Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5d6094e8-c9c6-3933-b43e-59d8cd4fb108.roa
File:                     5d6094e8-c9c6-3933-b43e-59d8cd4fb108.roa (raw, json)
Hash identifier:          8BDbprExTRz3qGa/RCYPYrfBc2MLY+r8EERF/zuzTXU=
Subject key identifier:   9A:8C:01:31:CB:E3:99:27:20:45:B1:8E:CE:0D:C0:52:C0:7A:73:5D
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D4D5A787879FBAB32FB277AD0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5d6094e8-c9c6-3933-b43e-59d8cd4fb108.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16696
IP address blocks:        66.255.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:78:78:79:fb:ab:32:fb:27:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=5b68e82e-8d19-47ea-bcab-51f776249ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:bc:1b:06:86:51:dd:92:f6:1d:ba:a7:47:
                    55:7a:28:e2:41:d4:56:d5:8a:1e:ee:1b:e1:1d:24:
                    20:80:d9:d0:73:de:8e:31:79:73:8e:67:81:ea:4b:
                    62:74:e6:e7:6f:39:09:33:f8:42:0f:a3:d8:af:cf:
                    28:6b:da:0e:9b:17:1f:99:5a:b3:2e:71:e6:67:be:
                    a2:a0:ca:3f:a0:0a:6f:5e:b2:e3:3f:4e:f0:03:87:
                    24:12:db:f9:17:a4:08:89:29:01:85:ea:04:c1:08:
                    ae:8e:d1:55:17:c1:2b:64:9c:f6:1e:8f:55:0f:cb:
                    4a:d9:3d:11:a1:2a:78:18:28:c2:52:b4:18:a3:eb:
                    1c:eb:19:d9:2b:85:59:04:a8:8e:68:bf:b6:a0:c0:
                    55:ce:00:9c:8b:bd:ff:6f:c1:10:56:df:07:57:50:
                    2a:85:28:ff:87:b1:ed:f7:fa:3d:3a:d0:d6:be:98:
                    c9:ad:9b:fc:c0:00:cc:1d:90:8a:94:b8:56:55:ff:
                    e0:e0:77:05:47:62:65:ed:92:13:ee:ab:b4:ca:50:
                    2a:10:f0:77:80:6e:ef:5c:4c:43:d3:4b:74:b4:c3:
                    b5:6f:0f:33:6c:77:0f:23:da:45:f2:f8:8d:61:7f:
                    18:14:06:77:d4:57:aa:ff:0a:39:24:5b:64:7a:98:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:01:31:CB:E3:99:27:20:45:B1:8E:CE:0D:C0:52:C0:7A:73:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5d6094e8-c9c6-3933-b43e-59d8cd4fb108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.255.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:ed:8e:bd:9d:8c:aa:0c:7e:d4:c2:bb:c3:7e:19:1a:13:
         dd:df:a8:92:7c:67:f2:c9:1c:37:f5:e3:53:ba:0e:99:31:d1:
         d8:b2:a4:dd:2f:82:d0:c5:96:49:27:11:5f:8c:df:8e:22:b6:
         7f:5e:8f:89:c4:84:90:5a:42:b1:1c:84:9e:c2:c8:79:ea:3c:
         c1:11:c7:c0:c6:35:3d:ec:72:f9:da:38:5a:1f:f2:af:fa:05:
         c3:de:8c:79:55:db:c2:84:0d:f4:16:19:5a:63:7e:77:64:80:
         eb:64:1d:bd:ed:0c:0a:47:dc:75:15:cc:ed:e3:fb:69:50:c0:
         9b:60:c1:60:ef:9e:72:a8:b9:f8:fc:37:58:a3:fc:58:30:18:
         02:74:69:c5:2e:9e:b6:49:85:4a:99:59:b4:cc:cd:5f:c8:a4:
         91:56:d9:6a:13:d1:58:89:57:41:f2:8a:f6:92:87:1d:9d:62:
         48:14:a4:8f:d2:de:21:8d:65:ff:d2:4e:8b:ec:1c:a8:5a:ff:
         06:fe:d9:93:c1:95:c2:17:86:c1:f9:ee:19:4e:f4:9e:6b:d4:
         b6:a9:b9:13:d7:7c:3f:d6:ef:51:a7:a6:0f:96:44:81:b5:52:
         a9:d9:12:e3:24:0f:fe:88:a9:24:00:b0:de:a9:3c:a0:68:ec:
         17:79:f7:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnh4efurMvsnetAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
NWI2OGU4MmUtOGQxOS00N2VhLWJjYWItNTFmNzc2MjQ5ZmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdm8GwaGUd2S9h26p0dVeijiQdRW1Yoe7hvh
HSQggNnQc96OMXlzjmeB6ktidObnbzkJM/hCD6PYr88oa9oOmxcfmVqzLnHmZ76i
oMo/oApvXrLjP07wA4ckEtv5F6QIiSkBheoEwQiujtFVF8ErZJz2Ho9VD8tK2T0R
oSp4GCjCUrQYo+sc6xnZK4VZBKiOaL+2oMBVzgCci73/b8EQVt8HV1AqhSj/h7Ht
9/o9OtDWvpjJrZv8wADMHZCKlLhWVf/g4HcFR2Jl7ZIT7qu0ylAqEPB3gG7vXExD
00t0tMO1bw8zbHcPI9pF8viNYX8YFAZ31Feq/wo5JFtkepiUbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqMATHL45knIEWxjs4NwFLAenNdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNWQ2MDk0ZTgtYzljNi0z
OTMzLWI0M2UtNTlkOGNkNGZiMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv/OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIj67Y69nYyqDH7UwrvDfhkaE93fqJJ8Z/LJHDf141O6Dpkx0diypN0v
gtDFlkknEV+M344itn9ej4nEhJBaQrEchJ7CyHnqPMERx8DGNT3scvnaOFof8q/6
BcPejHlV28KEDfQWGVpjfndkgOtkHb3tDApH3HUVzO3j+2lQwJtgwWDvnnKoufj8
N1ij/FgwGAJ0acUunrZJhUqZWbTMzV/IpJFW2WoT0ViJV0HyivaShx2dYkgUpI/S
3iGNZf/STovsHKha/wb+2ZPBlcIXhsH57hlO9J5r1LapuRPXfD/W71Gnpg+WRIG1
UqnZEuMkD/6IqSQAsN6pPKBo7Bd596o=
-----END CERTIFICATE-----
Generated at Thu Apr 2 22:39:38 2026 by rpki-client