Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa
File:                     0cce90f8-17de-3f75-a158-a043c6cd85e1.roa (raw, json)
Hash identifier:          wO1++PbbWfzUu7CDL14/tWG7Cr+6XMwXsPk9neUrHCQ=
Subject key identifier:   1A:51:9F:FF:23:55:C8:34:9A:15:6C:6B:85:95:62:8C:34:84:32:CC
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584D67DFC2C90A6818757BD47A80
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        66.178.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c2:c9:0a:68:18:75:7b:d4:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=a8d55ef9-b527-480c-8e1f-bfae5667d3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:9e:7f:a2:f9:e6:6b:d5:5b:35:00:aa:15:
                    f0:0a:4d:bb:ec:e6:a4:c8:39:33:d3:05:6e:d3:01:
                    89:4a:bd:32:90:a6:be:4b:fd:e5:79:6c:b2:54:db:
                    fd:3b:48:55:c8:d9:c8:6d:ca:2b:51:21:0a:4c:fd:
                    d7:29:4e:67:b9:5d:b9:a6:34:b7:ff:06:4b:7c:2b:
                    5a:b2:5f:04:9b:e0:65:53:ac:53:dd:58:66:f9:44:
                    2a:39:48:26:62:aa:6b:44:a0:24:14:0b:1c:29:a4:
                    b9:de:ba:e3:ed:97:02:36:42:75:0f:00:85:c1:7f:
                    ca:07:e9:5b:41:98:b9:4e:39:41:05:16:5e:2d:45:
                    16:96:5b:c1:d3:2e:f6:c2:55:30:2f:19:46:7e:3a:
                    76:46:4b:bc:c0:e5:39:a4:4b:c1:f3:4b:68:23:b0:
                    b0:eb:ab:3f:fc:aa:a6:7b:3c:3f:f2:1b:7a:b4:e5:
                    0c:6d:a1:38:f9:42:39:38:35:4f:d3:19:60:69:29:
                    0b:2b:8d:a2:af:44:16:a6:cc:54:c8:ac:39:ec:2d:
                    d7:f3:b5:b4:6d:0b:ec:5d:b6:07:3b:58:e6:62:eb:
                    49:3c:ec:62:32:33:7c:25:4d:41:0b:a5:10:48:88:
                    6d:07:fb:db:b7:a3:ee:5d:08:52:5d:42:39:2d:1c:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:51:9F:FF:23:55:C8:34:9A:15:6C:6B:85:95:62:8C:34:84:32:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:39:4a:2e:6b:9d:d9:c3:02:41:2f:ce:cc:dc:5d:6e:de:85:
         fc:0a:b2:c3:90:a9:2b:3d:7c:df:ea:18:51:e4:db:b7:f7:e0:
         f9:e7:5e:dc:ff:8c:42:41:e1:da:01:41:b9:57:c7:00:06:19:
         32:03:e8:ef:79:31:1a:aa:72:f9:b5:73:15:a6:74:5d:f7:82:
         ea:aa:31:95:50:95:7d:e6:fd:42:4c:4b:68:05:c5:9a:50:1d:
         d7:51:77:28:7e:7a:9c:7e:8a:bc:6c:e6:63:9c:0e:73:78:06:
         d3:a1:3d:8a:bf:67:d4:52:42:d8:1c:e8:84:ec:e8:cb:80:06:
         2b:f1:13:9d:0a:41:40:d0:49:ca:8c:9a:03:36:a4:d7:7d:21:
         00:31:2d:6d:8e:4a:f2:c4:26:ff:be:4b:5d:ab:84:ae:ab:79:
         db:42:0a:28:ff:2a:3a:77:ab:a9:ee:32:59:44:c5:17:23:0b:
         31:33:8e:6f:35:26:3f:79:f4:ab:64:1d:d8:fa:d0:aa:58:fa:
         79:6f:8d:b5:d4:9a:57:21:d0:27:60:bc:e1:14:61:64:0f:9b:
         d2:f5:92:63:97:a1:01:f1:d5:a3:e1:4b:b5:c0:64:b8:c5:3e:
         2b:d8:e9:f7:88:80:95:23:90:35:89:44:be:1f:1e:91:e3:b8:
         c0:8b:e7:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38LJCmgYdXvUeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj
ZmUyMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
YThkNTVlZjktYjUyNy00ODBjLThlMWYtYmZhZTU2NjdkM2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZCef6L55mvVWzUAqhXwCk277OakyDkz0wVu
0wGJSr0ykKa+S/3leWyyVNv9O0hVyNnIbcorUSEKTP3XKU5nuV25pjS3/wZLfCta
sl8Em+BlU6xT3Vhm+UQqOUgmYqprRKAkFAscKaS53rrj7ZcCNkJ1DwCFwX/KB+lb
QZi5TjlBBRZeLUUWllvB0y72wlUwLxlGfjp2Rku8wOU5pEvB80toI7Cw66s//Kqm
ezw/8ht6tOUMbaE4+UI5ODVP0xlgaSkLK42ir0QWpsxUyKw57C3X87W0bQvsXbYH
O1jmYutJPOxiMjN8JU1BC6UQSIhtB/vbt6PuXQhSXUI5LRz7VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpRn/8jVcg0mhVsa4WVYow0hDLMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw
ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvMGNjZTkwZjgtMTdkZS0z
Zjc1LWExNTgtYTA0M2M2Y2Q4NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk
YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx
Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi
YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQ5Si5rndnDAkEvzszcXW7ehfwKssOQqSs9fN/qGFHk27f34PnnXtz/
jEJB4doBQblXxwAGGTID6O95MRqqcvm1cxWmdF33guqqMZVQlX3m/UJMS2gFxZpQ
HddRdyh+epx+irxs5mOcDnN4BtOhPYq/Z9RSQtgc6ITs6MuABivxE50KQUDQScqM
mgM2pNd9IQAxLW2OSvLEJv++S12rhK6redtCCij/Kjp3q6nuMllExRcjCzEzjm81
Jj959KtkHdj60KpY+nlvjbXUmlch0CdgvOEUYWQPm9L1kmOXoQHx1aPhS7XAZLjF
PivY6feIgJUjkDWJRL4fHpHjuMCL5/Q=
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:34:42 2026 by rpki-client