Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
File:                     30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa (raw, json)
Hash identifier:          0NLWlsT0egqi64k8js+8z5OhexOYii+aWtW9ffqM6EE=
Subject key identifier:   06:3F:A8:E5:BB:D6:FC:CD:91:45:44:03:2C:F9:16:D7:14:50:98:08
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584D91C00704D322AFFD534DAC80
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     33185
IP address blocks:        66.187.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:07:04:d3:22:af:fd:53:4d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=89e500a0-2b4f-4830-8066-5dc0b5c66867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:90:54:b5:d2:c2:60:39:85:4b:5e:42:de:
                    a6:a9:2d:a1:e0:35:87:09:b0:4a:85:8d:df:9e:cd:
                    0f:6f:0e:fc:2f:d1:70:8b:43:1e:8c:8b:5d:0c:2f:
                    6e:39:01:9e:c9:3d:79:59:a8:06:21:af:90:91:29:
                    7e:90:84:33:73:75:a0:c2:7e:8b:5a:9d:6e:e9:0b:
                    f5:5f:5e:e1:b5:62:fa:07:27:27:ce:d3:08:8a:16:
                    11:39:2d:04:f9:5d:15:46:cc:d2:5f:00:80:10:b8:
                    0e:d3:cb:f9:a0:2c:3a:64:35:e6:61:d5:d4:6b:91:
                    c8:6a:78:cb:8a:80:2d:52:6f:b8:b6:30:09:6a:8e:
                    6e:7b:f1:82:14:8c:05:21:7c:26:77:09:73:ad:d3:
                    0b:77:97:2b:7f:bb:c9:23:aa:e2:1d:e9:fb:2e:62:
                    e5:41:0d:ea:be:6a:c7:93:fd:ec:b3:8b:a4:a3:b3:
                    f7:c7:71:86:36:f0:da:6e:48:07:3b:4c:24:e1:b9:
                    8f:6f:dd:e4:55:f5:8e:00:e2:eb:04:df:32:b2:c8:
                    69:13:63:41:26:b6:39:91:79:b2:8c:48:81:60:a4:
                    c2:8e:41:7a:b1:aa:85:53:a8:bb:6b:a0:3f:89:f7:
                    99:52:91:ba:a4:4c:00:7c:00:9d:cf:f4:f1:c1:20:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3F:A8:E5:BB:D6:FC:CD:91:45:44:03:2C:F9:16:D7:14:50:98:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:c5:96:18:b0:53:9f:df:b7:3c:3e:7b:b6:43:e1:02:3c:
         df:33:32:b8:28:79:e5:5e:35:72:17:82:df:28:78:07:e3:29:
         75:58:47:78:a2:ca:bd:f1:b4:26:83:96:e5:65:cb:c4:f7:f2:
         f4:54:8b:9f:0f:92:5f:ff:b9:61:a4:1d:d2:60:21:7d:63:52:
         cd:06:17:2f:32:bf:d0:ee:37:ea:ae:48:b1:fe:70:6e:2c:9b:
         3a:be:3e:53:86:11:61:6f:60:e9:a0:33:c4:f0:5b:9e:99:13:
         dc:f5:31:06:29:7c:d9:2c:00:4b:d1:d1:f2:d3:63:88:5e:9f:
         29:98:38:2f:29:7c:f4:b7:92:18:f2:b6:27:0c:17:df:6a:05:
         4e:8e:ff:a6:56:e0:a7:f9:ef:1b:77:a5:03:71:3f:3b:c9:c7:
         30:45:2b:c4:94:f8:d9:19:ad:7d:66:e6:9f:64:6d:00:3b:af:
         3c:56:00:38:15:a5:62:da:c2:a5:72:46:bd:36:7b:15:29:e3:
         a5:1b:df:74:e5:fc:da:a6:29:00:99:aa:8a:a2:a6:c5:77:0f:
         7c:0b:75:24:a2:dc:16:65:00:5d:f8:38:02:2e:0c:a7:f3:a7:
         20:a7:5f:fa:9a:7d:ef:95:95:4e:ae:00:87:d3:76:e4:8e:34:
         3f:f2:a0:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAcE0yKv/VNNrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU1NGEyODAtMjJhMS00NzdjLTk3YmYtZjIzYTdmMzNh
MGMwMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
ODllNTAwYTAtMmI0Zi00ODMwLTgwNjYtNWRjMGI1YzY2ODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlqQVLXSwmA5hUteQt6mqS2h4DWHCbBKhY3f
ns0Pbw78L9Fwi0MejItdDC9uOQGeyT15WagGIa+QkSl+kIQzc3Wgwn6LWp1u6Qv1
X17htWL6BycnztMIihYROS0E+V0VRszSXwCAELgO08v5oCw6ZDXmYdXUa5HIanjL
ioAtUm+4tjAJao5ue/GCFIwFIXwmdwlzrdMLd5crf7vJI6riHen7LmLlQQ3qvmrH
k/3ss4uko7P3x3GGNvDabkgHO0wk4bmPb93kVfWOAOLrBN8ysshpE2NBJrY5kXmy
jEiBYKTCjkF6saqFU6i7a6A/ifeZUpG6pEwAfACdz/TxwSDFPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAY/qOW71vzNkUVEAyz5FtcUUJgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0
YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNhN2YzM2EwYzAvMzBkNmNiZjQtYTRkMS0z
ZWEzLWJlM2QtMDAwODZiYTA0MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzU1NGEyODAtMjJhMS00NzdjLTk3
YmYtZjIzYTdmMzNhMGMwL2M1NTRhMjgwLTIyYTEtNDc3Yy05N2JmLWYyM2E3ZjMz
YTBjMC5jcmwwHwYDVR0jBBgwFoAUvA5Qxgka7vPVyheHhrapUB3cWcEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNh
N2YzM2EwYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmcxZYYsFOf37c8Pnu2Q+ECPN8zMrgoeeVeNXIXgt8oeAfjKXVYR3ii
yr3xtCaDluVly8T38vRUi58Pkl//uWGkHdJgIX1jUs0GFy8yv9DuN+quSLH+cG4s
mzq+PlOGEWFvYOmgM8TwW56ZE9z1MQYpfNksAEvR0fLTY4henymYOC8pfPS3khjy
ticMF99qBU6O/6ZW4Kf57xt3pQNxPzvJxzBFK8SU+NkZrX1m5p9kbQA7rzxWADgV
pWLawqVyRr02exUp46Ub33Tl/NqmKQCZqoqipsV3D3wLdSSi3BZlAF34OAIuDKfz
pyCnX/qafe+VlU6uAIfTduSOND/yoPA=
-----END CERTIFICATE-----
Generated at Tue May 12 21:33:37 2026 by rpki-client