Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa
File:                     4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa (raw, json)
Hash identifier:          c1TWypVFswd2NQuRMSq36RaVGolUW7w9H2KbpnphPoE=
Subject key identifier:   9D:A3:C2:83:D4:DD:25:63:B9:B4:44:BC:22:63:EA:2C:A0:C0:F9:5A
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584EED5203F3F593BC56A5D39D00
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     46562
IP address blocks:        66.115.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:03:f3:f5:93:bc:56:a5:d3:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=ff762b2a-7bc0-42d5-a1fe-00462b02c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:bf:57:94:1f:35:3b:d7:79:df:13:f9:50:
                    1a:b2:6f:ea:a8:80:90:b4:bf:e0:cb:af:fd:e1:6c:
                    ee:fc:7a:b2:92:0a:9a:95:1b:00:95:0c:1b:d9:6e:
                    dd:ea:6c:56:60:7c:b1:b7:2e:41:73:6a:7d:c3:ef:
                    cb:6c:f9:43:03:ef:7a:d7:e4:0b:af:da:31:4c:02:
                    37:0f:80:e3:29:d9:cc:c1:9c:b2:a8:3d:14:e6:84:
                    98:37:b2:31:80:50:a0:aa:75:e2:ca:3e:bf:18:2d:
                    fa:68:89:4c:91:a6:5f:5e:00:79:b9:78:9d:0b:79:
                    54:81:18:bd:e8:32:0e:3f:fe:03:b5:f6:52:2e:01:
                    9f:cf:c3:2b:76:65:74:4e:3c:38:a8:46:6e:36:9f:
                    61:b9:b1:65:69:7f:49:c7:7d:64:79:72:ed:f5:bc:
                    cc:41:4b:6e:d9:4f:bb:5c:4d:79:89:72:e9:e8:16:
                    c4:8f:f1:6c:d2:f7:89:a5:29:93:da:dd:81:02:2c:
                    ec:85:d8:bf:24:c1:f4:2e:42:46:be:b1:1e:92:39:
                    f5:d1:a0:d2:23:81:32:af:8d:16:5e:6f:6a:9d:3e:
                    47:5e:c6:62:fc:39:95:e7:ae:10:0a:a0:7c:68:12:
                    49:e7:59:fe:c4:d3:fd:a7:d2:11:08:0d:07:89:7d:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:C2:83:D4:DD:25:63:B9:B4:44:BC:22:63:EA:2C:A0:C0:F9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:6c:f6:b6:94:ff:3f:17:b1:56:22:c1:bc:60:fa:3b:dc:
         9f:53:d7:11:c9:29:f5:19:ef:4b:c0:89:72:17:bf:6b:4f:7f:
         51:fd:ae:85:f7:47:ea:1f:fb:7c:fa:4c:a4:c7:bf:cb:7e:d9:
         ed:16:d2:51:2f:dd:97:d9:a2:1c:33:e5:df:33:76:bc:26:a3:
         4a:c7:c5:bd:dc:ac:2b:d6:1a:24:81:d5:cb:d3:39:07:95:54:
         83:58:22:06:50:52:53:59:7c:94:bd:f6:54:ae:ab:19:07:37:
         18:25:bd:5a:62:67:50:3b:d4:8a:32:f3:6c:99:55:93:dc:b1:
         c6:49:1e:e8:d1:22:98:f7:55:cf:7e:7e:5e:9b:27:fc:ba:27:
         a2:4e:7c:af:4f:6d:ff:d8:1a:ff:db:11:8d:f9:fe:5d:d8:b8:
         ee:5a:31:f4:b7:42:76:88:d0:6b:6c:6b:a0:7b:2d:fe:fe:08:
         82:e0:11:80:ed:30:59:ef:87:60:b5:59:60:83:d0:b2:ee:4f:
         eb:fc:d7:0a:fc:e8:cf:ad:48:74:55:9c:39:14:20:45:2e:07:
         59:1c:bf:eb:e7:4b:de:5e:3f:ab:68:aa:78:ac:0f:90:1a:fc:
         10:e4:c3:f6:85:e4:62:21:75:50:82:ab:8b:69:00:08:a7:ca:
         75:e9:d9:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgPz9ZO8VqXTnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex
Mjc5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZmY3NjJiMmEtN2JjMC00MmQ1LWExZmUtMDA0NjJiMDJjMzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0S/V5QfNTvXed8T+VAasm/qqICQtL/gy6/9
4Wzu/HqykgqalRsAlQwb2W7d6mxWYHyxty5Bc2p9w+/LbPlDA+961+QLr9oxTAI3
D4DjKdnMwZyyqD0U5oSYN7IxgFCgqnXiyj6/GC36aIlMkaZfXgB5uXidC3lUgRi9
6DIOP/4DtfZSLgGfz8MrdmV0Tjw4qEZuNp9hubFlaX9Jx31keXLt9bzMQUtu2U+7
XE15iXLp6BbEj/Fs0veJpSmT2t2BAizshdi/JMH0LkJGvrEekjn10aDSI4Eyr40W
Xm9qnT5HXsZi/DmV564QCqB8aBJJ51n+xNP9p9IRCA0HiX3N1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2jwoPU3SVjubREvCJj6iygwPlaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy
M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvNGVkYTdlYWEtMTg2Zi0z
ZDJiLWE4ODAtYTQzODJhYjg5OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3
MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh
MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx
YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQnOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8CbPa2lP8/F7FWIsG8YPo73J9T1xHJKfUZ70vAiXIXv2tPf1H9roX3
R+of+3z6TKTHv8t+2e0W0lEv3ZfZohwz5d8zdrwmo0rHxb3crCvWGiSB1cvTOQeV
VINYIgZQUlNZfJS99lSuqxkHNxglvVpiZ1A71Ioy82yZVZPcscZJHujRIpj3Vc9+
fl6bJ/y6J6JOfK9Pbf/YGv/bEY35/l3YuO5aMfS3QnaI0Gtsa6B7Lf7+CILgEYDt
MFnvh2C1WWCD0LLuT+v81wr86M+tSHRVnDkUIEUuB1kcv+vnS95eP6toqnisD5Aa
/BDkw/aF5GIhdVCCq4tpAAinynXp2TI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:35:31 2026 by rpki-client