Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/8d2f6227-56f3-3c00-a916-7fd5a2663a86.roa
File:                     8d2f6227-56f3-3c00-a916-7fd5a2663a86.roa (raw, json)
Hash identifier:          XX5Ns1mYQ+RZU/RCzzaQsuf84mNI78G3e09b5GN3I68=
Subject key identifier:   D5:CB:B6:50:68:96:3E:70:39:1C:03:10:0C:CB:3E:10:88:5E:73:C1
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F4328584F98BD5C6DE7FB041D02F92AA0
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/8d2f6227-56f3-3c00-a916-7fd5a2663a86.roa
Signing time:             Fri 23 Oct 2026 10:39:51 +0000
ROA not before:           Fri 23 Oct 2026 10:39:51 +0000
ROA not after:            Thu 21 Jan 2027 11:39:51 +0000
asID:                     400384
IP address blocks:        66.245.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:98:bd:5c:6d:e7:fb:04:1d:02:f9:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Oct 23 10:39:51 2026 GMT
            Not After : Jan 21 11:39:51 2027 GMT
        Subject: CN=e4e6b87c-a29f-4084-b33d-e14cca99a6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:b6:b1:52:53:5d:94:c6:7b:08:d1:56:93:
                    84:98:26:50:34:88:57:c4:18:7e:20:01:a9:9f:18:
                    e3:3a:42:29:5f:76:4f:df:3c:95:2f:f6:df:61:6d:
                    c7:d5:1f:de:b7:99:e9:80:b0:cc:ba:4e:7d:d0:e1:
                    e7:08:72:d8:90:76:cf:d0:da:8b:73:5e:6f:7e:1e:
                    e9:64:59:1b:6d:19:c0:f1:b1:cc:c0:2c:48:59:2c:
                    f4:b7:93:93:90:a5:c5:ef:ca:79:9d:ed:b0:06:03:
                    5c:37:68:d5:ec:b2:a5:e7:de:8a:61:80:f9:e3:0a:
                    93:85:31:a9:83:31:a6:e6:75:ca:15:58:fa:5e:7b:
                    ba:dd:55:0b:b7:e3:54:60:c5:ee:74:66:b4:21:3d:
                    ad:07:98:9d:c1:24:55:fa:71:f5:f2:31:d7:a3:05:
                    b5:c8:c7:f4:3b:cf:16:15:50:d0:c4:37:cb:62:b4:
                    60:fd:05:10:ff:01:72:f7:22:99:51:c8:59:84:68:
                    2a:d8:fb:0e:68:3d:37:85:e6:7c:98:83:9e:9d:d0:
                    a0:77:0a:cb:97:78:b9:94:e5:4a:cc:d7:ad:3e:e2:
                    22:d4:ff:e3:e2:80:5f:47:31:f5:c6:de:6f:e2:0c:
                    38:bc:70:c1:f6:45:ee:83:68:8a:0c:1b:6d:98:6a:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:B6:50:68:96:3E:70:39:1C:03:10:0C:CB:3E:10:88:5E:73:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/8d2f6227-56f3-3c00-a916-7fd5a2663a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:b2:61:27:11:b6:8f:ed:d6:d0:9a:43:58:d7:25:43:83:
         4e:a1:bf:18:f9:84:02:83:01:2a:fc:e8:38:2a:93:d9:ac:fd:
         c5:7f:e0:74:c2:fe:f9:6d:80:1c:73:96:4b:b8:18:64:61:60:
         ea:3d:8c:e1:fe:e3:bd:8c:5b:59:03:05:d2:8a:71:f9:3e:73:
         e1:8b:fb:73:b2:ef:b2:43:53:73:cd:ad:dc:50:0e:13:e4:08:
         95:34:3e:4c:b8:fd:45:8e:fb:f8:1c:34:80:0d:bb:76:7a:07:
         38:52:e0:b0:d9:70:4f:6b:70:08:d6:14:e8:f2:c2:66:3d:4c:
         0b:80:64:94:1a:c8:b0:ea:ba:6a:50:79:07:1e:73:dd:64:bb:
         e4:59:1d:bb:76:43:b8:1b:6f:44:d0:3b:24:22:84:a7:03:4e:
         0b:22:2c:37:56:45:52:c1:24:a9:8f:b8:30:7c:ba:f9:3a:26:
         48:6b:a9:70:19:1e:44:fc:ec:d6:51:68:ff:4c:ab:22:95:e9:
         ce:9c:c3:d4:59:9d:3c:57:4a:84:39:b9:52:c1:a1:c8:43:e7:
         0e:66:f9:0e:ea:43:bc:36:ba:50:8c:d1:b9:b8:5d:31:da:0f:
         fa:27:3f:a3:40:9c:36:8f:c3:ae:e2:80:3b:e9:d4:9d:b2:ad:
         e3:c3:86:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+YvVxt5/sEHQL5KqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY3MGE3OTQtNmNjYi00OTFkLWFlYjEtY2E4NDg1OWMz
OTUwMB4XDTI2MTAyMzEwMzk1MVoXDTI3MDEyMTExMzk1MVowLzEtMCsGA1UEAxMk
ZTRlNmI4N2MtYTI5Zi00MDg0LWIzM2QtZTE0Y2NhOTlhNmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Xi2sVJTXZTGewjRVpOEmCZQNIhXxBh+IAGp
nxjjOkIpX3ZP3zyVL/bfYW3H1R/et5npgLDMuk590OHnCHLYkHbP0NqLc15vfh7p
ZFkbbRnA8bHMwCxIWSz0t5OTkKXF78p5ne2wBgNcN2jV7LKl596KYYD54wqThTGp
gzGm5nXKFVj6Xnu63VULt+NUYMXudGa0IT2tB5idwSRV+nH18jHXowW1yMf0O88W
FVDQxDfLYrRg/QUQ/wFy9yKZUchZhGgq2PsOaD03heZ8mIOendCgdwrLl3i5lOVK
zNetPuIi1P/j4oBfRzH1xt5v4gw4vHDB9kXug2iKDBttmGpqUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXLtlBolj5wORwDEAzLPhCIXnPBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcw
YTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0ODU5YzM5NTAvOGQyZjYyMjctNTZmMy0z
YzAwLWE5MTYtN2ZkNWEyNjYzYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTY3MGE3OTQtNmNjYi00OTFkLWFl
YjEtY2E4NDg1OWMzOTUwL2U2NzBhNzk0LTZjY2ItNDkxZC1hZWIxLWNhODQ4NTlj
Mzk1MC5jcmwwHwYDVR0jBBgwFoAU6Lr0Qpc6EjYTGTvfCyac1GGi5yIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcwYTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0
ODU5YzM5NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGA/smEnEbaP7dbQmkNY1yVDg06hvxj5hAKDASr86Dgqk9ms/cV/4HTC
/vltgBxzlku4GGRhYOo9jOH+472MW1kDBdKKcfk+c+GL+3Oy77JDU3PNrdxQDhPk
CJU0Pky4/UWO+/gcNIANu3Z6BzhS4LDZcE9rcAjWFOjywmY9TAuAZJQayLDqumpQ
eQcec91ku+RZHbt2Q7gbb0TQOyQihKcDTgsiLDdWRVLBJKmPuDB8uvk6JkhrqXAZ
HkT87NZRaP9MqyKV6c6cw9RZnTxXSoQ5uVLBochD5w5m+Q7qQ7w2ulCM0bm4XTHa
D/onP6NAnDaPw67igDvp1J2yrePDhuI=
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:09 2026 by rpki-client