Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa
File:                     bfa85c3a-da14-3b0f-85f0-747d639f186d.roa (raw, json)
Hash identifier:          O8pGaA8f5lWM226Lj0Ni3ozEQqbT0gztFux8wBACL7E=
Subject key identifier:   30:F4:78:8A:F8:15:98:D1:47:E0:C0:5C:F1:DF:42:0B:4F:5C:41:80
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EA79400D516890FB8F708B660
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29873
IP address blocks:        66.235.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:00:d5:16:89:0f:b8:f7:08:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=79ea189c-aa13-4d7a-a608-f0552b8164be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:1c:b5:f5:a4:8a:73:f7:3f:8b:51:ed:88:
                    9e:61:63:65:73:32:7d:c8:7b:1e:89:5d:c8:51:a4:
                    17:4d:65:d8:1b:2b:92:78:24:77:87:6b:81:4b:1c:
                    62:12:cb:22:eb:55:94:d8:6e:05:64:fa:a2:78:2e:
                    37:df:ae:81:0d:cf:ae:fd:1f:ab:f1:83:7d:d9:14:
                    64:de:26:ec:49:86:9d:e3:fa:99:72:5f:8d:f9:50:
                    8f:cf:16:c4:90:76:51:71:c7:af:5b:46:ba:c6:7a:
                    24:ad:c2:dc:d5:02:1c:3c:5e:47:36:26:45:a1:f0:
                    42:1f:f1:e3:c0:58:f5:1d:b8:19:24:0b:3e:bf:71:
                    f8:9c:14:9b:cf:87:ce:97:a1:e6:ae:59:2e:80:aa:
                    a0:ee:38:33:2f:9f:1d:56:cb:f5:cd:78:54:f8:96:
                    60:f2:9c:36:e5:8a:68:1b:bd:10:6f:1d:f5:5d:10:
                    ed:a5:a3:51:8c:24:01:af:c0:fc:ea:92:4b:e9:3a:
                    57:ae:8c:88:04:de:ba:5b:57:e3:46:be:9c:df:cf:
                    d5:6d:ef:05:f5:43:03:35:c5:ea:d2:7b:7b:bd:04:
                    0e:7f:8a:04:01:0b:3a:b3:eb:b4:71:f1:bd:6f:c5:
                    be:a0:5f:35:6d:fc:0f:d9:f5:30:1e:40:ba:d9:fb:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:78:8A:F8:15:98:D1:47:E0:C0:5C:F1:DF:42:0B:4F:5C:41:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:67:1e:37:bf:2e:4a:e5:cb:a7:b9:23:83:98:05:ad:25:
         68:33:52:16:2a:c2:bc:38:26:42:f8:ba:90:ae:21:2e:11:e3:
         5a:0d:ac:44:71:26:48:4c:93:ca:38:43:e0:1c:c3:39:9d:b9:
         7d:0a:e2:38:33:fa:c8:ca:bc:27:f7:cc:49:08:8b:db:b6:1a:
         44:2d:bf:28:d2:90:03:eb:8a:00:c9:4a:16:83:cc:55:d8:53:
         b7:16:da:2a:4d:22:a3:8b:c0:18:64:0e:65:d9:2f:e0:d7:3a:
         e4:66:2b:9d:7b:76:93:51:13:ab:75:68:56:88:66:09:dd:f6:
         ff:a7:44:c3:de:a6:fb:7f:9f:a8:61:d5:62:05:da:94:d9:93:
         4a:f4:b2:8b:78:aa:5c:b8:01:68:dc:e3:45:6c:28:b9:17:b0:
         33:ee:b5:2b:eb:a3:07:c8:81:86:f1:6c:e3:30:45:a3:2a:21:
         88:0b:03:1c:a2:e1:3c:af:9a:19:ae:98:34:e3:9a:67:17:c5:
         1c:01:80:d2:14:cb:1d:01:97:08:c2:51:d3:e6:d0:af:27:ce:
         5b:5b:61:a4:3c:f3:60:43:51:5c:7b:b4:13:01:1f:64:e6:c3:
         19:a6:1a:91:75:1f:ba:bc:de:eb:55:87:e4:d9:93:fa:12:15:
         dd:2d:26:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlADVFokPuPcItmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzllYTE4OWMtYWExMy00ZDdhLWE2MDgtZjA1NTJiODE2NGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OIctfWkinP3P4tR7YieYWNlczJ9yHseiV3I
UaQXTWXYGyuSeCR3h2uBSxxiEssi61WU2G4FZPqieC43366BDc+u/R+r8YN92RRk
3ibsSYad4/qZcl+N+VCPzxbEkHZRccevW0a6xnokrcLc1QIcPF5HNiZFofBCH/Hj
wFj1HbgZJAs+v3H4nBSbz4fOl6HmrlkugKqg7jgzL58dVsv1zXhU+JZg8pw25Ypo
G70Qbx31XRDtpaNRjCQBr8D86pJL6TpXroyIBN66W1fjRr6c38/Vbe8F9UMDNcXq
0nt7vQQOf4oEAQs6s+u0cfG9b8W+oF81bfwP2fUwHkC62fsyNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDD0eIr4FZjRR+DAXPHfQgtPXEGAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvYmZhODVjM2EtZGExNC0z
YjBmLTg1ZjAtNzQ3ZDYzOWYxODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuvEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXYZx43vy5K5cunuSODmAWtJWgzUhYqwrw4JkL4upCuIS4R41oNrERx
JkhMk8o4Q+AcwzmduX0K4jgz+sjKvCf3zEkIi9u2GkQtvyjSkAPrigDJShaDzFXY
U7cW2ipNIqOLwBhkDmXZL+DXOuRmK517dpNRE6t1aFaIZgnd9v+nRMPepvt/n6hh
1WIF2pTZk0r0sot4qly4AWjc40VsKLkXsDPutSvrowfIgYbxbOMwRaMqIYgLAxyi
4TyvmhmumDTjmmcXxRwBgNIUyx0BlwjCUdPm0K8nzltbYaQ882BDUVx7tBMBH2Tm
wxmmGpF1H7q83utVh+TZk/oSFd0tJkg=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:21 2026 by rpki-client