Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/930c670d-6314-3615-a9cd-a5fcc74d69e8.roa
File:                     930c670d-6314-3615-a9cd-a5fcc74d69e8.roa (raw, json)
Hash identifier:          AQO92OTDVtz+PvufMy/g9x/C5V4cSCuGOj7IkaeRLUE=
Subject key identifier:   6C:4A:BB:66:81:6C:2D:1A:92:FB:3C:4D:3C:5D:8A:52:0B:3B:3A:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CACB6AEA409F2F741A7000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/930c670d-6314-3615-a9cd-a5fcc74d69e8.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.189.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:cb:6a:ea:40:9f:2f:74:1a:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3c0d025f-7778-48ff-96e9-dba7029ced96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:07:f9:e5:58:49:e6:39:60:fa:71:0d:ab:
                    5b:7c:d7:00:24:d7:e7:f4:27:b0:e4:db:49:c6:d1:
                    da:1b:6b:3c:94:fe:60:00:f9:d2:2a:fb:97:e7:02:
                    77:50:da:b1:fa:24:77:6e:1b:4b:c4:e0:f0:61:7b:
                    99:58:1e:2a:08:ad:5d:b2:80:98:df:f6:dc:ef:3d:
                    5d:6e:c7:39:34:42:d2:4c:be:4c:c1:57:0f:e8:11:
                    26:14:a9:c6:53:ee:8f:22:fe:40:56:ce:ca:a9:65:
                    2e:2d:2a:7d:4d:d7:fd:6c:a9:7d:e3:ff:d5:d0:47:
                    f7:d6:fb:11:1d:77:32:d9:a9:2f:22:07:d0:17:c7:
                    2e:9b:9b:9a:42:28:2e:58:78:6b:b5:de:8a:cc:3c:
                    d7:32:a5:66:59:38:5b:12:86:1d:93:e1:fe:36:ac:
                    f4:2b:b4:ef:53:53:cb:3a:48:e3:fd:17:56:c0:1f:
                    60:7c:bb:2d:1b:97:38:95:65:90:86:83:4a:f3:e6:
                    b7:3b:2b:eb:d3:4f:cb:07:7f:54:bc:d6:77:37:4e:
                    2e:67:38:b8:24:51:28:aa:1c:60:0c:5c:ee:6a:5d:
                    51:cd:96:5b:f7:a6:f3:52:76:ba:c0:ad:a2:bf:75:
                    52:21:64:ef:ec:94:97:3e:c1:2a:a6:f9:c9:e9:55:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:BB:66:81:6C:2D:1A:92:FB:3C:4D:3C:5D:8A:52:0B:3B:3A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/930c670d-6314-3615-a9cd-a5fcc74d69e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:b8:6d:11:c1:b6:10:cf:16:81:48:73:c5:35:39:5d:a0:
         89:32:ba:22:b2:e7:06:83:d7:67:37:98:6a:8e:2b:14:9d:88:
         0a:54:fe:c6:26:7d:ba:09:cc:3a:7f:ea:a8:6c:93:62:05:80:
         bf:4f:ae:be:1a:cb:65:b8:2e:2d:d6:61:e5:47:b6:f4:13:b4:
         6c:06:ed:69:e1:a5:1a:ab:a4:17:a1:76:c4:fd:33:95:db:e9:
         ce:22:b5:cc:dd:2b:13:6e:87:a0:65:1f:46:7e:17:e1:06:95:
         d7:84:71:51:53:63:47:e1:94:3f:16:47:c1:3b:fd:7b:11:4b:
         f6:c1:a8:9a:dc:20:2f:8b:b1:60:a0:18:18:e6:0b:d5:05:89:
         c3:eb:21:7d:3e:a0:24:98:2d:1d:64:45:d7:17:30:de:b3:01:
         cc:e0:f5:a8:aa:05:e6:3e:a1:be:93:e5:50:90:c9:47:fe:cb:
         37:5e:ad:d0:a1:4b:2a:c5:d4:be:ce:a4:56:c5:ab:9c:06:92:
         df:e2:f3:48:e2:7a:70:80:a6:99:06:cf:1f:46:44:ec:9d:79:
         10:93:71:bb:a7:b5:2e:7f:dd:a1:a2:15:66:38:a2:a4:d4:5b:
         3c:ec:a7:1b:da:88:a0:54:cb:43:8e:1a:5a:7b:12:9e:2a:a7:
         69:ec:97:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aystq6kCfL3QacAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
M2MwZDAyNWYtNzc3OC00OGZmLTk2ZTktZGJhNzAyOWNlZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bEH+eVYSeY5YPpxDatbfNcAJNfn9Cew5NtJ
xtHaG2s8lP5gAPnSKvuX5wJ3UNqx+iR3bhtLxODwYXuZWB4qCK1dsoCY3/bc7z1d
bsc5NELSTL5MwVcP6BEmFKnGU+6PIv5AVs7KqWUuLSp9Tdf9bKl94//V0Ef31vsR
HXcy2akvIgfQF8cum5uaQiguWHhrtd6KzDzXMqVmWThbEoYdk+H+Nqz0K7TvU1PL
Okjj/RdWwB9gfLstG5c4lWWQhoNK8+a3Oyvr00/LB39UvNZ3N04uZzi4JFEoqhxg
DFzual1RzZZb96bzUna6wK2iv3VSIWTv7JSXPsEqpvnJ6VUJxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxKu2aBbC0akvs8TTxdilILOzowMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTMwYzY3MGQtNjMxNC0z
NjE1LWE5Y2QtYTVmY2M3NGQ2OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABl/uG0RwbYQzxaBSHPFNTldoIkyuiKy5waD12c3mGqOKxSdiApU/sYm
fboJzDp/6qhsk2IFgL9Prr4ay2W4Li3WYeVHtvQTtGwG7WnhpRqrpBehdsT9M5Xb
6c4itczdKxNuh6BlH0Z+F+EGldeEcVFTY0fhlD8WR8E7/XsRS/bBqJrcIC+LsWCg
GBjmC9UFicPrIX0+oCSYLR1kRdcXMN6zAczg9aiqBeY+ob6T5VCQyUf+yzderdCh
SyrF1L7OpFbFq5wGkt/i80jienCAppkGzx9GROydeRCTcbuntS5/3aGiFWY4oqTU
WzzspxvaiKBUy0OOGlp7Ep4qp2nsl7I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:26 2026 by rpki-client