Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
File:                     30f3f2b7-133f-3093-8bac-371e64c54f97.roa (raw, json)
Hash identifier:          JJuiPBjWGd9mHSVrL4c3pqQe5ts3H8y9Qz0FJSB7aCE=
Subject key identifier:   F0:CD:8B:A7:3D:DC:C2:B8:C4:9D:F5:E5:6F:52:77:73:13:13:BE:4D
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D36C0EF780046B03E28090180
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
Signing time:             Wed 18 Mar 2026 22:43:58 +0000
ROA not before:           Wed 18 Mar 2026 22:43:58 +0000
ROA not after:            Tue 16 Jun 2026 22:43:58 +0000
asID:                     16740
IP address blocks:        66.39.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:c0:ef:78:00:46:b0:3e:28:09:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Mar 18 22:43:58 2026 GMT
            Not After : Jun 16 22:43:58 2026 GMT
        Subject: CN=36a32951-f77c-405d-a9ed-7d8f82f2fcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:dc:df:4d:88:6d:43:e0:3c:fd:f5:b4:2b:
                    40:d7:b7:fd:bf:0f:fe:11:b2:05:08:99:48:a6:6b:
                    47:94:c5:56:ae:e9:ce:40:b3:d0:dd:98:f5:37:12:
                    73:60:0e:1a:bd:42:1b:0b:33:0a:c9:0c:88:28:c0:
                    da:12:17:bc:74:ca:6f:46:95:9b:a8:f6:48:fe:3a:
                    b7:95:b2:bb:3e:8b:35:c8:2c:e0:a7:46:13:3d:9f:
                    9a:56:1b:f0:21:3a:16:c0:e1:cf:5c:3a:e7:1d:27:
                    7d:21:01:25:57:6c:cf:d1:10:9d:4d:14:00:1d:70:
                    fa:ef:30:09:19:fb:bf:e7:99:30:e0:09:bf:cf:3b:
                    0e:80:cc:0e:74:8f:da:44:ed:7d:80:64:a5:03:c8:
                    03:a6:34:d3:ca:c8:36:99:c5:b0:f5:6c:25:03:12:
                    f4:38:e5:e6:8c:cf:b1:91:32:40:58:d1:7d:7f:4b:
                    07:01:15:0e:3d:87:2c:bd:c4:c5:c8:c3:ae:42:85:
                    7e:b6:b8:9a:aa:09:c0:55:22:47:00:09:56:3c:2f:
                    c4:77:3c:cf:fe:bd:6a:9a:d6:ba:2f:10:3f:46:27:
                    af:a8:ae:17:25:8e:91:48:19:94:db:c3:3b:1d:b4:
                    0d:5f:6f:47:62:b9:0a:43:f4:8d:d2:24:12:a5:2b:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:8B:A7:3D:DC:C2:B8:C4:9D:F5:E5:6F:52:77:73:13:13:BE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:12:b0:5a:02:59:0b:94:b6:2a:3c:5b:10:12:b2:ba:08:
         50:f1:24:18:9a:aa:5c:88:4b:40:75:5b:3e:f0:34:2e:af:22:
         1e:b8:00:46:4e:bf:d2:66:c5:8d:ac:a2:bc:a5:49:50:5a:b2:
         a2:8e:53:9a:01:d5:e3:9d:ac:43:e2:ad:eb:ae:cd:b2:9a:e4:
         a9:b5:c2:68:eb:64:c7:cf:03:5d:1f:9a:bb:7d:bb:b2:70:c2:
         b2:f4:f2:bc:f4:90:36:ce:f6:0b:cd:d1:41:53:5d:47:db:21:
         40:62:aa:8f:f9:73:70:67:78:70:84:3c:d7:01:7e:79:f9:b1:
         60:76:2f:cf:c6:12:04:47:75:bb:b2:4d:3b:7d:55:da:fc:63:
         73:b5:cf:c8:ce:11:ce:a0:7a:2b:37:9b:94:a2:35:23:00:23:
         69:c5:cb:0f:30:36:3d:3d:91:a7:11:01:71:c6:ef:10:f6:19:
         66:e7:d9:f5:02:82:d8:1a:18:9a:f9:06:3f:df:43:bb:80:fe:
         17:c4:98:2a:72:03:c5:45:c4:7e:68:aa:30:e9:03:17:2c:f3:
         c1:64:be:34:da:72:f6:a7:87:be:d8:10:72:d6:53:40:da:1f:
         05:8d:b8:63:95:ca:ac:99:77:3e:1b:c2:7f:86:c4:10:c4:8f:
         81:cf:ac:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wO94AEawPigJAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDMxODIyNDM1OFoXDTI2MDYxNjIyNDM1OFowLzEtMCsGA1UEAxMk
MzZhMzI5NTEtZjc3Yy00MDVkLWE5ZWQtN2Q4ZjgyZjJmY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwDc302IbUPgPP31tCtA17f9vw/+EbIFCJlI
pmtHlMVWrunOQLPQ3Zj1NxJzYA4avUIbCzMKyQyIKMDaEhe8dMpvRpWbqPZI/jq3
lbK7Pos1yCzgp0YTPZ+aVhvwIToWwOHPXDrnHSd9IQElV2zP0RCdTRQAHXD67zAJ
Gfu/55kw4Am/zzsOgMwOdI/aRO19gGSlA8gDpjTTysg2mcWw9WwlAxL0OOXmjM+x
kTJAWNF9f0sHARUOPYcsvcTFyMOuQoV+triaqgnAVSJHAAlWPC/EdzzP/r1qmta6
LxA/RievqK4XJY6RSBmU28M7HbQNX29HYrkKQ/SN0iQSpStYFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDNi6c93MK4xJ315W9Sd3MTE75NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMzBmM2YyYjctMTMzZi0z
MDkzLThiYWMtMzcxZTY0YzU0Zjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFn5ErBaAlkLlLYqPFsQErK6CFDxJBiaqlyIS0B1Wz7wNC6vIh64AEZO
v9JmxY2sorylSVBasqKOU5oB1eOdrEPireuuzbKa5Km1wmjrZMfPA10fmrt9u7Jw
wrL08rz0kDbO9gvN0UFTXUfbIUBiqo/5c3BneHCEPNcBfnn5sWB2L8/GEgRHdbuy
TTt9Vdr8Y3O1z8jOEc6geis3m5SiNSMAI2nFyw8wNj09kacRAXHG7xD2GWbn2fUC
gtgaGJr5Bj/fQ7uA/hfEmCpyA8VFxH5oqjDpAxcs88FkvjTacvanh77YEHLWU0Da
HwWNuGOVyqyZdz4bwn+GxBDEj4HPrGI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:18:42 2026 by rpki-client