Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa
File:                     7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa (raw, json)
Hash identifier:          NiSZ9uVm2onepE+OuDFW3VvuWpc2ZfwV+Eg2SOaUBk8=
Subject key identifier:   C3:7D:B8:FC:7A:40:89:C2:03:46:17:F7:3E:4A:38:1D:4F:E8:AF:D9
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584F7E7DCBD52F9913A685B9F1C0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     25899
IP address blocks:        67.59.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:cb:d5:2f:99:13:a6:85:b9:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=60628c63-8498-4966-afba-fa4c84350652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:81:07:ed:ed:87:a6:f2:ef:2f:61:1c:e1:
                    b0:90:e7:f1:3b:69:dc:53:72:5a:32:97:cf:9b:0c:
                    55:86:7c:c6:90:13:cc:4f:ab:56:fc:9e:07:83:df:
                    81:e0:ec:72:40:e1:62:46:e9:88:2c:53:9e:02:fe:
                    9d:6b:bf:c9:fe:61:20:76:07:93:0f:b5:9c:3a:eb:
                    37:bf:95:af:a1:29:ee:3d:65:01:e9:b8:4a:2e:40:
                    71:55:f0:2d:3a:a4:b0:4d:4d:e9:47:80:4d:c9:12:
                    92:62:c0:bc:fb:b1:f3:93:1a:57:61:8c:22:04:01:
                    8f:55:91:68:1e:62:19:19:99:f8:80:33:68:01:30:
                    2e:a3:74:fe:41:2d:e3:1c:7a:a4:26:41:55:82:57:
                    a0:f3:91:69:a2:ce:d3:dd:2f:ff:31:e8:42:13:06:
                    87:c0:5a:3f:5a:10:72:80:9c:4b:09:63:c0:9d:c3:
                    23:3c:18:56:2f:3c:86:8a:ac:95:15:9a:19:46:b3:
                    45:ee:ba:9b:56:29:58:24:9d:45:ce:9a:27:06:1c:
                    5c:dd:aa:3a:9b:42:b6:92:29:a5:7b:f8:af:92:4a:
                    fb:45:75:1d:7c:fb:1d:25:0a:33:03:60:cb:8a:5a:
                    2b:c5:6b:7e:4a:ca:52:04:90:ca:72:58:27:17:b9:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:B8:FC:7A:40:89:C2:03:46:17:F7:3E:4A:38:1D:4F:E8:AF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:63:e4:db:3b:c7:84:12:aa:ca:60:df:e9:a8:6e:68:e0:
         21:88:20:58:f4:44:5e:84:68:fc:09:a4:e7:d8:d0:4f:6e:ed:
         48:5d:5c:50:87:e9:bd:0f:dc:98:34:76:b3:c3:0c:12:46:74:
         58:e3:f6:cf:c1:07:10:f9:8d:29:22:a8:99:30:45:47:72:06:
         4d:4e:f5:bd:6e:4d:a6:8a:1e:2f:3d:d3:16:ab:a6:03:66:eb:
         33:c5:98:be:88:2c:77:6c:02:45:9f:61:28:68:0e:be:55:00:
         3f:07:86:bf:15:11:e4:da:0f:59:a5:a0:be:a5:55:76:b1:a8:
         4c:6f:79:c8:d2:db:56:ec:e0:6c:05:93:44:51:f3:c6:71:11:
         6f:04:49:b2:e2:c2:54:c1:74:66:c9:64:9b:eb:f1:ae:98:15:
         82:ec:2e:bb:de:c6:e6:52:96:c6:e1:56:3c:8d:97:90:9c:4c:
         01:ac:91:90:91:30:1a:af:ef:23:04:d0:89:86:2b:75:f9:8f:
         41:07:06:27:88:12:00:4c:5b:9f:4c:f5:66:17:8f:54:c7:87:
         d5:9f:09:d0:bf:f4:77:ce:af:ec:b4:76:f8:e5:43:99:c7:a0:
         b7:9c:86:d5:b6:e2:d6:48:1f:8a:f7:05:43:f7:a6:25:c5:37:
         bb:23:cb:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcvVL5kTpoW58cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
NjA2MjhjNjMtODQ5OC00OTY2LWFmYmEtZmE0Yzg0MzUwNjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8eBB+3th6by7y9hHOGwkOfxO2ncU3JaMpfP
mwxVhnzGkBPMT6tW/J4Hg9+B4OxyQOFiRumILFOeAv6da7/J/mEgdgeTD7WcOus3
v5WvoSnuPWUB6bhKLkBxVfAtOqSwTU3pR4BNyRKSYsC8+7HzkxpXYYwiBAGPVZFo
HmIZGZn4gDNoATAuo3T+QS3jHHqkJkFVgleg85Fpos7T3S//MehCEwaHwFo/WhBy
gJxLCWPAncMjPBhWLzyGiqyVFZoZRrNF7rqbVilYJJ1FzponBhxc3ao6m0K2kiml
e/ivkkr7RXUdfPsdJQozA2DLilorxWt+SspSBJDKclgnF7mXvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMN9uPx6QInCA0YX9z5KOB1P6K/ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvN2E1ZTNjNzYtNjJjYy0z
ZjcxLTliNDUtY2U1ZWY4NzZlYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAfY+TbO8eEEqrKYN/pqG5o4CGIIFj0RF6EaPwJpOfY0E9u7UhdXFCH
6b0P3Jg0drPDDBJGdFjj9s/BBxD5jSkiqJkwRUdyBk1O9b1uTaaKHi890xarpgNm
6zPFmL6ILHdsAkWfYShoDr5VAD8Hhr8VEeTaD1mloL6lVXaxqExvecjS21bs4GwF
k0RR88ZxEW8ESbLiwlTBdGbJZJvr8a6YFYLsLrvexuZSlsbhVjyNl5CcTAGskZCR
MBqv7yME0ImGK3X5j0EHBieIEgBMW59M9WYXj1THh9WfCdC/9HfOr+y0dvjlQ5nH
oLechtW24tZIH4r3BUP3piXFN7sjy2A=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:24:19 2026 by rpki-client