Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/798305ac-12d2-3ac7-812a-cdb8b62c35d7.roa
File:                     798305ac-12d2-3ac7-812a-cdb8b62c35d7.roa (raw, json)
Hash identifier:          FS+O3kEoST66I9Ahjno6uMtacUSARw7rucae4/tR2Vc=
Subject key identifier:   33:38:AA:E4:3A:CD:DE:71:33:9E:CF:D9:CC:6F:8B:4A:10:2F:1D:A3
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F497493DAEB0813B5E63B57C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/798305ac-12d2-3ac7-812a-cdb8b62c35d7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     209
IP address blocks:        66.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:93:da:eb:08:13:b5:e6:3b:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=947f2b0d-23f9-4c60-bb37-02713bf8582c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:e9:91:41:61:5a:89:95:05:45:4c:53:f8:
                    2d:d4:75:ec:05:54:99:10:1e:15:7d:b2:3f:c3:9e:
                    ab:8e:e3:c2:dd:fe:2f:1d:d8:30:b1:33:4b:f7:0b:
                    e0:a6:b2:c1:9c:70:b5:82:94:14:df:77:00:53:84:
                    ad:8a:55:79:f7:46:74:52:fa:e2:fc:62:4e:db:ac:
                    fb:26:5a:2e:d1:d3:f4:29:3a:74:38:cd:a5:98:f3:
                    51:5c:03:05:25:cd:37:8e:a3:e9:61:52:da:04:a6:
                    03:e5:b0:e0:25:d3:7c:8e:21:d6:bd:62:5a:f0:52:
                    3b:66:3a:42:b2:dd:bc:9b:45:23:0a:0c:c9:c3:ee:
                    25:45:12:e0:bc:e8:a8:24:1f:04:cf:42:bd:dc:5b:
                    f2:c4:8e:f8:09:78:89:d0:f1:81:d4:3c:c5:b0:cf:
                    42:06:c3:ec:a5:5b:54:b1:21:fe:d7:2f:79:e9:83:
                    29:ef:c0:dc:3b:5b:4a:f5:a9:e8:09:0e:ed:d3:10:
                    a3:f3:46:17:2a:d8:4d:c0:62:0e:8e:7d:54:51:5a:
                    42:07:8e:76:f8:bb:fd:76:36:5e:ff:ce:94:c6:55:
                    b0:f1:76:0e:b6:93:2e:cf:0d:c7:ff:be:a1:ed:e2:
                    b2:50:82:1b:b0:e7:01:6e:23:88:5b:c1:3f:f4:41:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:AA:E4:3A:CD:DE:71:33:9E:CF:D9:CC:6F:8B:4A:10:2F:1D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/798305ac-12d2-3ac7-812a-cdb8b62c35d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:88:1c:c2:07:45:ed:aa:3a:c8:d5:b8:12:f7:f9:3e:69:
         a8:2a:2b:e0:21:03:71:d9:14:50:89:e8:91:f4:39:48:82:6d:
         71:59:c3:61:68:78:6e:1e:b4:a5:41:79:1a:f3:e0:37:10:a7:
         17:b2:dd:d3:21:d6:46:72:d4:c2:45:86:35:8a:d8:30:0d:08:
         bd:1a:92:ec:6f:66:fc:b1:bc:c2:66:74:f3:5e:84:a2:b2:9c:
         1e:49:30:10:c8:f5:58:86:5d:f5:57:b1:82:f0:6e:c0:fc:b6:
         1d:f4:9c:41:36:e8:ae:3c:1b:b2:d5:ae:28:dc:f6:84:5c:94:
         62:3d:19:d6:3d:d5:78:56:25:67:5a:f0:bd:6b:d7:20:da:93:
         d9:80:ac:a2:b5:93:fc:68:b0:de:f4:37:2c:b4:54:bb:e5:b5:
         ce:81:3f:98:b6:95:0b:73:6b:75:8b:63:98:35:4b:ff:b0:41:
         a9:d7:99:e3:63:f3:6f:92:7e:88:d3:b3:12:28:58:35:90:74:
         73:91:a2:ff:4a:ee:a5:c8:35:9c:6d:87:6e:c8:20:19:b5:2d:
         13:12:e2:5a:71:ea:42:52:c4:78:a3:56:18:78:c8:3f:7c:fb:
         d0:96:06:a8:8f:0f:cd:46:ea:03:18:9f:e3:91:cb:fb:49:40:
         9f:4a:36:7d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdJPa6wgTteY7V8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTQ3ZjJiMGQtMjNmOS00YzYwLWJiMzctMDI3MTNiZjg1ODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIjpkUFhWomVBUVMU/gt1HXsBVSZEB4VfbI/
w56rjuPC3f4vHdgwsTNL9wvgprLBnHC1gpQU33cAU4StilV590Z0Uvri/GJO26z7
Jlou0dP0KTp0OM2lmPNRXAMFJc03jqPpYVLaBKYD5bDgJdN8jiHWvWJa8FI7ZjpC
st28m0UjCgzJw+4lRRLgvOioJB8Ez0K93FvyxI74CXiJ0PGB1DzFsM9CBsPspVtU
sSH+1y956YMp78DcO1tK9anoCQ7t0xCj80YXKthNwGIOjn1UUVpCB452+Lv9djZe
/86UxlWw8XYOtpMuzw3H/76h7eKyUIIbsOcBbiOIW8E/9EHzowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDM4quQ6zd5xM57P2cxvi0oQLx2jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNzk4MzA1YWMtMTJkMi0z
YWM3LTgxMmEtY2RiOGI2MmMzNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQlYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPgqIHMIHRe2qOsjVuBL3+T5pqCor4CEDcdkUUInokfQ5SIJtcVnDYWh4
bh60pUF5GvPgNxCnF7Ld0yHWRnLUwkWGNYrYMA0IvRqS7G9m/LG8wmZ0816EorKc
HkkwEMj1WIZd9VexgvBuwPy2HfScQTborjwbstWuKNz2hFyUYj0Z1j3VeFYlZ1rw
vWvXINqT2YCsorWT/Giw3vQ3LLRUu+W1zoE/mLaVC3NrdYtjmDVL/7BBqdeZ42Pz
b5J+iNOzEihYNZB0c5Gi/0rupcg1nG2HbsggGbUtExLiWnHqQlLEeKNWGHjIP3z7
0JYGqI8PzUbqAxif45HL+0lAn0o2fQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:42:39 2026 by rpki-client