Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa
File:                     49d8c248-3e47-313c-9e44-7d968df76125.roa (raw, json)
Hash identifier:          DAAg3vS+3cBwOO1hwZ/XxMYUSIBiiLM6Bm4b/KIbeYU=
Subject key identifier:   55:3B:29:89:59:75:C0:B5:23:06:0C:D8:B3:13:0D:4D:72:0B:F5:73
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584F4989D98BE5106636EA4C5680
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        66.1.0.0/16 maxlen: 24
                          66.87.0.0/16 maxlen: 24
                          66.233.0.0/16 maxlen: 24
                          67.215.108.0/22 maxlen: 24
                          72.6.0.0/15 maxlen: 24
                          72.57.32.0/19 maxlen: 24
                          96.26.0.0/16 maxlen: 24
                          142.255.128.0/18 maxlen: 24
                          144.227.0.0/16 maxlen: 24
                          144.231.0.0/16 maxlen: 24
                          198.57.16.0/21 maxlen: 24
                          198.57.24.0/23 maxlen: 24
                          207.52.0.0/16 maxlen: 24
                          207.167.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d9:8b:e5:10:66:36:ea:4c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03ff9560-4945-4922-9b1a-bf76f32de521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:7b:46:ca:9f:e7:b0:87:a2:d6:64:06:a7:
                    c4:5e:39:2d:94:e9:57:55:ba:fc:94:23:69:84:18:
                    0d:58:e5:31:0c:e0:f9:2b:6f:d2:0c:f5:a4:fb:36:
                    8c:02:6d:64:52:49:86:3f:b9:b9:3c:73:be:41:3d:
                    cb:c5:51:40:33:7a:90:d6:d9:01:83:7c:bc:fc:0c:
                    71:e8:9a:09:86:f4:8b:41:eb:1f:13:ad:50:f4:11:
                    f3:c2:9a:8d:80:f9:fa:59:fd:b3:57:38:8e:bb:4f:
                    d8:3b:61:c1:a2:bc:8f:97:af:94:55:d2:f0:9d:45:
                    75:45:5e:61:70:bd:b0:12:b9:0d:29:9b:9c:ad:0a:
                    44:28:14:1c:02:dc:68:5f:9e:54:1d:dc:5e:ac:88:
                    11:ce:1e:1b:bc:8e:17:50:1d:e7:19:d8:2d:36:2e:
                    12:1b:63:0b:f6:7a:bc:08:b1:77:6a:79:5f:4f:0c:
                    07:40:0d:13:4d:cb:86:f2:6c:10:6d:92:ce:a5:10:
                    72:27:4e:57:bf:a5:60:a8:09:bd:a8:55:b2:fd:06:
                    db:98:4c:c2:79:3e:e8:25:ab:2e:33:11:ca:55:2c:
                    90:6b:fc:d8:72:b6:8c:e8:70:2c:be:3d:7e:9a:01:
                    d5:12:5b:60:1e:19:2f:cb:dd:87:e1:50:35:bd:b4:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3B:29:89:59:75:C0:B5:23:06:0C:D8:B3:13:0D:4D:72:0B:F5:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.1.0.0/16
                  66.87.0.0/16
                  66.233.0.0/16
                  67.215.108.0/22
                  72.6.0.0/15
                  72.57.32.0/19
                  96.26.0.0/16
                  142.255.128.0/18
                  144.227.0.0/16
                  144.231.0.0/16
                  198.57.16.0-198.57.25.255
                  207.52.0.0/16
                  207.167.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:91:f6:ae:18:ed:01:1b:10:6b:60:54:3a:b0:74:6c:28:
         e7:e0:5c:69:c9:c9:a3:e4:46:f2:03:5e:23:b3:dd:9b:57:40:
         79:1d:88:f2:b4:aa:51:52:f7:45:e1:78:9e:00:44:7e:c4:e9:
         fb:9f:25:c9:19:36:fe:81:47:7a:d4:d3:2f:12:09:8a:fb:5c:
         4d:ea:27:ae:a0:9c:82:bf:36:33:7e:98:81:bd:47:95:a3:61:
         5d:b0:85:36:bd:a6:12:6a:3a:8f:8b:4b:f7:1a:42:a5:6a:43:
         58:93:2c:5a:ad:7d:9c:d2:53:b7:c7:0a:d7:1d:e1:73:0f:1b:
         14:6d:72:df:9d:23:fb:42:a1:be:43:53:1b:ef:02:a6:6a:c5:
         8f:dd:e2:a0:1b:64:53:27:37:09:3a:d4:43:38:cb:34:66:e2:
         29:dc:64:cb:6b:26:db:15:10:4f:ef:69:28:9b:89:07:bf:8c:
         24:77:0b:1f:c2:13:c5:d2:29:57:fa:c3:98:1f:5d:6c:69:80:
         05:07:11:78:c1:a6:57:61:cc:cd:a7:78:d9:da:be:fe:a5:e8:
         68:e8:60:e4:e2:e6:0b:54:d4:0e:98:d0:d5:c7:d7:44:fc:23:
         9e:bc:c6:44:ba:b8:ed:4c:68:36:f9:9d:02:b4:38:a0:94:4b:
         1a:d4:44:7f
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE9JidmL5RBmNupMVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDNmZjk1NjAtNDk0NS00OTIyLTliMWEtYmY3NmYzMmRlNTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix97Rsqf57CHotZkBqfEXjktlOlXVbr8lCNp
hBgNWOUxDOD5K2/SDPWk+zaMAm1kUkmGP7m5PHO+QT3LxVFAM3qQ1tkBg3y8/Axx
6JoJhvSLQesfE61Q9BHzwpqNgPn6Wf2zVziOu0/YO2HBoryPl6+UVdLwnUV1RV5h
cL2wErkNKZucrQpEKBQcAtxoX55UHdxerIgRzh4bvI4XUB3nGdgtNi4SG2ML9nq8
CLF3anlfTwwHQA0TTcuG8mwQbZLOpRByJ05Xv6VgqAm9qFWy/QbbmEzCeT7oJasu
MxHKVSyQa/zYcraM6HAsvj1+mgHVEltgHhkvy92H4VA1vbR5zQIDAQABo4IDnTCC
A5kwHQYDVR0OBBYEFFU7KYlZdcC1IwYM2LMTDU1yC/VzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvNDlkOGMyNDgtM2U0Ny0z
MTNjLTllNDQtN2Q5NjhkZjc2MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwMAQgEDAwBC
VwMDAELpAwQCQ9dsAwMBSAYDBAVIOSADAwBgGgMEBo7/gAMDAJDjAwMAkOcwDAME
BMY5EAMEAcY5GAMDAM80AwQFz6egMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACiLkfauGO0BGxBrYFQ6sHRs
KOfgXGnJyaPkRvIDXiOz3ZtXQHkdiPK0qlFS90XheJ4ARH7E6fufJckZNv6BR3rU
0y8SCYr7XE3qJ66gnIK/NjN+mIG9R5WjYV2whTa9phJqOo+LS/caQqVqQ1iTLFqt
fZzSU7fHCtcd4XMPGxRtct+dI/tCob5DUxvvAqZqxY/d4qAbZFMnNwk61EM4yzRm
4incZMtrJtsVEE/vaSibiQe/jCR3Cx/CE8XSKVf6w5gfXWxpgAUHEXjBpldhzM2n
eNnavv6l6GjoYOTi5gtU1A6Y0NXH10T8I568xkS6uO1MaDb5nQK0OKCUSxrURH8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:43:46 2026 by rpki-client