Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
File:                     06241e00-7903-3050-9775-e4425bd2b4d5.roa (raw, json)
Hash identifier:          3jJUKLIrZK/ckzbIya87qwm+OgmNstErQHyhI+wRZwQ=
Subject key identifier:   67:32:C7:A0:59:4B:CD:9B:BA:D5:81:B1:79:8B:D6:1F:DB:0F:E1:19
Certificate issuer:       /CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
Certificate serial:       010D0C9F4328584F374D1E9A6F4F8F810492AB00
Authority key identifier: 90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     27823
IP address blocks:        66.97.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1e:9a:6f:4f:8f:81:04:92:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=ac6de4de-4719-4d66-8895-990b212b910e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:a4:23:3a:78:69:f4:68:d3:19:c3:f6:e4:
                    5c:0b:6b:34:c6:99:7e:94:96:7f:44:85:40:66:5a:
                    45:53:0f:d6:5e:38:88:b1:17:85:70:de:e6:4e:f7:
                    5c:ee:4a:47:a2:cd:91:8b:7e:fb:bb:8e:7a:76:80:
                    10:e8:6c:00:ea:a0:23:ab:02:5c:95:60:bb:5b:b9:
                    62:e4:8f:6b:8d:c6:74:dd:23:5a:c3:32:75:54:59:
                    65:cd:f0:7f:a8:e3:c2:ad:ba:f6:d2:37:53:14:79:
                    98:31:02:f5:31:06:c4:eb:7c:95:3a:96:10:5d:3e:
                    6f:f8:e9:24:81:d9:b1:9f:35:19:7e:8b:c8:62:ac:
                    19:14:6e:57:66:49:a3:93:a5:77:68:be:e8:45:6b:
                    8b:b3:7d:c1:1d:c5:64:dc:46:c6:7a:65:6c:d3:fa:
                    2e:73:6b:e0:a6:5b:40:5a:2a:c0:8f:41:4e:4f:14:
                    8c:df:f7:9f:68:3b:e9:5e:63:ca:5a:61:56:7b:b0:
                    f9:54:4c:42:49:b8:dd:6d:1a:8e:4e:bb:1c:6d:84:
                    0f:c8:91:82:d7:89:e8:1a:90:59:8d:14:04:ce:4f:
                    b4:f1:eb:85:d2:e7:46:27:ed:9b:21:86:e3:e1:9a:
                    16:8c:23:f7:da:3a:0e:0a:c6:0d:b1:10:04:01:64:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:32:C7:A0:59:4B:CD:9B:BA:D5:81:B1:79:8B:D6:1F:DB:0F:E1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl

            X509v3 Authority Key Identifier:
                keyid:90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:69:c3:b3:49:c2:e5:15:b3:77:8f:c2:e3:50:ec:d7:25:4c:
         76:f5:36:1b:e1:e3:ac:42:d1:9e:6c:0f:3f:bf:d9:16:7f:f9:
         bc:c3:d2:5d:d5:a7:26:e4:d4:6d:bb:3d:88:b9:5d:ba:d9:a9:
         f9:25:5f:96:89:b5:e8:6b:f8:08:71:8d:79:77:32:a0:b3:4f:
         5e:0b:75:ca:aa:19:22:bb:0d:a6:5d:cd:87:a9:06:46:07:12:
         79:b7:cf:2a:fe:ee:48:89:24:a5:77:0e:11:4d:bd:f1:b7:98:
         09:43:ba:d3:4e:f3:20:49:c4:e9:90:1a:60:3c:f2:e9:8a:f2:
         e8:56:47:fe:a1:d0:33:1d:4c:17:74:90:15:ae:e5:e9:ed:08:
         a5:7f:a2:4b:cd:0c:97:a1:9a:81:ca:8d:f5:38:8c:81:69:47:
         8d:5e:45:ed:15:f5:70:2a:39:24:69:46:a4:51:a2:f2:14:e6:
         44:ec:ef:bb:8b:93:a6:5d:4f:e0:61:1b:f3:50:aa:b6:35:a2:
         80:b4:a5:c9:90:33:db:54:86:0c:ad:4a:2b:79:68:7c:a3:07:
         7b:79:9f:dd:40:d5:12:65:49:0c:90:88:7f:c9:e7:47:0b:d1:
         3b:84:51:90:e7:71:f2:ee:bf:49:b5:e6:b8:93:8c:c1:65:87:
         e9:eb:c9:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TR6ab0+PgQSSqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA1YWUzOWYtYzVjNS00NGJmLTk3NzEtYzRhMDEzYjdj
OWQ0MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
YWM2ZGU0ZGUtNDcxOS00ZDY2LTg4OTUtOTkwYjIxMmI5MTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr+kIzp4afRo0xnD9uRcC2s0xpl+lJZ/RIVA
ZlpFUw/WXjiIsReFcN7mTvdc7kpHos2Ri377u456doAQ6GwA6qAjqwJclWC7W7li
5I9rjcZ03SNawzJ1VFllzfB/qOPCrbr20jdTFHmYMQL1MQbE63yVOpYQXT5v+Okk
gdmxnzUZfovIYqwZFG5XZkmjk6V3aL7oRWuLs33BHcVk3EbGemVs0/ouc2vgpltA
WirAj0FOTxSM3/efaDvpXmPKWmFWe7D5VExCSbjdbRqOTrscbYQPyJGC14noGpBZ
jRQEzk+08euF0udGJ+2bIYbj4ZoWjCP32joOCsYNsRAEAWQkHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcyx6BZS82butWBsXmL1h/bD+EZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMDVh
ZTM5Zi1jNWM1LTQ0YmYtOTc3MS1jNGEwMTNiN2M5ZDQvMDYyNDFlMDAtNzkwMy0z
MDUwLTk3NzUtZTQ0MjViZDJiNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzA1YWUzOWYtYzVjNS00NGJmLTk3
NzEtYzRhMDEzYjdjOWQ0L2MwNWFlMzlmLWM1YzUtNDRiZi05NzcxLWM0YTAxM2I3
YzlkNC5jcmwwHwYDVR0jBBgwFoAUkGpFXSoYOZXTNiqcByuzSk5SN88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMDVhZTM5Zi1jNWM1LTQ0YmYtOTc3MS1jNGEw
MTNiN2M5ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZpw7NJwuUVs3ePwuNQ7NclTHb1Nhvh46xC0Z5sDz+/2RZ/+bzD0l3V
pybk1G27PYi5XbrZqfklX5aJtehr+AhxjXl3MqCzT14LdcqqGSK7DaZdzYepBkYH
Enm3zyr+7kiJJKV3DhFNvfG3mAlDutNO8yBJxOmQGmA88umK8uhWR/6h0DMdTBd0
kBWu5entCKV/okvNDJehmoHKjfU4jIFpR41eRe0V9XAqOSRpRqRRovIU5kTs77uL
k6ZdT+BhG/NQqrY1ooC0pcmQM9tUhgytSit5aHyjB3t5n91A1RJlSQyQiH/J50cL
0TuEUZDncfLuv0m15riTjMFlh+nryZ8=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:43:37 2026 by rpki-client