Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/882caee8-ca2e-3c9e-965f-24a7ce0cff51.roa
File:                     882caee8-ca2e-3c9e-965f-24a7ce0cff51.roa (raw, json)
Hash identifier:          o9Eqb7R1yLlpVS9TkS4+13jIPt0BKwZ6XxSFqmW/oYc=
Subject key identifier:   E8:95:D4:14:1D:57:B2:66:A2:B4:42:D4:33:6E:2A:81:9B:49:B9:95
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584FD25C031B41798748CB6606A8
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/882caee8-ca2e-3c9e-965f-24a7ce0cff51.roa
Signing time:             Fri 13 Nov 2026 02:00:14 +0000
ROA not before:           Fri 13 Nov 2026 02:00:14 +0000
ROA not after:            Thu 11 Feb 2027 02:00:14 +0000
asID:                     11404
IP address blocks:        66.235.0.0/18 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d2:5c:03:1b:41:79:87:48:cb:66:06:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Nov 13 02:00:14 2026 GMT
            Not After : Feb 11 02:00:14 2027 GMT
        Subject: CN=692f98c4-7ec7-4d72-b8d0-583406bf47af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:e0:e2:ee:f3:90:7f:c7:8a:48:24:fe:97:
                    66:f8:0a:16:82:10:2a:0b:d6:00:c9:bc:63:a2:5b:
                    0e:18:9a:8e:36:79:92:71:99:01:70:41:0d:42:4f:
                    d7:87:a3:8a:37:e2:03:19:f4:fc:f1:45:f5:6e:5f:
                    5a:a4:26:1f:c7:dc:1a:a1:a0:90:8f:b7:6f:34:a6:
                    c8:3d:30:db:1c:0d:8f:0f:0d:1a:8b:3f:11:b2:56:
                    64:de:8b:42:f9:99:8e:88:d3:3a:f9:44:dd:38:4b:
                    ce:26:eb:95:be:6c:cf:f4:e3:5d:16:e0:74:45:67:
                    9a:a8:bd:80:21:0d:f6:f6:e0:6b:bc:51:a0:ee:36:
                    b0:2d:fe:1c:e1:bc:4a:5e:2b:66:a1:c4:67:3c:da:
                    f7:59:63:c9:7c:61:b5:ba:9d:bb:b7:d5:4d:4d:6c:
                    81:c7:25:3b:d5:fb:15:57:c3:b7:5f:27:68:55:db:
                    b5:c2:97:0d:7c:c9:49:83:7e:88:ca:41:10:50:d5:
                    36:ca:7d:ff:a3:71:95:c0:20:df:65:64:e1:82:5c:
                    22:11:0e:d7:b6:02:16:f5:3f:1f:99:57:88:58:9f:
                    df:84:1a:7f:80:5a:57:b1:ae:82:c2:8a:ad:f5:be:
                    9a:cc:2a:b7:bf:69:1f:71:b5:bd:08:88:44:53:d3:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:D4:14:1D:57:B2:66:A2:B4:42:D4:33:6E:2A:81:9B:49:B9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/882caee8-ca2e-3c9e-965f-24a7ce0cff51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:95:e7:53:7f:98:90:40:1a:38:f1:5f:70:66:80:51:37:55:
         0c:aa:39:5e:a2:35:6a:b2:a0:04:ed:2b:50:ad:c6:1b:5b:da:
         00:55:f4:4e:af:bf:6d:41:44:08:da:a2:cb:56:9f:26:0a:ef:
         98:82:67:80:f3:3e:a5:b3:c2:f0:de:c5:93:4d:a2:9f:18:4c:
         58:79:19:a0:c0:07:26:f0:44:e8:8b:85:df:ab:85:c7:97:00:
         10:2e:a2:62:43:70:7e:e9:f4:bf:9a:d5:fe:07:7e:79:1b:43:
         b5:29:72:32:34:a3:36:8e:55:39:b8:f6:e2:56:89:43:ca:70:
         df:c6:78:65:56:70:c0:7f:9e:24:79:ba:1b:b4:51:9e:9f:4e:
         70:84:6e:f5:3e:98:b9:ed:fd:0f:c5:94:ac:ae:fe:bc:16:fa:
         f3:65:e4:d9:4f:2e:3b:d7:94:90:c8:99:bb:a2:1f:01:f6:19:
         f9:9e:8e:09:ad:c7:60:13:39:11:c4:22:09:59:45:de:7d:e4:
         17:d6:3d:99:d0:32:78:bd:13:d6:53:b3:51:48:0a:b9:61:5e:
         51:8d:97:0a:93:21:d3:58:03:33:b2:a2:b4:aa:a9:f4:b3:c6:
         00:f0:b4:bd:fc:93:21:f6:c2:e6:80:e9:82:7c:a0:d3:bc:85:
         ec:72:48:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SXAMbQXmHSMtmBqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk
NjkyZjk4YzQtN2VjNy00ZDcyLWI4ZDAtNTgzNDA2YmY0N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvLg4u7zkH/Hikgk/pdm+AoWghAqC9YAybxj
olsOGJqONnmScZkBcEENQk/Xh6OKN+IDGfT88UX1bl9apCYfx9waoaCQj7dvNKbI
PTDbHA2PDw0aiz8RslZk3otC+ZmOiNM6+UTdOEvOJuuVvmzP9ONdFuB0RWeaqL2A
IQ329uBrvFGg7jawLf4c4bxKXitmocRnPNr3WWPJfGG1up27t9VNTWyBxyU71fsV
V8O3XydoVdu1wpcNfMlJg36IykEQUNU2yn3/o3GVwCDfZWThglwiEQ7XtgIW9T8f
mVeIWJ/fhBp/gFpXsa6Cwoqt9b6azCq3v2kfcbW9CIhEU9PhxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiV1BQdV7JmorRC1DNuKoGbSbmVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODgyY2FlZTgtY2EyZS0z
YzllLTk2NWYtMjRhN2NlMGNmZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQusAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKV51N/mJBAGjjxX3BmgFE3VQyqOV6iNWqyoATtK1Ctxhtb2gBV9E6v
v21BRAjaostWnyYK75iCZ4DzPqWzwvDexZNNop8YTFh5GaDABybwROiLhd+rhceX
ABAuomJDcH7p9L+a1f4HfnkbQ7UpcjI0ozaOVTm49uJWiUPKcN/GeGVWcMB/niR5
uhu0UZ6fTnCEbvU+mLnt/Q/FlKyu/rwW+vNl5NlPLjvXlJDImbuiHwH2Gfmejgmt
x2ATORHEIglZRd595BfWPZnQMni9E9ZTs1FICrlhXlGNlwqTIdNYAzOyorSqqfSz
xgDwtL38kyH2wuaA6YJ8oNO8hexySM0=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:38:51 2026 by rpki-client