Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/5d6ae65c-3e4c-309b-b9b6-f7d899ff6e03.roa
File:                     5d6ae65c-3e4c-309b-b9b6-f7d899ff6e03.roa (raw, json)
Hash identifier:          W0k4ipLQ/VyKWMfK3tEePpyS52Oa1y9oRlvYVynWlcw=
Subject key identifier:   92:CF:81:E7:2F:AA:2D:4F:23:E7:13:30:A6:01:19:C8:70:48:C3:E4
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584E48248A6F136936C35B917620
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/5d6ae65c-3e4c-309b-b9b6-f7d899ff6e03.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     2734
IP address blocks:        66.35.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8a:6f:13:69:36:c3:5b:91:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=fe129130-2351-476a-af2c-cc7dfb5041d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:d8:95:7c:05:f9:dd:c7:ff:12:9c:e3:e5:
                    19:01:26:f0:a5:e6:d3:36:c9:83:89:2e:42:b2:84:
                    b2:6b:2e:6e:8c:13:4c:ea:be:2d:37:70:18:22:f6:
                    c5:cb:76:15:ef:5b:b8:52:46:07:06:a0:8c:5a:80:
                    48:6d:07:64:2e:d1:f2:ab:6e:da:d4:f7:27:d2:7a:
                    9a:19:91:dd:b5:da:f4:69:79:bc:d2:3d:9e:c7:90:
                    7f:b8:ac:f3:32:88:10:45:d2:bf:ae:6a:da:0c:8f:
                    1c:9f:19:70:b9:35:58:f7:17:26:d4:17:f1:04:4c:
                    e3:fa:fb:6a:da:a6:e7:57:b1:41:63:de:82:c8:9a:
                    ac:d8:54:3b:f2:af:ff:17:4f:5f:a4:e9:4b:a1:c9:
                    6c:c3:cd:40:e4:52:1a:53:10:05:c2:b5:cf:e0:4b:
                    69:d3:e1:34:99:61:af:9c:f1:39:f1:33:9b:e6:4c:
                    81:d9:77:af:6a:f7:1b:8e:42:f8:54:1e:6e:ec:84:
                    0e:17:b4:61:63:ad:03:2d:a7:06:e8:88:1d:8c:58:
                    d0:2b:20:35:09:3b:57:e7:ae:a3:8d:df:63:d1:f0:
                    05:af:dc:43:94:14:e1:3b:7e:e6:8f:5b:08:7d:d1:
                    71:b4:7e:90:6b:84:cf:0e:d1:bb:6d:3b:b8:9d:ea:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:81:E7:2F:AA:2D:4F:23:E7:13:30:A6:01:19:C8:70:48:C3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/5d6ae65c-3e4c-309b-b9b6-f7d899ff6e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:62:ef:70:2b:9a:68:c1:69:e3:8e:28:16:c7:b9:d3:27:5b:
         ba:94:2f:04:43:26:70:e1:14:eb:22:4a:32:b3:5d:1f:7d:56:
         82:2b:8b:81:75:83:c4:bd:32:7b:0c:d9:09:fc:43:79:ce:f8:
         60:5f:3b:e7:e6:2e:f1:43:5d:9b:14:fb:74:54:ff:1b:cd:1f:
         23:5f:7d:02:e1:98:cb:37:7f:8c:58:3d:0d:41:ed:49:23:56:
         fa:4f:ad:42:7b:d1:57:14:55:82:1b:4a:34:d7:8f:ab:a8:bc:
         81:16:a4:23:1e:7f:4b:86:b4:de:74:7e:c0:a4:f3:08:3a:64:
         53:e0:b8:39:f2:d1:94:84:07:7b:a0:8b:da:33:ef:c2:76:3a:
         1f:2b:42:53:0d:79:4f:e6:f4:16:63:49:c9:4b:0a:51:1c:bd:
         19:44:57:e4:ec:63:61:88:8e:2d:34:e1:f1:77:ee:3e:fb:15:
         d4:6d:e8:5e:b7:d0:36:cb:3f:31:df:56:ea:65:d2:64:86:84:
         3e:40:e6:b2:23:cc:68:6b:6c:5e:8e:9f:62:75:3b:98:31:0f:
         5c:80:98:06:95:b8:89:1e:81:4f:b2:f4:3d:61:77:a9:9f:1b:
         b5:71:a1:d3:a5:7b:50:bf:7b:ce:47:88:bd:7c:3c:f1:03:99:
         e3:7d:3d:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIpvE2k2w1uRdiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZmUxMjkxMzAtMjM1MS00NzZhLWFmMmMtY2M3ZGZiNTA0MWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfLYlXwF+d3H/xKc4+UZASbwpebTNsmDiS5C
soSyay5ujBNM6r4tN3AYIvbFy3YV71u4UkYHBqCMWoBIbQdkLtHyq27a1Pcn0nqa
GZHdtdr0aXm80j2ex5B/uKzzMogQRdK/rmraDI8cnxlwuTVY9xcm1BfxBEzj+vtq
2qbnV7FBY96CyJqs2FQ78q//F09fpOlLoclsw81A5FIaUxAFwrXP4Etp0+E0mWGv
nPE58TOb5kyB2XevavcbjkL4VB5u7IQOF7RhY60DLacG6IgdjFjQKyA1CTtX566j
jd9j0fAFr9xDlBThO37mj1sIfdFxtH6Qa4TPDtG7bTu4neoFGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJLPgecvqi1PI+cTMKYBGchwSMPkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvNWQ2YWU2NWMtM2U0Yy0z
MDliLWI5YjYtZjdkODk5ZmY2ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhi73ArmmjBaeOOKBbHudMnW7qULwRDJnDhFOsiSjKzXR99VoIri4F1
g8S9MnsM2Qn8Q3nO+GBfO+fmLvFDXZsU+3RU/xvNHyNffQLhmMs3f4xYPQ1B7Ukj
VvpPrUJ70VcUVYIbSjTXj6uovIEWpCMef0uGtN50fsCk8wg6ZFPguDny0ZSEB3ug
i9oz78J2Oh8rQlMNeU/m9BZjSclLClEcvRlEV+TsY2GIji004fF37j77FdRt6F63
0DbLPzHfVupl0mSGhD5A5rIjzGhrbF6On2J1O5gxD1yAmAaVuIkegU+y9D1hd6mf
G7VxodOle1C/e85HiL18PPEDmeN9PRk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:12 2026 by rpki-client