Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99178c21-bf89-38ed-b9b1-5daef80fcf58.roa
File:                     99178c21-bf89-38ed-b9b1-5daef80fcf58.roa (raw, json)
Hash identifier:          J3CnPhFb2FFzLKlRu6zYZC9tJy2eRV83nZFV2xZhQgE=
Subject key identifier:   AC:BC:EA:13:47:3C:F9:72:10:C2:9F:7B:D9:30:E7:1B:70:7D:1A:EE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D386A2D21C4BE49610FF51C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99178c21-bf89-38ed-b9b1-5daef80fcf58.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     395793
IP address blocks:        66.134.82.0/23 maxlen: 24
                          66.134.88.0/23 maxlen: 24
                          66.134.90.0/23 maxlen: 24
                          66.134.92.0/23 maxlen: 24
                          66.134.94.0/23 maxlen: 24
                          66.167.140.0/23 maxlen: 24
                          66.167.142.0/23 maxlen: 24
                          66.167.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:2d:21:c4:be:49:61:0f:f5:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=0dfa2ba6-6bef-485a-819c-24a14e4ae9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:ca:24:c7:ed:0c:16:01:17:da:a8:1e:a4:
                    a4:c9:a8:20:da:e8:31:fd:c5:15:26:e5:cf:94:df:
                    15:08:d4:13:f7:01:e8:1f:e8:53:63:33:c4:8c:a5:
                    e5:45:c1:72:1b:4b:08:ec:fd:62:d6:63:1a:b7:8c:
                    8a:dd:0c:fc:2d:e3:7c:0d:3f:98:9a:44:ee:1b:4a:
                    f5:3e:f6:2c:f6:5e:e9:34:a7:c0:c7:8d:39:d6:2e:
                    95:69:61:06:3a:98:80:db:95:e0:8c:4f:cb:4b:c6:
                    19:b9:2e:d5:bd:29:f8:c9:2a:bd:91:f0:d7:aa:c9:
                    d9:b6:13:55:66:d9:6f:99:bf:05:a9:75:dd:23:48:
                    25:ec:bb:e0:01:15:90:4e:7a:45:41:39:70:b2:dd:
                    d8:86:b9:13:9f:91:68:f4:08:7c:bb:01:20:dd:7b:
                    c7:0e:b5:93:1e:c1:cb:b2:c3:df:f1:ae:2d:39:fb:
                    07:7f:43:1b:a8:a4:db:7a:8a:92:53:52:d4:92:76:
                    76:48:eb:b5:36:7d:76:65:e7:37:8e:5e:3e:41:a2:
                    64:09:5f:0f:8e:5a:db:b7:b6:37:53:fb:94:d9:27:
                    47:b0:3c:79:1d:9a:d9:50:b5:77:0c:9f:f6:e5:bf:
                    53:d4:41:70:81:07:84:5b:14:68:eb:e6:4e:01:f0:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:EA:13:47:3C:F9:72:10:C2:9F:7B:D9:30:E7:1B:70:7D:1A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99178c21-bf89-38ed-b9b1-5daef80fcf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.134.82.0/23
                  66.134.88.0/21
                  66.167.140.0/22
                  66.167.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:af:23:e2:b1:8d:b5:c4:22:53:fa:17:48:bc:63:e5:55:c6:
         ec:c7:bb:11:68:59:6b:dd:3a:41:14:ae:50:8f:22:81:bc:59:
         99:54:e3:47:19:cb:9c:c0:60:77:f8:95:76:9d:ee:0c:4f:24:
         11:38:80:57:b5:6c:82:96:12:5d:5f:08:76:c4:e1:95:fa:f0:
         bb:0d:ff:0e:7d:21:20:ff:47:96:19:90:9c:33:77:21:ec:8a:
         af:63:64:5e:5d:e1:fb:ba:c1:48:fb:ca:92:a1:1f:8d:c3:2c:
         cb:38:6c:96:fb:f3:7c:ed:72:59:f4:51:a8:b5:91:b3:2c:0b:
         81:54:22:f9:0f:95:4b:87:0b:bf:33:f3:bd:96:9f:69:79:3d:
         7f:9f:8b:1e:06:cc:54:6c:50:6b:62:a2:c1:58:25:28:91:28:
         2b:42:63:19:52:03:96:47:ea:cc:b3:4d:d4:7c:14:80:9b:b9:
         73:f6:62:d6:75:1a:fe:59:19:cb:f6:4c:ba:28:6b:7c:dc:89:
         2a:ad:c9:89:18:88:5d:fb:d9:60:2a:b9:0c:e7:19:42:69:b7:
         32:e5:65:e8:d6:91:2a:6d:ec:37:b6:a6:1a:6b:2d:31:e4:f4:
         fa:3b:14:30:63:9e:c6:66:82:73:52:fe:f9:77:fe:27:40:01:
         5a:45:20:bd
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE04ai0hxL5JYQ/1HAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
MGRmYTJiYTYtNmJlZi00ODVhLTgxOWMtMjRhMTRlNGFlOWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TKJMftDBYBF9qoHqSkyagg2ugx/cUVJuXP
lN8VCNQT9wHoH+hTYzPEjKXlRcFyG0sI7P1i1mMat4yK3Qz8LeN8DT+YmkTuG0r1
PvYs9l7pNKfAx4051i6VaWEGOpiA25XgjE/LS8YZuS7VvSn4ySq9kfDXqsnZthNV
Ztlvmb8FqXXdI0gl7LvgARWQTnpFQTlwst3YhrkTn5Fo9Ah8uwEg3XvHDrWTHsHL
ssPf8a4tOfsHf0MbqKTbeoqSU1LUknZ2SOu1Nn12Zec3jl4+QaJkCV8Pjlrbt7Y3
U/uU2SdHsDx5HZrZULV3DJ/25b9T1EFwgQeEWxRo6+ZOAfBXbwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFKy86hNHPPlyEMKfe9kw5xtwfRruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTkxNzhjMjEtYmY4OS0z
OGVkLWI5YjEtNWRhZWY4MGZjZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBQoZSAwQD
QoZYAwQCQqeMAwQBQqfKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALmvI+KxjbXEIlP6F0i8Y+VVxuzHuxFo
WWvdOkEUrlCPIoG8WZlU40cZy5zAYHf4lXad7gxPJBE4gFe1bIKWEl1fCHbE4ZX6
8LsN/w59ISD/R5YZkJwzdyHsiq9jZF5d4fu6wUj7ypKhH43DLMs4bJb783ztcln0
Uai1kbMsC4FUIvkPlUuHC78z872Wn2l5PX+fix4GzFRsUGtiosFYJSiRKCtCYxlS
A5ZH6syzTdR8FICbuXP2YtZ1Gv5ZGcv2TLooa3zciSqtyYkYiF372WAquQznGUJp
tzLlZejWkSpt7De2phprLTHk9Po7FDBjnsZmgnNS/vl3/idAAVpFIL0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:42 2026 by rpki-client