Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/f633a4b7-9ca3-35eb-a6b3-786ef31d85c7.roa
File:                     f633a4b7-9ca3-35eb-a6b3-786ef31d85c7.roa (raw, json)
Hash identifier:          /C/fJCLBBINW/+gzoW7ZaN9nKZN1zpwT+249WkEBpJU=
Subject key identifier:   39:45:3B:03:A5:A6:7E:F8:F8:B2:26:09:5C:81:93:AF:83:3B:C2:B8
Certificate issuer:       /CN=37dc621b-43bd-4430-ba1e-586259c6b2bd
Certificate serial:       010D0C9F4328584D186CFBCD5CB829C0D49ED500
Authority key identifier: A5:C4:7D:2F:FE:21:40:C4:E6:56:49:96:93:35:EB:93:77:17:F0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/f633a4b7-9ca3-35eb-a6b3-786ef31d85c7.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     13335
IP address blocks:        66.203.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/37dc621b-43bd-4430-ba1e-586259c6b2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/37dc621b-43bd-4430-ba1e-586259c6b2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:fb:cd:5c:b8:29:c0:d4:9e:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dc621b-43bd-4430-ba1e-586259c6b2bd
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=54ef75a3-385a-48ca-95ec-c1674b77c3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:fc:64:25:f7:2c:f1:14:9a:8b:df:bf:ec:
                    f5:78:00:24:89:9c:f1:d7:84:55:f0:6d:be:4c:8f:
                    d3:39:e1:c8:ee:f0:ae:8c:d7:a1:76:25:40:52:a5:
                    a9:20:78:47:cd:f4:f3:43:50:af:d1:65:cd:2e:6c:
                    aa:2a:a3:b8:cb:6d:c0:35:6c:8f:55:61:7e:a8:6e:
                    96:78:70:c5:dd:6f:de:bc:23:d6:64:06:7b:78:a1:
                    50:27:d6:4b:fb:2e:81:33:d8:08:60:00:97:08:07:
                    9f:b2:56:a7:53:f3:f6:c6:f7:69:c7:d0:fb:13:8c:
                    f5:c3:6a:8f:1e:05:65:2a:28:8d:e0:f7:ba:ae:32:
                    99:c8:14:7a:bd:5b:f8:e4:14:c4:a6:b2:bf:cd:94:
                    b5:ec:c9:cd:f8:1f:3c:b1:df:d9:0c:dc:34:b9:80:
                    b7:43:bc:dc:d1:4d:f1:ce:60:2a:46:9d:af:b5:aa:
                    74:48:4d:1b:f9:8e:f5:d3:6b:66:36:d5:fb:24:0a:
                    d6:fe:86:df:f6:8f:7d:b9:90:70:2d:66:9f:d3:c2:
                    0a:54:3b:a1:53:42:2d:27:68:a9:9e:69:f3:0e:00:
                    73:2b:fe:cc:a3:73:bd:17:94:c2:08:44:b3:f8:c4:
                    61:f3:2e:b4:03:b0:74:c1:0f:ea:6f:4b:3d:53:52:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:3B:03:A5:A6:7E:F8:F8:B2:26:09:5C:81:93:AF:83:3B:C2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/f633a4b7-9ca3-35eb-a6b3-786ef31d85c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/37dc621b-43bd-4430-ba1e-586259c6b2bd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:C4:7D:2F:FE:21:40:C4:E6:56:49:96:93:35:EB:93:77:17:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:6f:5b:fb:52:11:33:2e:f8:fb:06:e0:52:86:1a:88:88:
         3e:1c:f1:3a:48:50:75:27:d5:64:35:6b:d4:5d:2a:32:65:bb:
         dc:ab:7d:67:ea:80:8a:f5:e6:8e:c1:80:ff:76:6c:fb:08:58:
         12:dd:be:6b:2b:90:15:ed:6d:2d:a9:71:46:e5:c8:52:55:9e:
         59:57:4f:03:09:67:0a:e3:db:90:53:4a:a1:e3:1e:16:9f:28:
         69:27:98:68:7e:47:66:f6:48:98:54:8c:5c:1c:8d:b2:e1:36:
         af:23:3b:a7:11:ce:1c:e7:be:2d:ea:7e:c6:fc:e3:fb:ac:fc:
         6d:de:52:42:ca:a6:62:10:7c:fb:d4:6b:f6:1c:5b:a6:0c:86:
         82:3d:9d:a3:a4:a3:86:b0:f8:79:52:6a:e9:bb:6c:b0:86:6c:
         db:eb:03:b9:35:b4:0d:1b:dc:33:a0:ba:94:0e:c2:c7:91:f1:
         71:9e:cd:51:ff:4f:6f:16:15:fa:f4:ac:1d:89:c8:7c:ae:61:
         d3:0e:a7:53:5b:35:24:5d:54:f7:da:43:e8:3c:60:fc:eb:2b:
         c6:f8:fb:21:90:f4:5a:3a:78:4f:cf:be:31:6d:f2:d3:0f:ac:
         7d:c8:8d:c4:9b:8e:50:db:70:ee:bb:94:97:f9:8a:bc:5d:d5:
         30:83:c9:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0YbPvNXLgpwNSe1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkYzYyMWItNDNiZC00NDMwLWJhMWUtNTg2MjU5YzZi
MmJkMB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk
NTRlZjc1YTMtMzg1YS00OGNhLTk1ZWMtYzE2NzRiNzdjM2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWL8ZCX3LPEUmovfv+z1eAAkiZzx14RV8G2+
TI/TOeHI7vCujNehdiVAUqWpIHhHzfTzQ1Cv0WXNLmyqKqO4y23ANWyPVWF+qG6W
eHDF3W/evCPWZAZ7eKFQJ9ZL+y6BM9gIYACXCAefslanU/P2xvdpx9D7E4z1w2qP
HgVlKiiN4Pe6rjKZyBR6vVv45BTEprK/zZS17MnN+B88sd/ZDNw0uYC3Q7zc0U3x
zmAqRp2vtap0SE0b+Y7102tmNtX7JArW/obf9o99uZBwLWaf08IKVDuhU0ItJ2ip
nmnzDgBzK/7Mo3O9F5TCCESz+MRh8y60A7B0wQ/qb0s9U1KZ4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlFOwOlpn74+LImCVyBk6+DO8K4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zN2Rj
NjIxYi00M2JkLTQ0MzAtYmExZS01ODYyNTljNmIyYmQvZjYzM2E0YjctOWNhMy0z
NWViLWE2YjMtNzg2ZWYzMWQ4NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzdkYzYyMWItNDNiZC00NDMwLWJh
MWUtNTg2MjU5YzZiMmJkLzM3ZGM2MjFiLTQzYmQtNDQzMC1iYTFlLTU4NjI1OWM2
YjJiZC5jcmwwHwYDVR0jBBgwFoAUpcR9L/4hQMTmVkmWkzXrk3cX8AgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8zN2RjNjIxYi00M2JkLTQ0MzAtYmExZS01ODYy
NTljNmIyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsv5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLpb1v7UhEzLvj7BuBShhqIiD4c8TpIUHUn1WQ1a9RdKjJlu9yrfWfq
gIr15o7BgP92bPsIWBLdvmsrkBXtbS2pcUblyFJVnllXTwMJZwrj25BTSqHjHhaf
KGknmGh+R2b2SJhUjFwcjbLhNq8jO6cRzhznvi3qfsb84/us/G3eUkLKpmIQfPvU
a/YcW6YMhoI9naOko4aw+HlSaum7bLCGbNvrA7k1tA0b3DOgupQOwseR8XGezVH/
T28WFfr0rB2JyHyuYdMOp1NbNSRdVPfaQ+g8YPzrK8b4+yGQ9Fo6eE/PvjFt8tMP
rH3IjcSbjlDbcO67lJf5irxd1TCDyUM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:27 2026 by rpki-client