Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866/594936e5-8d42-38ef-880b-6a82a91cd6dd.roa
File:                     594936e5-8d42-38ef-880b-6a82a91cd6dd.roa (raw, json)
Hash identifier:          YbX49att3Vrc5vtoaxR3zFQqkDwfbyk6yjIWSpcNwMc=
Subject key identifier:   B1:6C:20:D4:70:FE:9D:1D:C2:13:83:C1:81:11:95:6C:4C:05:7D:4A
Certificate issuer:       /CN=d02adff9-030b-4b4b-a8fb-f0e61c553866
Certificate serial:       010D0C9F4328584E2F0453398A214E9CF708BE80
Authority key identifier: AE:0E:BF:A5:46:C6:C7:98:59:63:0F:2E:28:9F:79:E5:64:FB:62:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866/594936e5-8d42-38ef-880b-6a82a91cd6dd.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     402253
IP address blocks:        66.198.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866/d02adff9-030b-4b4b-a8fb-f0e61c553866.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866/d02adff9-030b-4b4b-a8fb-f0e61c553866.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:53:39:8a:21:4e:9c:f7:08:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02adff9-030b-4b4b-a8fb-f0e61c553866
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=92057fe0-2899-4ac2-833f-5ae62b0b78d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:99:94:b3:7d:70:0b:66:01:77:18:99:d2:
                    4c:75:d0:ee:9e:29:73:3c:30:c2:ac:88:53:2c:92:
                    f0:7c:b0:72:3f:39:6f:b6:1f:4c:78:97:2f:44:7b:
                    fc:95:e9:56:3d:e4:a1:19:73:cc:f8:b4:ef:8e:e4:
                    87:25:da:20:13:71:4f:40:42:08:80:df:55:f2:47:
                    41:90:a2:47:9e:b1:98:20:ea:d8:99:3f:4f:0c:b2:
                    ba:3f:26:0f:16:bc:3c:90:cf:c7:a7:ee:ed:74:80:
                    1b:ed:5e:62:e3:8d:a6:9c:51:7b:c2:88:47:e2:31:
                    c5:38:37:e7:25:cc:81:eb:9d:f5:62:4c:10:20:8b:
                    82:a7:da:c8:ff:5f:1d:a3:73:2b:c2:af:8a:41:fe:
                    0f:32:dc:19:15:0c:68:41:18:dc:e7:c3:4f:51:d7:
                    b9:d2:db:d6:f7:66:b6:17:29:ac:3c:55:9b:e1:19:
                    fa:ec:8e:46:3f:e2:55:64:c2:17:cd:16:e2:4c:69:
                    66:95:87:a9:a2:91:53:cf:44:82:f9:c9:da:3a:83:
                    9a:15:a3:60:22:ec:35:b9:77:ae:9f:cb:a3:36:65:
                    03:f5:f5:42:4b:1c:91:71:3d:3d:aa:76:6c:29:83:
                    48:ec:1f:d1:9f:ae:15:b7:d4:39:84:62:a6:81:d2:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6C:20:D4:70:FE:9D:1D:C2:13:83:C1:81:11:95:6C:4C:05:7D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866/594936e5-8d42-38ef-880b-6a82a91cd6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866/d02adff9-030b-4b4b-a8fb-f0e61c553866.crl

            X509v3 Authority Key Identifier:
