
         40:6f:6b:d3:d1:97:d7:02:8e:d4:58:4a:11:02:73:dd:30:92:
         ed:e6:ab:c8:2e:1d:3c:80:09:92:4c:fe:ff:3d:63:79:e2:59:
         13:35:c5:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RzWtws/gsZou8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz
YzE2MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
YTFjNmVmMzItYTQ4YS00NjA3LWJkOWYtOTliYzVkZDgwZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xxOhniaAXpkVjHkweeWUhIqRSIxcv+cOAdr
6V7uQYpnxuXq4C6RigCkbRLaXJnl4iKe+IWuVo9zVlc7nQiZFoZv1SBMrt63bMFC
4lyIt+/uYurEMk7vx3Z7SzguFjCPugoxlX7zAffkZ2lQItaYSI+5KNwFqMtQyRlV
hvVSIk0Orr3Hqh66z8+Gzycnnlybs1t+zOXQ5yRj5RnU/d5rIUDvZ/J+2rwfzAOx
Zv/t32tkiNKGaDxKzbhHpLkpql10hVdsw0rtSLdc26A7MwhqR5x4MrT7eZe0bKn0
xalrsVORvC1Mb0lPs9fvduqzL2MXSrFVSlMrwI1N+LdqaNik6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNIwfGc1hEZTuJx0+T2NgVvhPE6LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz
ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvZTlhNzJhOTYtMjk1Ni0z
ZTU3LWJjY2YtNjhhZjRhZWY3ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3
MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz
M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2
ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnKeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALo8GCyfa0wZFQy4H2Ko6gZOqsJxTU8nFrOcwOko5vblfnizuwT57uDI
K51Hj9cF2rSdoJ/aFlYxLSq+aYx/IBUY+yCcnocdSG3Tc2Yk/VJyqXd1VGKpOGF4
r/vjF8ncslg/dFcrKgzOiDPA/B0Gxrbh2Mvuc7XSIxeQtczrTGBA93mitL1V6iq/
POhxSQXBMsJ0zjPEYdbtR3MbGciJHJ9ZBj6WEaGghRkPX2yBMkG6yYXrqOceIkus
QxflV34LAGAAdRnmstlUVRHlEzY4xItPcCJ74r2QakBva9PRl9cCjtRYShECc90w
ku3mq8guHTyACZJM/v89Y3niWRM1xWw=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:43 2026 by rpki-client