Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66fc1495-cfaa-3a6f-a07a-64876a931cbc.roa
File:                     66fc1495-cfaa-3a6f-a07a-64876a931cbc.roa (raw, json)
Hash identifier:          CJoD7fpoZyulMZuCHplFXYeG6yhy64HhLJT1EZq7KC8=
Subject key identifier:   D3:38:AD:AD:C9:91:7A:8B:78:A0:22:3C:12:BA:21:EF:04:1A:BD:35
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F63F828CB2D8D716D35B848C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66fc1495-cfaa-3a6f-a07a-64876a931cbc.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     25485
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:28:cb:2d:8d:71:6d:35:b8:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=c5136b91-7642-4f43-a6ad-d3011b0ec804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:f4:75:c9:a4:b0:87:a1:20:72:09:19:54:
                    38:a8:73:89:e6:d3:d8:4d:31:72:24:c9:95:95:ff:
                    81:75:72:c8:15:b4:3d:c7:bf:75:72:b6:80:a2:75:
                    60:f5:1d:5e:d8:3b:f8:36:d1:4e:9b:52:46:36:df:
                    e2:7b:7b:ff:d5:55:c0:f5:13:e9:15:4e:bc:b2:aa:
                    c5:64:d5:1d:63:b5:d6:ae:76:61:38:41:a5:cd:98:
                    b3:e4:1f:0d:db:20:6d:06:31:17:49:f9:20:23:5a:
                    2d:db:76:c7:56:a6:c9:45:9e:39:32:71:aa:27:25:
                    61:8e:87:0c:19:0d:b8:80:ac:2c:37:2e:52:27:d8:
                    c2:dc:00:7b:77:0e:4e:03:fe:f7:ee:bc:1e:7c:63:
                    f6:a3:03:40:75:ab:3f:fc:da:10:6c:e6:e8:95:e7:
                    f9:77:9e:66:e1:98:55:4c:75:60:96:3d:f2:ba:71:
                    5d:aa:2d:cf:68:8a:a7:c6:87:d1:c6:d1:4e:40:e4:
                    f3:cf:b6:3b:de:12:89:9c:2e:36:1b:f6:b0:0a:15:
                    44:55:df:e6:d6:f4:6e:38:28:50:4e:bc:13:0a:ea:
                    1c:cb:45:82:62:60:67:d7:62:12:78:d2:a8:31:d6:
                    f2:ab:9e:08:da:ae:4b:32:b7:88:90:41:5d:6f:e5:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:38:AD:AD:C9:91:7A:8B:78:A0:22:3C:12:BA:21:EF:04:1A:BD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66fc1495-cfaa-3a6f-a07a-64876a931cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:62:27:dc:5c:cc:2c:00:24:0a:9f:1a:b0:55:1b:6f:eb:09:
         90:cc:a4:2a:b0:ec:93:50:d6:79:26:a3:a3:32:31:1a:9d:a3:
         07:fc:09:af:76:15:01:10:89:69:93:46:f2:42:d8:92:4a:70:
         16:7f:5e:90:ce:2d:76:45:3f:39:9f:d0:38:49:9d:d8:db:06:
         2c:d1:f4:f1:74:99:dd:0e:7d:62:87:e5:77:bf:7b:54:b0:56:
         13:31:d5:ec:e1:d0:dc:47:0e:cd:58:d3:00:c3:61:62:9e:92:
         79:66:ce:69:b1:33:c7:96:4b:14:6c:19:37:3f:0a:ae:7b:38:
         b9:82:2f:ad:ac:3b:14:78:a5:e8:76:06:18:cd:ba:d7:b8:2c:
         82:b9:6e:ac:0d:d8:a4:c5:15:2e:f2:1b:2d:9d:0a:eb:fd:81:
         89:94:3f:87:b5:d2:9b:ee:be:6d:c7:56:1f:7b:d3:e2:c8:23:
         ea:b0:c8:9a:90:ff:47:39:72:b9:00:90:5b:c3:2c:51:73:0d:
         0f:62:42:d7:d8:64:db:ad:bd:51:51:23:f9:36:95:44:36:ea:
         cc:f5:61:e6:66:26:48:99:c0:6f:84:f5:09:b5:89:c6:8b:b1:
         c9:3f:1a:95:6b:d0:42:4f:a3:b2:9c:06:93:8d:c7:22:95:6c:
         7c:8f:19:a2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CjLLY1xbTW4SMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
YzUxMzZiOTEtNzY0Mi00ZjQzLWE2YWQtZDMwMTFiMGVjODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Bj0dcmksIehIHIJGVQ4qHOJ5tPYTTFyJMmV
lf+BdXLIFbQ9x791craAonVg9R1e2Dv4NtFOm1JGNt/ie3v/1VXA9RPpFU68sqrF
ZNUdY7XWrnZhOEGlzZiz5B8N2yBtBjEXSfkgI1ot23bHVqbJRZ45MnGqJyVhjocM
GQ24gKwsNy5SJ9jC3AB7dw5OA/737rwefGP2owNAdas//NoQbObolef5d55m4ZhV
THVglj3yunFdqi3PaIqnxofRxtFOQOTzz7Y73hKJnC42G/awChVEVd/m1vRuOChQ
TrwTCuocy0WCYmBn12ISeNKoMdbyq54I2q5LMreIkEFdb+UQeQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNM4ra3JkXqLeKAiPBK6Ie8EGr01MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjZmYzE0OTUtY2ZhYS0z
YTZmLWEwN2EtNjQ4NzZhOTMxY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQARYifcXMwsACQKnxqwVRtv6wmQzKQqsOyTUNZ5JqOjMjEanaMH/Amv
dhUBEIlpk0byQtiSSnAWf16Qzi12RT85n9A4SZ3Y2wYs0fTxdJndDn1ih+V3v3tU
sFYTMdXs4dDcRw7NWNMAw2FinpJ5Zs5psTPHlksUbBk3Pwquezi5gi+trDsUeKXo
dgYYzbrXuCyCuW6sDdikxRUu8hstnQrr/YGJlD+HtdKb7r5tx1Yfe9PiyCPqsMia
kP9HOXK5AJBbwyxRcw0PYkLX2GTbrb1RUSP5NpVENurM9WHmZiZImcBvhPUJtYnG
i7HJPxqVa9BCT6OynAaTjccilWx8jxmi
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:55:08 2026 by rpki-client