Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/143b3194-ec19-3fcb-a3eb-7ea486b3ec0c.roa
File:                     143b3194-ec19-3fcb-a3eb-7ea486b3ec0c.roa (raw, json)
Hash identifier:          RLhil3LlelOPhu5+aqfm2rRQUT8J9G7rvP/LcizwhrY=
Subject key identifier:   25:58:B4:0F:C1:6C:65:DA:99:9F:59:F8:ED:B4:10:C2:91:0E:7C:1D
Certificate issuer:       /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Certificate serial:       010D0C9F4328584FAB289752DE045BCD4628B340
Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/143b3194-ec19-3fcb-a3eb-7ea486b3ec0c.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     3561
IP address blocks:        66.207.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:97:52:de:04:5b:cd:46:28:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=8bf7db26-04a9-42d3-b8ad-9cb1b9b80859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:c2:20:37:e0:3d:80:72:65:fb:d1:24:60:
                    49:9b:77:f5:e6:cb:64:51:ee:a2:34:af:4b:7e:1f:
                    36:07:2f:ac:37:78:e2:a4:05:6c:1b:e6:6c:ce:37:
                    15:0a:68:6c:ce:04:6b:78:b6:47:1d:60:ce:47:ba:
                    1e:e0:f2:e6:ab:f4:13:47:de:e0:c8:d4:a2:b7:57:
                    9c:f9:07:bb:6e:df:af:69:01:79:d8:53:7a:25:e4:
                    25:ab:98:3f:2a:21:14:12:47:95:5f:47:07:b4:5d:
                    d3:24:78:c8:07:bf:42:5f:6c:d7:9c:7e:ef:a1:65:
                    5f:77:c6:e0:aa:78:8f:a9:4c:ad:a4:27:2b:23:63:
                    9c:7a:10:b7:ca:1a:d3:03:25:ab:be:95:2c:a8:92:
                    15:17:c1:e8:f9:49:2d:e8:76:13:65:79:3a:c7:90:
                    1f:e4:aa:5b:52:25:4a:a3:96:03:cc:80:e9:89:e2:
                    b5:bd:3e:68:4c:a9:ae:79:18:8d:43:a5:8d:c6:ca:
                    34:0e:2d:00:22:0b:87:e8:f8:6e:6d:78:2f:82:87:
                    03:f9:39:7a:64:59:ab:0c:d7:4e:f7:eb:d3:02:e0:
                    cf:04:2f:45:65:4d:2b:d7:a6:a7:15:44:27:31:03:
                    8a:d8:fd:21:47:44:27:70:51:0a:73:9b:60:8a:9b:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:B4:0F:C1:6C:65:DA:99:9F:59:F8:ED:B4:10:C2:91:0E:7C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/143b3194-ec19-3fcb-a3eb-7ea486b3ec0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl

            X509v3 Authority Key Identifier:
                keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:43:15:9b:7e:93:9a:78:03:0a:3a:4c:2f:76:54:b5:0f:84:
         b6:cc:e5:52:25:dd:6e:11:d6:40:b9:7f:92:ec:89:67:ba:0a:
         87:eb:51:14:6e:18:de:08:e7:e8:d4:21:20:46:a3:d6:f4:5f:
         bd:d1:b5:a8:16:3e:74:79:2e:05:e7:64:00:2e:6b:4f:7c:ea:
         c9:0e:f8:d4:d4:58:42:30:58:f6:a3:28:79:cf:1f:9a:89:26:
         42:6f:40:6a:30:9d:b7:61:df:d3:79:fc:cd:fc:60:71:e5:ec:
         b0:e7:47:48:19:14:3b:f4:85:ba:7f:99:e6:83:d8:1a:77:14:
         aa:79:41:d1:ac:a0:f1:2f:2f:d6:d9:78:2e:32:7a:7c:32:07:
         0b:9c:01:45:4b:25:54:8f:e3:b8:13:cc:eb:46:e3:ca:c4:eb:
         96:a7:88:fb:ea:9d:29:55:e5:01:81:09:cf:0d:cf:57:e4:9b:
         1f:6f:8f:a2:11:4c:15:ff:30:cb:1b:69:df:16:f0:d9:fd:98:
         ae:0d:ce:79:68:46:93:0e:75:45:c3:b4:ae:5d:d8:14:1d:e2:
         9b:a8:c6:0a:70:be:eb:ec:92:68:a0:e3:5e:97:29:2f:ff:0a:
         f3:b4:e0:6d:ad:84:f5:93:e4:0f:01:81:1d:aa:4c:7c:53:ab:
         29:9f:75:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKJdS3gRbzUYos0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk
YjYwMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk
OGJmN2RiMjYtMDRhOS00MmQzLWI4YWQtOWNiMWI5YjgwODU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCvCIDfgPYByZfvRJGBJm3f15stkUe6iNK9L
fh82By+sN3jipAVsG+ZszjcVCmhszgRreLZHHWDOR7oe4PLmq/QTR97gyNSit1ec
+Qe7bt+vaQF52FN6JeQlq5g/KiEUEkeVX0cHtF3TJHjIB79CX2zXnH7voWVfd8bg
qniPqUytpCcrI2OcehC3yhrTAyWrvpUsqJIVF8Ho+Ukt6HYTZXk6x5Af5KpbUiVK
o5YDzIDpieK1vT5oTKmueRiNQ6WNxso0Di0AIguH6PhubXgvgocD+Tl6ZFmrDNdO
9+vTAuDPBC9FZU0r16anFUQnMQOK2P0hR0QncFEKc5tgipvEsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVYtA/BbGXamZ9Z+O20EMKRDnwdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvMTQzYjMxOTQtZWMxOS0z
ZmNiLWEzZWItN2VhNDg2YjNlYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj
NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0
ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1
N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARDFZt+k5p4Awo6TC92VLUPhLbM5VIl3W4R1kC5f5LsiWe6CofrURRu
GN4I5+jUISBGo9b0X73RtagWPnR5LgXnZAAua0986skO+NTUWEIwWPajKHnPH5qJ
JkJvQGownbdh39N5/M38YHHl7LDnR0gZFDv0hbp/meaD2Bp3FKp5QdGsoPEvL9bZ
eC4yenwyBwucAUVLJVSP47gTzOtG48rE65aniPvqnSlV5QGBCc8Nz1fkmx9vj6IR
TBX/MMsbad8W8Nn9mK4NznloRpMOdUXDtK5d2BQd4puoxgpwvuvskmig416XKS//
CvO04G2thPWT5A8BgR2qTHxTqymfdXE=
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:39:50 2026 by rpki-client