Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca675b2-e453-328b-b93d-c6a67ab41ad6.roa
File:                     1ca675b2-e453-328b-b93d-c6a67ab41ad6.roa (raw, json)
Hash identifier:          FlH0VDREJeUuJDqhO4+DYjzNKNAk3iWi2GucutoEHZQ=
Subject key identifier:   0B:0D:13:FB:9D:61:AE:E2:14:76:FC:05:E4:8B:AF:41:73:81:4D:1E
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584DB1DAD806FA298F9830437D00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca675b2-e453-328b-b93d-c6a67ab41ad6.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     63172
IP address blocks:        66.115.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d8:06:fa:29:8f:98:30:43:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=94b4bc06-dbaa-4831-bbe7-98db6f8ddf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:a4:cc:80:5c:6f:91:94:82:c6:12:fc:fc:
                    2c:71:78:a3:6c:e8:54:86:ae:f0:ac:48:00:81:54:
                    f0:a4:8f:95:f2:db:96:df:7e:1b:2a:21:39:2a:4e:
                    5f:ed:41:6b:27:c1:75:e6:a2:8d:b7:55:0e:80:02:
                    24:98:85:30:94:80:d1:26:be:07:41:55:05:4a:24:
                    84:23:96:b2:ad:15:b1:83:3f:79:03:d3:8c:64:78:
                    48:3e:ed:7a:b1:56:68:ac:1e:51:0e:cb:c7:f1:b6:
                    9b:48:52:e4:50:40:7b:32:70:3e:1c:12:7b:6b:34:
                    06:4f:6e:35:bf:bd:0a:6a:c2:35:0d:8a:93:f9:57:
                    24:1a:22:2b:7c:e7:21:b7:21:b5:2a:2d:bd:b2:84:
                    d8:8d:ce:b7:63:1d:92:a9:7f:a0:70:9c:aa:5b:57:
                    e0:a4:61:8b:fc:76:ef:34:db:73:38:9b:13:3e:a6:
                    a7:2b:a1:58:b2:46:e3:d2:f8:70:11:3f:3c:b0:ce:
                    c3:11:41:34:f0:d1:34:24:ff:27:1e:71:6e:00:8c:
                    d0:db:45:51:d1:53:9a:f4:87:b9:82:5e:34:c5:d3:
                    42:92:bc:86:a5:48:d5:76:29:b1:98:ea:24:05:ab:
                    c8:9e:33:95:c6:bb:0a:e6:09:71:96:75:ff:89:79:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:13:FB:9D:61:AE:E2:14:76:FC:05:E4:8B:AF:41:73:81:4D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1ca675b2-e453-328b-b93d-c6a67ab41ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:37:e6:ac:0d:73:63:be:d2:bf:25:30:22:20:66:30:e5:
         82:9e:02:d5:df:9f:0e:83:e7:ee:4e:4a:ed:33:12:6f:5a:0b:
         a7:b4:92:df:13:ca:09:2f:f8:fe:14:3f:ae:36:8a:13:91:b8:
         f4:2d:3d:a4:58:2b:51:3a:4e:da:85:4c:e8:0e:58:0b:bf:62:
         b9:d4:52:c0:38:1b:ea:4d:69:65:57:cc:a9:ad:15:a8:61:ef:
         73:65:cc:0d:bb:60:cb:30:e4:98:7c:32:0f:06:61:a9:4a:25:
         b3:f8:6f:b2:59:39:27:a1:71:90:01:d3:39:8d:b1:60:ab:82:
         9b:a0:9e:d5:d5:2e:55:6c:a5:71:da:d8:4a:62:97:1d:8e:08:
         53:46:46:52:e9:0a:a0:e3:2d:50:11:a2:ae:19:91:29:f7:56:
         a2:b0:31:7a:94:d9:70:9e:38:8f:99:83:54:86:5a:11:dd:00:
         09:03:8d:1a:a4:8b:23:1d:77:35:8a:a0:04:f5:d1:a3:a0:c8:
         9a:7f:13:e5:0b:40:a3:a4:b7:2b:26:c5:17:53:9c:ba:e6:4f:
         08:58:3a:15:16:9d:d0:fa:5b:a4:84:63:96:dc:21:e9:70:4a:
         dc:e8:24:0f:3c:11:57:a1:41:32:d0:d5:1a:03:c7:13:af:1a:
         5d:61:5d:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tgG+imPmDBDfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
OTRiNGJjMDYtZGJhYS00ODMxLWJiZTctOThkYjZmOGRkZjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46SkzIBcb5GUgsYS/PwscXijbOhUhq7wrEgA
gVTwpI+V8tuW334bKiE5Kk5f7UFrJ8F15qKNt1UOgAIkmIUwlIDRJr4HQVUFSiSE
I5ayrRWxgz95A9OMZHhIPu16sVZorB5RDsvH8babSFLkUEB7MnA+HBJ7azQGT241
v70KasI1DYqT+VckGiIrfOchtyG1Ki29soTYjc63Yx2SqX+gcJyqW1fgpGGL/Hbv
NNtzOJsTPqanK6FYskbj0vhwET88sM7DEUE08NE0JP8nHnFuAIzQ20VR0VOa9Ie5
gl40xdNCkryGpUjVdimxmOokBavInjOVxrsK5glxlnX/iXmLkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsNE/udYa7iFHb8BeSLr0FzgU0eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWNhNjc1YjItZTQ1My0z
MjhiLWI5M2QtYzZhNjdhYjQxYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4PN+asDXNjvtK/JTAiIGYw5YKeAtXfnw6D5+5OSu0zEm9aC6e0kt8T
ygkv+P4UP642ihORuPQtPaRYK1E6TtqFTOgOWAu/YrnUUsA4G+pNaWVXzKmtFahh
73NlzA27YMsw5Jh8Mg8GYalKJbP4b7JZOSehcZAB0zmNsWCrgpugntXVLlVspXHa
2Epilx2OCFNGRlLpCqDjLVARoq4ZkSn3VqKwMXqU2XCeOI+Zg1SGWhHdAAkDjRqk
iyMddzWKoAT10aOgyJp/E+ULQKOktysmxRdTnLrmTwhYOhUWndD6W6SEY5bcIelw
StzoJA88EVehQTLQ1RoDxxOvGl1hXUY=
-----END CERTIFICATE-----
Generated at Wed May 13 07:24:10 2026 by rpki-client