Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/1832dc00-692f-31ec-903c-4015e3266968.roa
File:                     1832dc00-692f-31ec-903c-4015e3266968.roa (raw, json)
Hash identifier:          jCM0FJV6x9I+3dpcgOpHLJl5O0XjdBY2VQiIrDTYlfY=
Subject key identifier:   35:A6:64:09:68:E5:53:AA:51:CF:4D:D0:77:F4:28:C4:90:E8:EA:36
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584E3A2F3501D62AA65EC47E3D00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/1832dc00-692f-31ec-903c-4015e3266968.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     395761
IP address blocks:        66.185.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:35:01:d6:2a:a6:5e:c4:7e:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=5ae9076e-5d0c-44f0-9c50-399fdc304799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:8d:12:fe:15:ad:a1:e7:45:92:8e:fa:54:
                    e2:6c:00:45:6b:52:fd:89:77:e7:cf:85:4f:91:ac:
                    44:5e:19:30:82:50:92:07:61:32:76:b7:e6:0c:34:
                    9b:83:f1:66:f5:cc:98:6b:a1:0f:9f:db:f3:a8:6b:
                    79:eb:9c:4b:bb:72:4a:25:fd:96:2c:2a:a8:b9:ae:
                    bd:ba:7f:de:4d:61:01:90:85:72:97:5a:f8:17:cf:
                    60:44:c3:e1:07:9f:cb:1f:54:67:77:94:ad:c7:8b:
                    70:ae:f8:b0:10:a0:46:bb:28:ef:f8:cb:2a:a1:d1:
                    08:15:87:0f:b9:8b:a6:b2:5b:a9:be:c7:58:59:dc:
                    a7:99:a9:67:20:5f:9d:22:36:82:bf:2b:a1:1e:5b:
                    29:35:5c:47:2b:56:b9:e6:97:fb:fb:97:17:64:17:
                    8c:7c:1a:e4:dc:a9:e0:9f:c4:13:8f:64:aa:63:24:
                    0a:37:b2:72:33:c2:04:0d:f9:bc:ac:2d:9a:f1:0d:
                    9c:c2:d9:ea:f1:4b:9c:e8:c4:54:25:99:35:7b:ac:
                    ee:77:ea:9c:a0:07:db:09:5d:79:d8:a5:85:d5:85:
                    69:2f:03:ab:f4:c9:8f:4f:af:b5:9a:5c:95:7e:87:
                    12:7a:a4:4d:8d:be:75:54:17:58:b5:ff:a4:c8:56:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:64:09:68:E5:53:AA:51:CF:4D:D0:77:F4:28:C4:90:E8:EA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/1832dc00-692f-31ec-903c-4015e3266968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:19:50:88:20:4c:c0:74:68:a4:34:f2:b0:81:c1:30:c9:
         74:b8:d1:6f:55:ea:9a:b6:2b:42:73:e1:81:5f:0b:6f:54:8a:
         e0:be:7c:92:21:51:ea:22:d2:e9:7a:ad:91:63:6d:5e:3a:d2:
         7c:fd:df:36:1a:81:21:74:c2:9e:68:a0:d2:02:18:05:70:9a:
         e7:03:11:8a:36:6e:33:69:ec:d5:f5:35:4a:7a:6b:6a:6e:5d:
         04:c5:ac:47:43:92:63:ef:34:fe:d3:18:50:84:80:b2:93:82:
         03:6d:71:d8:34:b1:8c:93:bd:dc:61:53:89:b9:6d:b4:1a:e9:
         9b:2a:47:b3:18:8c:bb:6b:e5:1c:5f:f4:ea:d1:ba:7f:5b:80:
         93:a0:28:8e:c1:d0:01:bf:a4:6c:65:ae:f3:60:d7:55:5a:87:
         5d:b0:7a:48:fe:ce:a5:4b:eb:16:74:3a:f3:03:0a:65:02:57:
         83:48:8b:f0:d1:5b:e6:54:42:87:da:05:e0:75:85:44:e6:0a:
         ec:be:f6:fd:ef:eb:26:1e:ac:ae:7c:49:43:16:65:86:e3:4e:
         06:a3:c3:06:a6:09:7d:7c:df:07:1a:a7:c1:7b:62:87:86:a8:
         5d:0a:5e:2b:24:90:05:cf:34:49:eb:05:91:fb:9a:33:28:78:
         96:91:43:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LzUB1iqmXsR+PQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NWFlOTA3NmUtNWQwYy00NGYwLTljNTAtMzk5ZmRjMzA0Nzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkCNEv4VraHnRZKO+lTibABFa1L9iXfnz4VP
kaxEXhkwglCSB2EydrfmDDSbg/Fm9cyYa6EPn9vzqGt565xLu3JKJf2WLCqoua69
un/eTWEBkIVyl1r4F89gRMPhB5/LH1Rnd5Stx4twrviwEKBGuyjv+MsqodEIFYcP
uYumslupvsdYWdynmalnIF+dIjaCvyuhHlspNVxHK1a55pf7+5cXZBeMfBrk3Kng
n8QTj2SqYyQKN7JyM8IEDfm8rC2a8Q2cwtnq8Uuc6MRUJZk1e6zud+qcoAfbCV15
2KWF1YVpLwOr9MmPT6+1mlyVfocSeqRNjb51VBdYtf+kyFaQ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWmZAlo5VOqUc9N0Hf0KMSQ6Oo2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMTgzMmRjMDAtNjkyZi0z
MWVjLTkwM2MtNDAxNWUzMjY2OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrkwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDVGVCIIEzAdGikNPKwgcEwyXS40W9V6pq2K0Jz4YFfC29UiuC+fJIh
Ueoi0ul6rZFjbV460nz93zYagSF0wp5ooNICGAVwmucDEYo2bjNp7NX1NUp6a2pu
XQTFrEdDkmPvNP7TGFCEgLKTggNtcdg0sYyTvdxhU4m5bbQa6ZsqR7MYjLtr5Rxf
9OrRun9bgJOgKI7B0AG/pGxlrvNg11Vah12wekj+zqVL6xZ0OvMDCmUCV4NIi/DR
W+ZUQofaBeB1hUTmCuy+9v3v6yYerK58SUMWZYbjTgajwwamCX183wcap8F7YoeG
qF0KXiskkAXPNEnrBZH7mjMoeJaRQxE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:43 2026 by rpki-client