Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/dbd5e13d-a6d3-3067-a6b5-db6f42a80a3c.roa
File:                     dbd5e13d-a6d3-3067-a6b5-db6f42a80a3c.roa (raw, json)
Hash identifier:          ueU6J6z3/eENUXIXQOdOiMafdSoEyzqUz5Pzgs3yF58=
Subject key identifier:   69:EB:C4:27:B3:D4:EE:26:F7:48:7C:25:6B:CA:08:97:E4:34:83:77
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584DE84B5CE69EAD610AC8AB6B00
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/dbd5e13d-a6d3-3067-a6b5-db6f42a80a3c.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     394284
IP address blocks:        66.207.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5c:e6:9e:ad:61:0a:c8:ab:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=4ec158ca-c6cc-4fe5-a7c1-7f17ddd6a115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:e9:34:e0:ec:86:8a:a6:37:0a:70:d8:54:
                    58:83:98:ff:34:f4:ac:48:c1:ea:b7:91:65:7b:5b:
                    b8:e4:1d:33:d3:f3:3a:0c:15:09:c9:3a:91:d6:54:
                    15:59:f8:53:ef:85:40:8f:c8:2c:9a:fb:d9:0d:4e:
                    19:19:ab:08:6a:c5:93:04:d3:23:43:3f:02:db:df:
                    9f:e5:b5:33:5d:30:40:33:26:a1:00:6f:1a:6b:b9:
                    7a:93:5b:87:e8:88:48:2a:17:b6:28:ae:92:a0:a6:
                    99:69:17:f2:d4:6c:b2:e4:68:81:01:4e:46:02:27:
                    42:da:d6:51:f5:8e:10:e9:e5:76:9a:62:1e:4f:3d:
                    0b:ff:d9:a7:1b:9d:3f:4f:17:5e:a8:d8:84:d7:73:
                    ea:ca:6d:3e:e7:7e:d7:e0:db:e7:21:cd:04:cf:75:
                    c9:c9:76:a3:db:c1:98:83:2e:b6:4e:28:47:c2:c9:
                    36:68:69:3c:0b:27:21:4f:26:3c:75:d1:d7:e5:5b:
                    72:a9:b4:72:b0:44:5a:12:b3:23:45:00:88:f6:6f:
                    41:7b:b0:1c:da:22:60:98:ad:d2:39:89:98:12:9b:
                    cc:ca:d6:aa:4e:66:b6:54:a3:6e:ba:c6:16:a0:39:
                    e6:db:1c:ab:84:80:4a:2a:ba:e2:95:f0:37:67:bc:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EB:C4:27:B3:D4:EE:26:F7:48:7C:25:6B:CA:08:97:E4:34:83:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/dbd5e13d-a6d3-3067-a6b5-db6f42a80a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ca:b5:71:f6:52:83:8d:0f:00:be:f6:60:79:d8:ab:b3:86:
         16:d5:e6:60:2c:3c:f6:53:10:72:3f:35:48:29:65:f0:17:2c:
         7b:7b:37:be:bd:14:6a:41:d2:10:a2:47:fa:c2:19:f4:34:cb:
         f0:93:ea:28:8e:ce:60:a2:ec:74:87:a9:c8:02:0a:78:34:02:
         78:68:4e:aa:10:1b:68:b2:5b:a2:ee:28:64:93:19:b8:76:b9:
         90:23:2b:86:b0:3f:61:24:33:a1:26:c0:ed:6f:d9:29:2a:d5:
         16:c5:b5:c0:02:37:5a:30:3d:fc:80:3b:e1:de:18:4d:0e:1d:
         c9:d0:5f:3f:0b:15:30:63:25:cb:ee:5b:cc:3c:b0:f0:ef:61:
         a7:ff:41:bb:db:47:7e:e5:16:4a:96:3b:e0:96:8d:b2:65:4a:
         74:16:d2:bd:cb:f9:8d:d2:c5:94:28:ad:8d:49:2c:ae:ac:40:
         0f:e9:b0:cc:ca:47:79:de:35:99:39:7d:56:4f:14:d7:54:26:
         4f:f3:f2:56:97:97:1a:02:28:3b:d7:31:01:97:46:76:7f:f5:
         0d:b2:15:7a:42:99:2b:b2:72:39:ee:20:0e:81:23:4b:76:08:
         55:1b:f6:bc:7c:93:95:a6:a9:59:7e:93:d1:6b:8c:09:d3:2d:
         d4:d7:88:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS1zmnq1hCsirawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0
NzUxMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
NGVjMTU4Y2EtYzZjYy00ZmU1LWE3YzEtN2YxN2RkZDZhMTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ATpNODshoqmNwpw2FRYg5j/NPSsSMHqt5Fl
e1u45B0z0/M6DBUJyTqR1lQVWfhT74VAj8gsmvvZDU4ZGasIasWTBNMjQz8C29+f
5bUzXTBAMyahAG8aa7l6k1uH6IhIKhe2KK6SoKaZaRfy1Gyy5GiBAU5GAidC2tZR
9Y4Q6eV2mmIeTz0L/9mnG50/TxdeqNiE13Pqym0+537X4NvnIc0Ez3XJyXaj28GY
gy62TihHwsk2aGk8CychTyY8ddHX5VtyqbRysERaErMjRQCI9m9Be7Ac2iJgmK3S
OYmYEpvMytaqTma2VKNuusYWoDnm2xyrhIBKKrrilfA3Z7wRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnrxCez1O4m90h8JWvKCJfkNIN3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj
OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvZGJkNWUxM2QtYTZkMy0z
MDY3LWE2YjUtZGI2ZjQyYTgwYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj
YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk
NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz
N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQs92MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/KtXH2UoONDwC+9mB52KuzhhbV5mAsPPZTEHI/NUgpZfAXLHt7N769
FGpB0hCiR/rCGfQ0y/CT6iiOzmCi7HSHqcgCCng0AnhoTqoQG2iyW6LuKGSTGbh2
uZAjK4awP2EkM6EmwO1v2Skq1RbFtcACN1owPfyAO+HeGE0OHcnQXz8LFTBjJcvu
W8w8sPDvYaf/QbvbR37lFkqWO+CWjbJlSnQW0r3L+Y3SxZQorY1JLK6sQA/psMzK
R3neNZk5fVZPFNdUJk/z8laXlxoCKDvXMQGXRnZ/9Q2yFXpCmSuycjnuIA6BI0t2
CFUb9rx8k5WmqVl+k9FrjAnTLdTXiP8=
-----END CERTIFICATE-----
Generated at Thu Jun 4 19:12:26 2026 by rpki-client