Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
File:                     30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa (raw, json)
Hash identifier:          kJd+r+/IqHZ63DztNsEHjOJh3atOhjTJfP7gpmIwLcs=
Subject key identifier:   5F:CF:49:06:AE:47:CD:C8:38:68:76:C8:A3:47:C6:9D:28:FA:55:51
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584E7204C90403DC9BB81B888200
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     33185
IP address blocks:        66.187.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c9:04:03:dc:9b:b8:1b:88:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=fa175b46-acd2-497c-8ea6-35b78d21b588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:98:72:1b:48:31:ff:2f:06:bf:9c:b4:e3:
                    af:9e:27:fb:cf:a1:40:f9:ef:fd:02:59:f1:a3:96:
                    ab:56:51:58:de:cc:4a:44:19:da:54:d4:99:29:f2:
                    4a:c6:88:de:63:d2:0d:9d:a7:a5:66:d1:8a:82:37:
                    bf:ea:e8:08:15:a7:c8:9c:0a:b5:c7:7f:ff:d6:97:
                    22:bd:62:6e:b8:41:9c:ee:95:ec:f2:64:83:7d:4d:
                    0e:36:16:20:42:0c:c8:39:0f:bd:83:9e:92:99:b1:
                    b9:e8:7a:5c:1e:b2:4c:c7:08:8c:df:01:5f:db:b9:
                    2a:a7:94:7e:d3:25:80:05:20:4b:e5:7a:f1:74:eb:
                    07:f6:5e:b1:7a:a7:cb:02:e8:07:eb:b8:83:72:a8:
                    b0:d8:15:33:91:de:37:96:a4:24:9b:16:79:45:27:
                    be:b0:6a:71:5f:0a:39:35:b2:13:85:d8:91:cc:19:
                    c7:ce:a8:e0:8d:2f:05:78:82:77:61:35:df:ed:06:
                    5f:89:4a:d4:c5:82:48:aa:9c:e5:cf:17:e3:5e:36:
                    ac:f1:e4:49:eb:4f:24:36:93:06:5b:b0:84:82:54:
                    fc:9f:e4:da:ea:20:7c:dc:78:8f:96:41:a4:09:bd:
                    29:7e:a6:bf:81:5c:df:fb:b7:09:8b:79:f7:dc:ee:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CF:49:06:AE:47:CD:C8:38:68:76:C8:A3:47:C6:9D:28:FA:55:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:f4:b4:f7:a4:ef:2a:b6:e3:21:d2:f0:8f:6e:81:e4:19:
         ad:11:71:28:be:2d:fb:12:a3:e6:66:2a:cb:b5:84:ed:56:a2:
         3b:46:92:5b:83:82:9d:57:e1:ad:33:9e:4e:71:58:8e:43:c1:
         9f:f1:05:8e:b9:8f:2f:b9:1b:59:1d:c4:c2:9a:69:90:aa:af:
         0f:7b:62:ce:e9:be:02:fe:f1:0a:1b:04:bf:b5:62:8b:06:f8:
         dc:d9:ac:ba:8e:a7:c9:5a:e0:fb:bc:90:25:9e:d2:83:6f:29:
         3c:22:e8:ff:0c:d0:3d:97:8b:8e:43:a8:cf:d2:6b:9d:0a:fb:
         b1:8b:68:8a:fd:98:54:bc:9e:4c:69:37:de:96:1f:c3:dc:22:
         da:3b:9a:9d:9a:21:51:3f:df:35:55:13:3b:2a:e2:6b:56:bb:
         a9:0a:52:82:29:80:84:6c:0a:60:61:9b:21:be:d8:4f:9b:7a:
         b5:17:32:97:c7:28:e0:ca:5e:73:4a:f8:16:16:e7:2f:cf:75:
         14:3d:d6:0e:ab:5c:08:71:6d:9f:b9:15:fd:74:0a:7e:12:34:
         93:97:ca:a9:a8:2b:2c:23:e5:f5:d6:66:c2:57:a7:65:fa:89:
         d8:2e:71:95:3b:d4:6a:53:8a:1c:2b:4a:c5:d1:3f:83:70:67:
         8e:ca:d6:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMkEA9ybuBuIggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU1NGEyODAtMjJhMS00NzdjLTk3YmYtZjIzYTdmMzNh
MGMwMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
ZmExNzViNDYtYWNkMi00OTdjLThlYTYtMzViNzhkMjFiNTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5aYchtIMf8vBr+ctOOvnif7z6FA+e/9Alnx
o5arVlFY3sxKRBnaVNSZKfJKxojeY9INnaelZtGKgje/6ugIFafInAq1x3//1pci
vWJuuEGc7pXs8mSDfU0ONhYgQgzIOQ+9g56SmbG56HpcHrJMxwiM3wFf27kqp5R+
0yWABSBL5XrxdOsH9l6xeqfLAugH67iDcqiw2BUzkd43lqQkmxZ5RSe+sGpxXwo5
NbIThdiRzBnHzqjgjS8FeIJ3YTXf7QZfiUrUxYJIqpzlzxfjXjas8eRJ608kNpMG
W7CEglT8n+Ta6iB83HiPlkGkCb0pfqa/gVzf+7cJi3n33O47oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/PSQauR83IOGh2yKNHxp0o+lVRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0
YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNhN2YzM2EwYzAvMzBkNmNiZjQtYTRkMS0z
ZWEzLWJlM2QtMDAwODZiYTA0MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzU1NGEyODAtMjJhMS00NzdjLTk3
YmYtZjIzYTdmMzNhMGMwL2M1NTRhMjgwLTIyYTEtNDc3Yy05N2JmLWYyM2E3ZjMz
YTBjMC5jcmwwHwYDVR0jBBgwFoAUvA5Qxgka7vPVyheHhrapUB3cWcEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNh
N2YzM2EwYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWw9LT3pO8qtuMh0vCPboHkGa0RcSi+LfsSo+ZmKsu1hO1WojtGkluD
gp1X4a0znk5xWI5DwZ/xBY65jy+5G1kdxMKaaZCqrw97Ys7pvgL+8QobBL+1YosG
+NzZrLqOp8la4Pu8kCWe0oNvKTwi6P8M0D2Xi45DqM/Sa50K+7GLaIr9mFS8nkxp
N96WH8PcIto7mp2aIVE/3zVVEzsq4mtWu6kKUoIpgIRsCmBhmyG+2E+berUXMpfH
KODKXnNK+BYW5y/PdRQ91g6rXAhxbZ+5Ff10Cn4SNJOXyqmoKywj5fXWZsJXp2X6
idgucZU71GpTihwrSsXRP4NwZ47K1jA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:54:09 2026 by rpki-client