Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
File:                     28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa (raw, json)
Hash identifier:          xKPHbTsmNJO2w+EmuTysuaLHKVXCroI0hsCj0j5mLbE=
Subject key identifier:   83:AD:20:16:D8:85:02:74:4E:A3:0F:B6:95:AC:39:D6:89:08:F9:32
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584DAF101742B69175D3379DD380
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        66.43.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:17:42:b6:91:75:d3:37:9d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=f373de48-b2d5-4939-88c0-03e22a3d0a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:cc:38:95:8c:dc:18:b0:9c:7a:16:a5:8a:
                    90:f7:74:dd:b9:36:bc:40:60:85:83:bf:d1:ad:bc:
                    cc:a6:57:b1:4a:31:59:2e:ab:19:9e:52:18:99:d0:
                    1a:f7:bb:d9:81:cb:f0:b0:3d:cd:b6:ea:8a:65:89:
                    de:76:c8:52:bc:1d:4a:36:2b:9b:71:e6:3e:db:c1:
                    54:65:ea:71:3a:6b:bd:b9:cd:46:e8:93:0b:a6:00:
                    a2:bb:88:a2:c9:67:11:58:63:0b:d8:70:92:2b:7b:
                    c6:a1:68:6d:93:1c:68:a7:8d:9f:82:6c:fa:64:af:
                    bb:cc:d4:95:e9:69:9e:be:b7:e7:7a:89:6b:db:87:
                    91:22:6a:42:fb:30:94:08:9c:95:5d:57:26:ce:fa:
                    5e:50:12:ae:b7:eb:2c:af:3c:47:c4:75:00:c5:50:
                    ec:0e:a0:3f:70:97:c8:6d:f5:eb:84:c2:da:5f:25:
                    35:5c:29:01:3a:fa:b8:f9:c5:78:d9:76:6c:1c:3d:
                    d5:0d:1b:0d:19:f7:f2:ea:7f:a4:fe:e5:29:d3:1c:
                    5e:68:db:8a:e5:58:27:a6:85:27:20:39:57:eb:63:
                    b4:ae:2c:81:41:73:f6:e0:51:a2:64:92:b9:d9:7d:
                    02:d4:ef:b7:da:ef:41:56:6b:60:57:cb:9e:0e:7d:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:20:16:D8:85:02:74:4E:A3:0F:B6:95:AC:39:D6:89:08:F9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:15:a4:73:ac:9d:e2:4e:2d:94:27:25:d2:5f:e1:ed:e9:eb:
         a4:59:27:ba:65:d5:01:0c:15:0d:44:a1:a7:36:b8:c8:96:7f:
         c6:be:fe:c9:9a:07:5d:87:1f:8c:1c:e0:e6:af:67:7d:bb:07:
         cc:5f:79:15:8f:30:8a:b7:b5:81:10:6b:7f:b1:6a:7e:b5:0c:
         74:e7:fb:43:ed:bf:d7:a7:bb:09:cb:2d:80:ea:46:3f:ca:bc:
         f1:9c:1f:a1:60:77:ad:08:41:90:22:d9:c6:b2:5a:7c:3e:a7:
         7a:27:ad:9d:ca:73:b5:51:bd:07:ac:eb:eb:aa:c2:ff:da:c8:
         5a:99:c0:22:5f:77:e7:c8:ad:53:8a:6e:3c:ff:7e:fa:54:84:
         e6:70:a6:e6:ae:66:65:5b:81:29:5d:36:ea:fe:3b:ea:a4:2e:
         56:68:a4:a3:be:44:2b:fa:74:dc:6b:91:26:e4:ef:c9:5a:f9:
         8a:57:3a:4b:b7:45:24:2f:d9:01:c6:fe:d4:96:bc:ea:2b:d2:
         35:b7:a0:57:53:ea:29:f7:09:d1:b5:48:c9:3e:d1:5e:79:ad:
         59:f4:f7:ed:d6:3b:2b:b6:e2:b0:53:14:b6:82:00:0b:92:66:
         8f:85:a6:c8:60:b1:d3:79:54:48:7a:d0:b3:a8:03:8f:5a:a7:
         25:1c:bc:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEBdCtpF10zed04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2
OTA3MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZjM3M2RlNDgtYjJkNS00OTM5LTg4YzAtMDNlMjJhM2QwYTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJbMOJWM3BiwnHoWpYqQ93TduTa8QGCFg7/R
rbzMplexSjFZLqsZnlIYmdAa97vZgcvwsD3NtuqKZYnedshSvB1KNiubceY+28FU
ZepxOmu9uc1G6JMLpgCiu4iiyWcRWGML2HCSK3vGoWhtkxxop42fgmz6ZK+7zNSV
6Wmevrfneolr24eRImpC+zCUCJyVXVcmzvpeUBKut+ssrzxHxHUAxVDsDqA/cJfI
bfXrhMLaXyU1XCkBOvq4+cV42XZsHD3VDRsNGffy6n+k/uUp0xxeaNuK5VgnpoUn
IDlX62O0riyBQXP24FGiZJK52X0C1O+32u9BVmtgV8ueDn0KpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOtIBbYhQJ0TqMPtpWsOdaJCPkyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4
M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvMjhkYzE2NDAtODVmZS0z
NGM4LTk5MzctYjdmNWVkZDFhM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5
ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4
NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz
YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiseMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAVpHOsneJOLZQnJdJf4e3p66RZJ7pl1QEMFQ1Eoac2uMiWf8a+/sma
B12HH4wc4OavZ327B8xfeRWPMIq3tYEQa3+xan61DHTn+0Ptv9enuwnLLYDqRj/K
vPGcH6Fgd60IQZAi2cayWnw+p3onrZ3Kc7VRvQes6+uqwv/ayFqZwCJfd+fIrVOK
bjz/fvpUhOZwpuauZmVbgSldNur+O+qkLlZopKO+RCv6dNxrkSbk78la+YpXOku3
RSQv2QHG/tSWvOor0jW3oFdT6in3CdG1SMk+0V55rVn09+3WOyu24rBTFLaCAAuS
Zo+FpshgsdN5VEh60LOoA49apyUcvEk=
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:08 2026 by rpki-client