Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a5fcfa9-a4e9-36aa-8fd9-dfc15ec15281.roa
File:                     2a5fcfa9-a4e9-36aa-8fd9-dfc15ec15281.roa (raw, json)
Hash identifier:          HAs4FrRH/LNBZrzrsNCsmtel3wxw/OE7eS+Emzsd34U=
Subject key identifier:   10:7C:E0:6C:79:2B:8B:3B:2B:E7:DE:3D:E0:B8:89:09:45:8B:C2:EA
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584F63F8105BE282B0634E327F00
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a5fcfa9-a4e9-36aa-8fd9-dfc15ec15281.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     14593
IP address blocks:        153.66.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:10:5b:e2:82:b0:63:4e:32:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=96e26e08-12c0-405a-b63d-ea8ccfbc26ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:7f:06:f5:29:88:8d:53:0c:71:43:8f:36:
                    40:cd:e9:1d:dd:43:c5:08:86:74:0b:c2:e1:df:5f:
                    e2:4c:a9:8c:ef:2a:f7:16:f7:a3:c7:9d:7d:a0:2b:
                    cc:05:2b:78:b7:f9:6b:68:32:bb:76:58:cc:37:c2:
                    fa:9c:37:c5:21:ac:cb:30:1b:3d:94:29:ee:88:bf:
                    b9:38:5d:96:8b:2f:a1:ea:4b:74:f8:4e:15:91:18:
                    2f:d6:1c:d1:cd:91:c0:fb:a7:4a:fb:2e:31:53:54:
                    41:5c:4e:08:c8:52:59:47:c3:2b:ef:bf:a6:50:9d:
                    d7:70:54:e6:04:d5:5d:23:91:91:4d:8b:23:f4:fa:
                    22:b8:22:6c:e4:76:41:8f:93:ab:45:8d:f7:42:70:
                    39:c5:f3:c0:2f:05:fd:26:2c:93:53:97:43:41:d6:
                    e2:b0:f0:98:74:d2:3e:ce:44:1d:58:82:f3:56:f2:
                    fb:38:57:4e:55:6d:88:51:08:64:3a:f3:de:71:d6:
                    f7:9e:bc:f3:bf:3e:a1:20:bd:8d:ac:ba:23:c9:f4:
                    cc:eb:b3:43:f2:ed:44:61:10:8d:88:04:c9:a4:59:
                    0e:8a:b4:e0:92:00:54:5f:8d:57:0d:7a:51:19:41:
                    58:51:48:dc:29:2c:af:6f:de:7f:63:c7:49:65:57:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:E0:6C:79:2B:8B:3B:2B:E7:DE:3D:E0:B8:89:09:45:8B:C2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a5fcfa9-a4e9-36aa-8fd9-dfc15ec15281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.66.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:59:62:a5:e8:4c:ce:d7:ce:b7:e1:34:06:ac:0c:16:02:ee:
         e7:3d:a0:eb:c6:1b:7c:86:f0:81:37:f7:8f:aa:8a:ca:c7:89:
         ba:1a:e4:2c:85:bc:a2:ba:b9:16:b4:11:52:a2:76:fa:89:41:
         08:d4:00:4b:12:00:dc:a7:f8:9a:6f:fe:f4:0e:c1:ef:21:72:
         df:6c:e2:c5:fa:1f:75:00:9b:1d:48:89:ae:04:9d:6e:a9:eb:
         15:26:e9:72:b9:6a:6d:04:3b:79:1d:26:68:cb:43:b8:c7:09:
         8a:21:fc:56:28:03:e3:a3:90:cb:7e:97:48:b6:a7:5d:07:09:
         35:4e:dd:83:e8:a5:17:fd:29:5b:34:1e:0a:b5:38:03:fd:d5:
         31:a9:f3:92:3c:d2:5e:f4:d6:96:aa:c6:cf:49:76:1b:f9:93:
         96:e9:00:a8:64:f0:4b:d3:e8:3a:a2:57:57:5e:7e:3b:44:31:
         e3:c0:00:9d:d9:3e:12:fb:f8:24:5a:0d:b6:fb:0a:50:92:80:
         77:6f:14:f0:3f:e0:be:0e:af:42:79:6e:84:74:86:9d:6f:16:
         6f:ba:c4:f2:65:fc:1d:f0:d0:ea:ad:48:08:8b:33:d7:b8:f8:
         9c:0c:d5:c2:e9:e1:9b:b5:3a:fb:cf:08:60:f7:40:af:ec:92:
         91:f7:37:9f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9j+BBb4oKwY04yfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
OTZlMjZlMDgtMTJjMC00MDVhLWI2M2QtZWE4Y2NmYmMyNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfh/BvUpiI1TDHFDjzZAzekd3UPFCIZ0C8Lh
31/iTKmM7yr3Fvejx519oCvMBSt4t/lraDK7dljMN8L6nDfFIazLMBs9lCnuiL+5
OF2Wiy+h6kt0+E4VkRgv1hzRzZHA+6dK+y4xU1RBXE4IyFJZR8Mr77+mUJ3XcFTm
BNVdI5GRTYsj9PoiuCJs5HZBj5OrRY33QnA5xfPALwX9JiyTU5dDQdbisPCYdNI+
zkQdWILzVvL7OFdOVW2IUQhkOvPecdb3nrzzvz6hIL2NrLojyfTM67ND8u1EYRCN
iATJpFkOirTgkgBUX41XDXpRGUFYUUjcKSyvb95/Y8dJZVeSSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBB84Gx5K4s7K+fePeC4iQlFi8LqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvMmE1ZmNmYTktYTRlOS0z
NmFhLThmZDktZGZjMTVlYzE1MjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBmUIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU1lipehMztfOt+E0BqwMFgLu5z2g68YbfIbwgTf3j6qKyseJuhrkLIW8
orq5FrQRUqJ2+olBCNQASxIA3Kf4mm/+9A7B7yFy32zixfofdQCbHUiJrgSdbqnr
FSbpcrlqbQQ7eR0maMtDuMcJiiH8VigD46OQy36XSLanXQcJNU7dg+ilF/0pWzQe
CrU4A/3VManzkjzSXvTWlqrGz0l2G/mTlukAqGTwS9PoOqJXV15+O0Qx48AAndk+
Evv4JFoNtvsKUJKAd28U8D/gvg6vQnluhHSGnW8Wb7rE8mX8HfDQ6q1ICIsz17j4
nAzVwunhm7U6+88IYPdAr+ySkfc3nw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:41:29 2026 by rpki-client