Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/b470368c-8f5a-3c76-a909-c98cd3caf801.roa
File:                     b470368c-8f5a-3c76-a909-c98cd3caf801.roa (raw, json)
Hash identifier:          DCLlglLI5POByUTM7lN/heegzxkj+xNk+7XRHqQemvc=
Subject key identifier:   46:FF:15:91:5A:1E:BD:54:AF:72:32:30:DC:3D:27:44:08:51:EE:96
Certificate issuer:       /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Certificate serial:       010D0C9F4328584DBA3AF667922EFC6277D3F000
Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/b470368c-8f5a-3c76-a909-c98cd3caf801.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     400427
IP address blocks:        66.33.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f6:67:92:2e:fc:62:77:d3:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=558e588a-8d04-4ec1-95db-b3727377b35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:82:b3:50:ff:6a:6d:cc:9c:03:4e:93:87:
                    3c:c9:47:81:0b:67:19:26:f2:af:1c:fb:70:4d:01:
                    e7:a5:fd:a7:ac:bb:e3:f9:03:8d:5e:96:43:8c:d6:
                    03:a5:98:e1:d8:e8:14:2f:c8:de:60:08:6b:7d:8e:
                    0a:c3:05:08:f1:3a:83:5a:47:89:8d:ef:10:68:e4:
                    1a:cb:f9:06:a1:5f:d0:1a:2d:8b:a1:dc:d8:77:d9:
                    8e:91:7a:39:62:44:ed:ea:6e:29:62:42:ee:1b:7b:
                    60:b0:c7:02:d5:ba:e9:5f:a7:b3:db:a1:d9:73:58:
                    f6:89:2b:5f:a3:19:eb:96:0f:8c:f3:13:28:ed:3d:
                    9f:03:e6:5c:32:ec:10:61:09:7d:9a:37:a9:6a:7f:
                    61:47:41:79:ba:8e:fa:5a:5d:11:45:03:ec:15:29:
                    00:b9:63:92:fc:06:2c:a6:1a:27:bb:af:b3:81:b2:
                    b7:fc:61:7d:72:9b:d3:13:9c:f3:83:84:3b:19:76:
                    ef:19:6a:00:57:26:da:f2:bf:e0:9e:81:92:4c:15:
                    2d:cf:c4:08:f5:e9:fe:dc:de:02:f7:02:bd:6b:a9:
                    0e:59:03:2c:23:6f:a3:b6:4d:c2:68:5e:41:e7:ae:
                    c7:71:75:7d:2d:b0:c5:fb:b1:7f:71:0f:a6:45:8c:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FF:15:91:5A:1E:BD:54:AF:72:32:30:DC:3D:27:44:08:51:EE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/b470368c-8f5a-3c76-a909-c98cd3caf801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:5b:72:46:38:30:e0:78:f0:11:ce:dd:9a:ff:b3:cc:02:
         a5:86:24:24:28:ac:9b:06:14:34:17:03:da:fa:ec:75:5e:89:
         5b:49:c4:e9:d1:0b:31:ae:2d:dd:75:d6:bd:6b:be:7b:f5:0c:
         49:ad:11:09:f4:6d:5a:ab:6e:43:fd:c8:b3:dd:95:b3:61:e7:
         b4:0d:c6:06:31:db:0a:88:c7:82:7b:dc:94:70:0c:f7:65:de:
         94:10:63:a1:58:49:7e:84:ac:33:f3:fb:e4:2c:29:ad:dc:3d:
         92:e0:e1:8e:cd:01:64:91:db:18:3b:2e:d5:d9:28:80:fa:57:
         df:7a:d4:cc:79:5f:7c:d8:13:c9:60:41:92:11:7b:5f:e7:c6:
         48:d7:15:f7:c1:1b:a1:91:ec:87:26:4f:31:d4:29:7a:8f:43:
         12:bc:a4:a9:6a:b0:8a:a6:9c:d4:63:51:d6:2f:14:ca:7a:d3:
         d1:ee:63:50:61:94:f1:93:f7:aa:86:dc:19:0c:7a:09:2b:f9:
         2c:6a:c5:41:79:92:72:5e:60:de:54:49:57:de:a1:16:22:41:
         29:99:f4:73:9b:23:93:8b:55:c4:b9:f8:67:d1:55:0b:d7:1b:
         8d:e3:19:75:4e:31:d8:fe:48:ee:4a:6f:3a:3d:83:c1:9a:6b:
         ac:1d:15:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OvZnki78YnfT8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1
NzhmMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
NTU4ZTU4OGEtOGQwNC00ZWMxLTk1ZGItYjM3MjczNzdiMzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGCs1D/am3MnANOk4c8yUeBC2cZJvKvHPtw
TQHnpf2nrLvj+QONXpZDjNYDpZjh2OgUL8jeYAhrfY4KwwUI8TqDWkeJje8QaOQa
y/kGoV/QGi2LodzYd9mOkXo5YkTt6m4pYkLuG3tgsMcC1brpX6ez26HZc1j2iStf
oxnrlg+M8xMo7T2fA+ZcMuwQYQl9mjepan9hR0F5uo76Wl0RRQPsFSkAuWOS/AYs
phonu6+zgbK3/GF9cpvTE5zzg4Q7GXbvGWoAVyba8r/gnoGSTBUtz8QI9en+3N4C
9wK9a6kOWQMsI2+jtk3CaF5B567HcXV9LbDF+7F/cQ+mRYw45QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEb/FZFaHr1Ur3IyMNw9J0QIUe6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3
YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvYjQ3MDM2OGMtOGY1YS0z
Yzc2LWE5MDktYzk4Y2QzY2FmODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4
MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl
NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm
ZDY0ZTU3OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVbW3JGODDgePARzt2a/7PMAqWGJCQorJsGFDQXA9r67HVeiVtJxOnR
CzGuLd111r1rvnv1DEmtEQn0bVqrbkP9yLPdlbNh57QNxgYx2wqIx4J73JRwDPdl
3pQQY6FYSX6ErDPz++QsKa3cPZLg4Y7NAWSR2xg7LtXZKID6V9961Mx5X3zYE8lg
QZIRe1/nxkjXFffBG6GR7IcmTzHUKXqPQxK8pKlqsIqmnNRjUdYvFMp609HuY1Bh
lPGT96qG3BkMegkr+SxqxUF5knJeYN5USVfeoRYiQSmZ9HObI5OLVcS5+GfRVQvX
G43jGXVOMdj+SO5Kbzo9g8Gaa6wdFbY=
-----END CERTIFICATE-----
Generated at Wed May 13 06:14:29 2026 by rpki-client