Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/21b4b7d8-0dac-32b5-ae2e-68a34345062a.roa
File:                     21b4b7d8-0dac-32b5-ae2e-68a34345062a.roa (raw, json)
Hash identifier:          1OAahYts8e55IkTXmM8m5PuF6GUOJfaZrFhOeoi9vM0=
Subject key identifier:   6E:46:CB:C5:C4:D9:7E:0E:69:70:9E:A7:BA:C5:A3:DD:B6:57:9D:A2
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD35B0861E363F67FD5D71420
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/21b4b7d8-0dac-32b5-ae2e-68a34345062a.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     6621
IP address blocks:        66.82.0.0/19 maxlen: 19
                          66.82.32.0/19 maxlen: 19
                          66.82.64.0/19 maxlen: 19
                          66.82.96.0/20 maxlen: 20
                          66.82.112.0/21 maxlen: 21
                          66.82.120.0/22 maxlen: 22
                          66.82.125.0/24 maxlen: 24
                          66.82.126.0/23 maxlen: 23
                          66.82.128.0/24 maxlen: 24
                          66.82.130.0/23 maxlen: 23
                          66.82.132.0/22 maxlen: 22
                          66.82.136.0/22 maxlen: 22
                          66.82.140.0/23 maxlen: 23
                          66.82.142.0/24 maxlen: 24
                          66.82.144.0/22 maxlen: 22
                          66.82.148.0/23 maxlen: 23
                          66.82.151.0/24 maxlen: 24
                          66.82.160.0/19 maxlen: 19
                          66.82.192.0/19 maxlen: 19
                          66.82.224.0/22 maxlen: 22
                          66.82.228.0/23 maxlen: 23
                          66.82.233.0/24 maxlen: 24
                          66.82.234.0/23 maxlen: 23
                          66.82.238.0/23 maxlen: 23
                          66.82.240.0/23 maxlen: 23
                          66.82.243.0/24 maxlen: 24
                          66.82.245.0/24 maxlen: 24
                          66.82.246.0/23 maxlen: 23
                          66.82.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:08:61:e3:63:f6:7f:d5:d7:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=e8ad2005-264e-4068-bed2-c4ddb873bfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:76:89:56:2b:1e:d6:80:40:c1:fb:7c:a8:
                    76:ef:42:6c:c7:49:38:66:9e:1e:42:8b:a1:f6:76:
                    c9:4d:46:2b:a7:00:2b:93:98:d4:58:43:67:f2:36:
                    5a:65:1d:45:d1:a6:23:81:08:9b:fc:05:a7:b4:4c:
                    e8:45:df:2a:da:56:7e:92:a0:b4:51:7e:14:f9:bb:
                    c8:9d:f4:c4:9a:d1:b4:42:56:0d:7f:22:9e:6b:4a:
                    14:84:26:9d:4d:1c:6f:5e:4b:9c:f0:37:d2:4f:d0:
                    5a:61:1a:43:5d:9d:f8:9d:1e:8a:42:55:87:7f:19:
                    82:5f:3e:8c:4f:c9:70:1f:97:9e:d9:0d:67:f3:66:
                    f3:be:8c:27:bc:ce:ec:d3:3d:fe:a2:40:6d:e6:63:
                    f5:0b:e1:ed:5a:e7:16:c1:cc:f7:6d:58:55:94:3c:
                    87:e6:b2:33:f1:7d:61:ba:0c:cb:f2:ec:c4:fe:8f:
                    55:d2:1d:40:c3:2e:c3:e6:eb:7f:4f:04:b4:bd:8f:
                    73:ca:31:99:ba:82:35:7b:76:7c:33:a2:78:8d:5a:
                    66:b6:c1:83:c1:d1:17:0a:23:13:c0:d1:00:00:d4:
                    79:2e:58:53:73:8a:80:ee:07:90:eb:4e:5f:30:e5:
                    22:69:9d:da:4b:c2:18:33:cb:9f:02:10:42:79:b5:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:46:CB:C5:C4:D9:7E:0E:69:70:9E:A7:BA:C5:A3:DD:B6:57:9D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/21b4b7d8-0dac-32b5-ae2e-68a34345062a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.82.0.0-66.82.123.255
                  66.82.125.0-66.82.128.255
                  66.82.130.0-66.82.142.255
                  66.82.144.0-66.82.149.255
                  66.82.151.0/24
                  66.82.160.0-66.82.229.255
                  66.82.233.0-66.82.235.255
                  66.82.238.0-66.82.241.255
                  66.82.243.0/24
                  66.82.245.0-66.82.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:be:46:0d:72:11:ee:ad:f5:53:f8:70:ae:82:d2:d8:9e:
         6a:50:1b:63:bc:4d:aa:f5:02:51:01:5f:89:bb:b8:78:87:3f:
         56:d9:bd:de:59:8c:58:f1:ea:1b:8e:da:1e:ce:28:a0:d3:66:
         59:20:86:5a:0d:69:f0:17:70:23:1d:29:ba:6b:e7:9c:22:a6:
         90:2d:6c:3b:bb:ec:98:5c:6c:82:23:4f:80:1f:70:a5:53:65:
         1c:ad:26:06:ee:26:10:f8:f0:54:dd:73:d1:0a:21:d1:4a:61:
         75:b1:bf:d7:6e:46:01:ee:31:50:9e:a2:95:50:7c:82:bd:d0:
         bb:ba:9b:47:9e:67:0b:23:a6:83:4a:4b:bb:96:5b:9a:b7:f9:
         2e:91:7e:c3:ec:b6:c7:61:2a:29:ee:1b:5e:97:f5:30:bb:eb:
         7b:b6:72:c1:59:24:45:8b:98:dd:dd:73:27:08:52:bd:05:89:
         92:71:78:c0:23:94:63:10:be:13:96:b8:49:99:4b:0c:d7:df:
         c3:e4:4c:ae:8d:c9:cf:be:b1:55:94:f4:ee:99:14:0e:cf:89:
         4b:58:df:89:e5:58:85:08:13:43:73:ec:08:45:ab:3a:f6:5b:
         aa:10:bf:63:18:8d:6e:e7:b3:cd:2d:bd:77:d1:b1:38:06:1b:
         51:d0:64:e5
-----BEGIN CERTIFICATE-----
MIIGuzCCBaOgAwIBAgIUAQ0Mn0MoWE3TWwhh42P2f9XXFCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZThhZDIwMDUtMjY0ZS00MDY4LWJlZDItYzRkZGI4NzNiZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEt2iVYrHtaAQMH7fKh270Jsx0k4Zp4eQouh
9nbJTUYrpwArk5jUWENn8jZaZR1F0aYjgQib/AWntEzoRd8q2lZ+kqC0UX4U+bvI
nfTEmtG0QlYNfyKea0oUhCadTRxvXkuc8DfST9BaYRpDXZ34nR6KQlWHfxmCXz6M
T8lwH5ee2Q1n82bzvownvM7s0z3+okBt5mP1C+HtWucWwcz3bVhVlDyH5rIz8X1h
ugzL8uzE/o9V0h1Awy7D5ut/TwS0vY9zyjGZuoI1e3Z8M6J4jVpmtsGDwdEXCiMT
wNEAANR5LlhTc4qA7geQ605fMOUiaZ3aS8IYM8ufAhBCebUmWwIDAQABo4IDzTCC
A8kwHQYDVR0OBBYEFG5Gy8XE2X4OaXCep7rFo922V52iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMjFiNGI3ZDgtMGRhYy0z
MmI1LWFlMmUtNjhhMzQzNDUwNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwejALAwMB
QlIDBAJCUngwDAMEAEJSfQMEAEJSgDAMAwQBQlKCAwQAQlKOMAwDBARCUpADBAFC
UpQDBABCUpcwDAMEBUJSoAMEAUJS5DAMAwQAQlLpAwQCQlLoMAwDBAFCUu4DBAFC
UvADBABCUvMwCwMEAEJS9QMDAEJSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGTovkYNchHurfVT+HCugtLY
nmpQG2O8Tar1AlEBX4m7uHiHP1bZvd5ZjFjx6huO2h7OKKDTZlkghloNafAXcCMd
Kbpr55wippAtbDu77JhcbIIjT4AfcKVTZRytJgbuJhD48FTdc9EKIdFKYXWxv9du
RgHuMVCeopVQfIK90Lu6m0eeZwsjpoNKS7uWW5q3+S6RfsPstsdhKinuG16X9TC7
63u2csFZJEWLmN3dcycIUr0FiZJxeMAjlGMQvhOWuEmZSwzX38PkTK6Nyc++sVWU
9O6ZFA7PiUtY34nlWIUIE0Nz7AhFqzr2W6oQv2MYjW7ns80tvXfRsTgGG1HQZOU=
-----END CERTIFICATE-----
Generated at Fri May 15 15:21:29 2026 by rpki-client