                keyid:AE:0E:BF:A5:46:C6:C7:98:59:63:0F:2E:28:9F:79:E5:64:FB:62:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d02adff9-030b-4b4b-a8fb-f0e61c553866.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:23:90:e5:70:98:bd:e3:e7:a4:68:da:f5:43:1c:23:82:aa:
         7a:bf:db:da:ef:73:32:b6:4e:aa:e2:bc:07:b5:79:ce:a5:0c:
         4e:8b:f8:e6:6c:f1:ae:64:91:7a:5d:fc:3b:ce:29:38:29:bd:
         1f:22:d6:12:fe:f4:73:50:4a:d9:4e:36:13:b8:10:22:c6:6f:
         7b:3b:b6:e3:95:e6:7c:02:b2:6c:2c:5c:d6:c4:01:33:32:51:
         35:23:17:fd:f2:69:35:2d:08:5c:02:3f:97:f5:e0:68:1f:bc:
         d9:8d:b8:33:45:20:63:d1:6d:35:4a:03:9b:8a:79:3c:3c:d5:
         bd:e9:57:66:47:87:3f:1f:61:37:c0:e6:80:e0:c0:41:b4:db:
         be:61:00:65:6b:4f:f7:94:9d:77:9f:67:a2:62:11:1e:a4:ba:
         43:68:14:50:6b:ba:87:53:2f:53:05:7f:17:89:7a:59:b1:54:
         c5:a5:63:a9:62:27:78:20:08:8d:9d:d7:44:91:ce:c8:4d:c3:
         18:d1:fd:86:12:86:d0:7f:3b:80:3c:22:57:2c:44:04:1b:03:
         20:5e:d1:78:d3:b6:0b:b9:88:bb:73:e0:33:96:cb:e6:a0:e0:
         55:a5:08:fa:4d:89:dc:d0:48:64:47:7c:8f:8e:4b:e7:54:d7:
         ec:9b:19:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFM5iiFOnPcIvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAyYWRmZjktMDMwYi00YjRiLWE4ZmItZjBlNjFjNTUz
ODY2MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk
OTIwNTdmZTAtMjg5OS00YWMyLTgzM2YtNWFlNjJiMGI3OGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisiZlLN9cAtmAXcYmdJMddDunilzPDDCrIhT
LJLwfLByPzlvth9MeJcvRHv8lelWPeShGXPM+LTvjuSHJdogE3FPQEIIgN9V8kdB
kKJHnrGYIOrYmT9PDLK6PyYPFrw8kM/Hp+7tdIAb7V5i442mnFF7wohH4jHFODfn
JcyB6531YkwQIIuCp9rI/18do3Mrwq+KQf4PMtwZFQxoQRjc58NPUde50tvW92a2
FymsPFWb4Rn67I5GP+JVZMIXzRbiTGlmlYepopFTz0SC+cnaOoOaFaNgIuw1uXeu
n8ujNmUD9fVCSxyRcT09qnZsKYNI7B/Rn64Vt9Q5hGKmgdJQIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFsINRw/p0dwhODwYERlWxMBX1KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMDJh
ZGZmOS0wMzBiLTRiNGItYThmYi1mMGU2MWM1NTM4NjYvNTk0OTM2ZTUtOGQ0Mi0z
OGVmLTg4MGItNmE4MmE5MWNkNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDAyYWRmZjktMDMwYi00YjRiLWE4
ZmItZjBlNjFjNTUzODY2L2QwMmFkZmY5LTAzMGItNGI0Yi1hOGZiLWYwZTYxYzU1
Mzg2Ni5jcmwwHwYDVR0jBBgwFoAUrg6/pUbGx5hZYw8uKJ955WT7YgUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMDJhZGZmOS0wMzBiLTRiNGItYThmYi1mMGU2
MWM1NTM4NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsbhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkjkOVwmL3j56Ro2vVDHCOCqnq/29rvczK2TqrivAe1ec6lDE6L+OZs
8a5kkXpd/DvOKTgpvR8i1hL+9HNQStlONhO4ECLGb3s7tuOV5nwCsmwsXNbEATMy
UTUjF/3yaTUtCFwCP5f14GgfvNmNuDNFIGPRbTVKA5uKeTw81b3pV2ZHhz8fYTfA
5oDgwEG0275hAGVrT/eUnXefZ6JiER6kukNoFFBruodTL1MFfxeJelmxVMWlY6li
J3ggCI2d10SRzshNwxjR/YYShtB/O4A8IlcsRAQbAyBe0XjTtgu5iLtz4DOWy+ag
4FWlCPpNidzQSGRHfI+OS+dU1+ybGa0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:17 2026 by rpki-client