Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c4d2bb2-5170-3cad-8d60-74fd91cc4118.roa
File:                     3c4d2bb2-5170-3cad-8d60-74fd91cc4118.roa (raw, json)
Hash identifier:          fo6tWYPuPHGH4kX/ifIFsq2xb3vytBk0dU1W9YsBvKs=
Subject key identifier:   E5:8B:79:58:68:C3:DC:8C:65:66:6D:69:23:77:F5:F8:73:A9:4A:D8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E5E0369695C1441119463C380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c4d2bb2-5170-3cad-8d60-74fd91cc4118.roa
Signing time:             Thu 02 Jul 2026 17:01:22 +0000
ROA not before:           Thu 02 Jul 2026 17:01:22 +0000
ROA not after:            Wed 30 Sep 2026 17:01:22 +0000
asID:                     401152
IP address blocks:        199.115.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:03:69:69:5c:14:41:11:94:63:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  2 17:01:22 2026 GMT
            Not After : Sep 30 17:01:22 2026 GMT
        Subject: CN=ba111786-3d4e-4459-8ee0-8f250d6fdd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:6c:6b:94:bd:35:c3:10:2e:be:fa:31:e5:
                    63:6e:81:64:c4:73:5d:5f:cc:a3:40:57:17:67:66:
                    b5:eb:10:9e:3f:a4:b9:02:b2:b6:c9:3f:64:96:82:
                    22:a0:61:ea:2c:1c:53:c4:ee:89:58:17:76:b8:ec:
                    33:f3:a4:a2:b9:f3:04:5c:51:25:0c:c5:0d:9d:50:
                    0f:98:bb:58:ff:e2:b7:57:c3:df:ec:9d:bb:8a:01:
                    ab:b4:25:5e:77:e9:94:06:c5:55:25:7e:49:83:8a:
                    7b:19:a8:98:29:b5:32:a2:d0:2a:e9:a4:c9:48:f1:
                    f2:05:92:ac:57:62:56:35:7c:3d:3a:7d:39:26:a9:
                    48:f5:30:3a:86:27:ee:b2:88:f7:8b:a3:c1:b7:c9:
                    76:11:d2:93:be:27:e4:8a:88:7e:77:76:02:a5:70:
                    91:4b:48:da:f1:68:b9:c0:bd:af:8c:96:bc:93:75:
                    ee:cb:f4:ed:5b:0c:c1:1d:fb:cf:2b:55:08:01:97:
                    7f:7c:1d:60:72:52:68:5e:53:24:07:6f:0b:b8:a7:
                    5e:3c:2c:02:c3:7f:88:05:8e:28:71:0f:cc:8e:85:
                    06:e5:64:d0:f2:88:b4:0a:ef:a5:f3:a3:ac:13:1a:
                    98:7a:2f:dd:b4:5a:98:c5:e0:60:b0:e4:70:8a:56:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8B:79:58:68:C3:DC:8C:65:66:6D:69:23:77:F5:F8:73:A9:4A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c4d2bb2-5170-3cad-8d60-74fd91cc4118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:8a:df:a6:a2:1e:9a:70:fa:fe:08:ae:cd:20:4d:42:28:
         35:8d:12:c8:ed:57:cd:8d:6f:38:8e:f2:89:74:ef:35:04:14:
         7b:a2:0e:92:47:d1:75:bf:91:3c:73:ab:15:7c:12:76:fb:ab:
         80:c7:44:34:f4:52:48:ae:83:5b:53:af:cf:5d:97:c3:fc:2e:
         0b:5e:86:89:d0:16:e1:a5:a5:08:83:42:06:df:cb:ea:2a:33:
         be:63:b7:a8:9a:a6:d2:07:e2:14:0a:85:87:73:15:ee:95:c2:
         40:63:90:17:49:f6:6a:01:eb:2c:74:40:fd:dc:2a:80:3b:29:
         99:11:f1:c3:0e:02:99:c6:da:64:1d:47:0f:13:cb:7e:a8:6c:
         e6:59:ec:e5:cf:90:4b:73:97:13:59:ea:5c:84:49:68:ea:ae:
         1d:32:c0:9b:58:15:d2:57:6f:61:77:46:34:3d:47:12:34:d2:
         e2:0a:6e:a1:6c:88:2e:85:d1:b3:dd:4f:62:08:02:cc:bf:b0:
         27:9a:37:aa:01:cb:8a:a4:74:59:9f:b8:a9:91:81:18:7a:88:
         3a:45:2a:1a:e9:de:49:40:a1:c6:6e:08:85:ea:3c:02:18:7f:
         22:55:83:bf:f5:f4:de:2f:e4:a3:a0:86:10:29:58:1c:cc:27:
         b2:ac:d8:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eA2lpXBRBEZRjw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcwMjE3MDEyMloXDTI2MDkzMDE3MDEyMlowLzEtMCsGA1UEAxMk
YmExMTE3ODYtM2Q0ZS00NDU5LThlZTAtOGYyNTBkNmZkZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlydsa5S9NcMQLr76MeVjboFkxHNdX8yjQFcX
Z2a16xCeP6S5ArK2yT9kloIioGHqLBxTxO6JWBd2uOwz86SiufMEXFElDMUNnVAP
mLtY/+K3V8Pf7J27igGrtCVed+mUBsVVJX5Jg4p7GaiYKbUyotAq6aTJSPHyBZKs
V2JWNXw9On05JqlI9TA6hifusoj3i6PBt8l2EdKTvifkioh+d3YCpXCRS0ja8Wi5
wL2vjJa8k3Xuy/TtWwzBHfvPK1UIAZd/fB1gclJoXlMkB28LuKdePCwCw3+IBY4o
cQ/MjoUG5WTQ8oi0Cu+l86OsExqYei/dtFqYxeBgsORwilbIiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWLeVhow9yMZWZtaSN39fhzqUrYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2M0ZDJiYjItNTE3MC0z
Y2FkLThkNjAtNzRmZDkxY2M0MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3PCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9Fit+moh6acPr+CK7NIE1CKDWNEsjtV82NbziO8ol07zUEFHuiDpJH
0XW/kTxzqxV8Enb7q4DHRDT0Ukiug1tTr89dl8P8LgtehonQFuGlpQiDQgbfy+oq
M75jt6iaptIH4hQKhYdzFe6VwkBjkBdJ9moB6yx0QP3cKoA7KZkR8cMOApnG2mQd
Rw8Ty36obOZZ7OXPkEtzlxNZ6lyESWjqrh0ywJtYFdJXb2F3RjQ9RxI00uIKbqFs
iC6F0bPdT2IIAsy/sCeaN6oBy4qkdFmfuKmRgRh6iDpFKhrp3klAocZuCIXqPAIY
fyJVg7/19N4v5KOghhApWBzMJ7Ks2GI=
-----END CERTIFICATE-----
Generated at Fri Jul 3 02:25:19 2026 by rpki-client