Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/97434b93-2369-361d-87a9-8a907fb6aaf2.roa
File:                     97434b93-2369-361d-87a9-8a907fb6aaf2.roa (raw, json)
Hash identifier:          RlGCmfgRJr0lL8VpcHp+H9a6RnyEMCNIkkjXHd7VmI0=
Subject key identifier:   E4:FC:75:9B:24:C1:B7:BD:80:9B:02:AB:E0:3E:73:F3:8C:DB:F4:C0
Certificate issuer:       /CN=732f5ebd-63a7-4f6c-94c9-df796a848d66
Certificate serial:       010D0C9F4328584F7E7E09556EA8B770F74BCBC0
Authority key identifier: 4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/97434b93-2369-361d-87a9-8a907fb6aaf2.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     19766
IP address blocks:        66.51.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:09:55:6e:a8:b7:70:f7:4b:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732f5ebd-63a7-4f6c-94c9-df796a848d66
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=9b15a253-0d29-452a-b68f-225066216584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:4d:a5:2f:85:e7:70:af:9e:f6:66:60:5b:
                    57:aa:6d:41:0d:8c:48:87:54:bd:c9:98:57:6b:c5:
                    97:71:95:cf:d0:f0:8a:6d:b3:ac:df:c8:30:b0:97:
                    a4:fc:c4:98:85:6b:95:9c:e1:1f:0a:04:3f:e4:68:
                    dd:c1:38:ae:71:a5:6d:41:06:52:18:0e:a4:2a:61:
                    53:c3:68:e1:34:46:db:20:25:23:61:c5:d9:f6:10:
                    c2:46:ab:95:9f:b3:5a:9e:44:e7:25:fc:6e:20:30:
                    c1:dc:e4:de:67:f9:ba:17:76:d1:1f:d7:85:da:ff:
                    b7:7d:4d:8a:27:de:0b:da:af:c2:cc:33:d9:28:ed:
                    c0:af:2a:ff:2a:e2:ff:04:e3:a7:ee:1f:f4:87:b2:
                    16:82:87:3a:8c:0e:36:ae:30:83:8c:b8:8f:84:61:
                    f6:5f:c8:24:51:f4:24:66:2d:24:c1:bc:34:4b:48:
                    8d:89:97:5d:d3:03:3b:7e:ae:b0:8c:a3:72:20:2c:
                    30:04:a4:76:4c:1f:c8:22:4e:d1:d7:29:fe:79:8c:
                    c4:0f:be:38:cb:60:04:29:00:97:3c:5e:63:c3:90:
                    84:bd:88:eb:93:78:cc:6c:05:78:5c:c8:12:b8:3a:
                    98:1e:c7:9b:be:c6:39:74:76:ed:1a:16:83:73:eb:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:75:9B:24:C1:B7:BD:80:9B:02:AB:E0:3E:73:F3:8C:DB:F4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/97434b93-2369-361d-87a9-8a907fb6aaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.crl

            X509v3 Authority Key Identifier:
                keyid:4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:27:5a:bc:fa:3b:89:09:42:14:93:f0:33:fa:bb:53:f1:4e:
         49:f4:f5:97:73:3e:3d:ab:02:4f:52:15:87:46:7f:f9:ae:be:
         5c:1e:5d:38:1b:2b:e5:61:a8:76:3d:3d:96:5d:bf:b3:68:09:
         01:d6:6c:81:54:5b:08:22:31:71:dc:5a:0e:5e:a9:f1:b2:4a:
         77:85:3d:52:08:b6:59:71:1d:7f:05:ed:c1:54:a6:f2:6a:3e:
         a4:bb:c9:aa:47:3f:d6:e4:57:35:00:3a:4e:99:a2:e2:60:62:
         19:7d:54:ed:67:3c:9b:0d:d9:32:0f:a5:b0:a6:f5:88:63:c5:
         c8:d0:64:b7:30:3e:fe:46:fd:d2:98:51:c9:f5:05:8f:e0:bf:
         17:a1:70:44:eb:79:87:ab:f1:67:eb:f4:c5:b0:fd:c7:a3:16:
         77:bb:a9:c1:f7:01:42:b6:58:1f:04:47:7c:a7:a1:e1:83:83:
         4a:3e:f9:37:c3:24:4f:00:02:84:49:c1:5d:c8:f5:41:bf:83:
         b1:fa:85:b8:1b:66:d5:af:aa:26:94:0d:35:29:d8:0c:99:a5:
         f6:84:8a:45:a4:79:31:42:d1:17:dd:e0:59:db:f3:0f:7d:97:
         79:c9:5c:e6:87:34:e1:16:0f:52:48:1a:6e:11:80:cf:f9:18:
         a8:db:44:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fglVbqi3cPdLy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyZjVlYmQtNjNhNy00ZjZjLTk0YzktZGY3OTZhODQ4
ZDY2MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
OWIxNWEyNTMtMGQyOS00NTJhLWI2OGYtMjI1MDY2MjE2NTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMZNpS+F53CvnvZmYFtXqm1BDYxIh1S9yZhX
a8WXcZXP0PCKbbOs38gwsJek/MSYhWuVnOEfCgQ/5GjdwTiucaVtQQZSGA6kKmFT
w2jhNEbbICUjYcXZ9hDCRquVn7NankTnJfxuIDDB3OTeZ/m6F3bRH9eF2v+3fU2K
J94L2q/CzDPZKO3Aryr/KuL/BOOn7h/0h7IWgoc6jA42rjCDjLiPhGH2X8gkUfQk
Zi0kwbw0S0iNiZdd0wM7fq6wjKNyICwwBKR2TB/IIk7R1yn+eYzED744y2AEKQCX
PF5jw5CEvYjrk3jMbAV4XMgSuDqYHsebvsY5dHbtGhaDc+u6QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT8dZskwbe9gJsCq+A+c/OM2/TAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83MzJm
NWViZC02M2E3LTRmNmMtOTRjOS1kZjc5NmE4NDhkNjYvOTc0MzRiOTMtMjM2OS0z
NjFkLTg3YTktOGE5MDdmYjZhYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzMyZjVlYmQtNjNhNy00ZjZjLTk0
YzktZGY3OTZhODQ4ZDY2LzczMmY1ZWJkLTYzYTctNGY2Yy05NGM5LWRmNzk2YTg0
OGQ2Ni5jcmwwHwYDVR0jBBgwFoAUTFRv0vqNswx9IJw63nBsmWpkEiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83MzJmNWViZC02M2E3LTRmNmMtOTRjOS1kZjc5
NmE4NDhkNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAknWrz6O4kJQhST8DP6u1PxTkn09ZdzPj2rAk9SFYdGf/muvlweXTgb
K+VhqHY9PZZdv7NoCQHWbIFUWwgiMXHcWg5eqfGySneFPVIItllxHX8F7cFUpvJq
PqS7yapHP9bkVzUAOk6ZouJgYhl9VO1nPJsN2TIPpbCm9YhjxcjQZLcwPv5G/dKY
Ucn1BY/gvxehcETreYer8Wfr9MWw/cejFne7qcH3AUK2WB8ER3ynoeGDg0o++TfD
JE8AAoRJwV3I9UG/g7H6hbgbZtWvqiaUDTUp2AyZpfaEikWkeTFC0Rfd4Fnb8w99
l3nJXOaHNOEWD1JIGm4RgM/5GKjbRHc=
-----END CERTIFICATE-----
Generated at Sun Oct 25 15:54:06 2026 by rpki-client