Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
File:                     66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json)
Hash identifier:          6FjCXKucdmF4DBtQa8MNMcrHl2l7f8tD5oWyrubC5Sw=
Subject key identifier:   16:D8:2A:D1:48:10:93:59:31:FF:78:9B:83:ED:9F:5A:29:34:E8:CB
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584F49763FD3B1F8B00CD4C88860
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11090
IP address blocks:        72.35.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:3f:d3:b1:f8:b0:0c:d4:c8:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31b52f42-351c-4ee7-8bff-fa721697b1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:39:a7:b5:37:e2:6e:3c:53:04:88:5d:2f:
                    2f:00:93:1d:6c:13:8e:37:e2:30:eb:01:a4:aa:46:
                    62:10:b7:09:ab:75:5c:91:0c:a1:2d:9a:8f:18:ae:
                    3b:ee:6f:a6:d6:99:f5:29:3a:4c:3a:e5:fd:f0:0b:
                    2e:d3:98:f6:84:e1:f9:da:27:6e:f4:d4:97:2a:64:
                    7b:70:1a:69:9a:74:d3:37:7e:c3:f3:8a:86:df:99:
                    e7:1a:e0:1b:73:0b:f1:b3:2a:3f:42:90:84:37:f5:
                    7a:05:cf:a4:e9:e6:2d:4d:e8:32:1e:d1:6d:29:7f:
                    3f:fd:05:85:f8:47:c3:9d:cb:81:ed:42:de:b1:3e:
                    2f:11:44:b0:b6:c7:c4:77:d1:75:26:48:1d:75:ca:
                    a8:79:6d:13:c5:88:5a:be:7b:4a:52:28:c3:39:33:
                    7e:9a:fc:c4:04:00:7d:33:6d:fa:f7:0d:c9:49:25:
                    c9:18:aa:ab:88:a3:80:84:2e:3f:87:81:93:58:82:
                    98:c2:bc:96:9f:73:ff:ca:28:90:10:90:d8:e7:c9:
                    a0:1f:44:d9:c1:2b:99:6c:55:37:74:c5:3d:28:bf:
                    9c:86:c9:9b:71:7b:ec:78:df:98:56:a4:0c:58:1b:
                    db:75:e7:74:53:0d:83:2b:4f:4e:37:8f:71:df:64:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:2A:D1:48:10:93:59:31:FF:78:9B:83:ED:9F:5A:29:34:E8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:aa:cc:20:a3:5f:10:ab:0e:87:80:6e:8f:75:9d:92:28:
         d4:fd:7a:c1:6f:f7:fa:8e:2b:96:96:ea:cb:8d:55:e9:f8:ad:
         6f:fa:9e:b3:70:f2:b6:dc:ca:04:7a:12:dd:b2:61:48:b1:72:
         af:4e:85:3a:e3:d9:ae:bf:f0:f6:68:d3:51:55:92:94:e7:d0:
         3f:61:5d:e7:b7:68:cb:93:ea:7a:5f:0b:99:38:d5:e4:24:4b:
         c5:9f:ec:43:46:dc:21:28:58:0e:7c:7d:98:41:12:16:fa:d2:
         47:df:85:df:dc:cf:9d:27:d1:31:2a:c7:27:b0:86:b0:1e:e0:
         06:6e:78:4a:64:97:e7:b6:55:87:92:b7:5c:65:04:7a:47:04:
         49:9d:c3:0c:d7:77:7f:cc:04:ee:0a:f1:04:7d:b3:35:48:c5:
         e5:aa:f1:9c:cd:4e:b7:e1:66:08:97:e4:42:09:2e:d7:10:63:
         ae:68:69:1c:e7:df:ad:c9:5a:fa:a0:de:29:a3:9c:26:c8:d4:
         a0:88:b0:80:69:9e:34:b2:8a:85:cd:cd:8e:b5:61:61:ac:b8:
         f3:92:ed:43:9a:a9:2a:77:bb:10:d4:4f:b4:9a:3c:28:ff:ec:
         39:3e:e4:3e:91:c3:be:62:25:93:f7:a0:85:03:35:1e:d6:5d:
         04:50:ce:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdj/TsfiwDNTIiGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzFiNTJmNDItMzUxYy00ZWU3LThiZmYtZmE3MjE2OTdiMWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5o5p7U34m48UwSIXS8vAJMdbBOON+Iw6wGk
qkZiELcJq3VckQyhLZqPGK477m+m1pn1KTpMOuX98Asu05j2hOH52idu9NSXKmR7
cBppmnTTN37D84qG35nnGuAbcwvxsyo/QpCEN/V6Bc+k6eYtTegyHtFtKX8//QWF
+EfDncuB7ULesT4vEUSwtsfEd9F1JkgddcqoeW0TxYhavntKUijDOTN+mvzEBAB9
M2369w3JSSXJGKqriKOAhC4/h4GTWIKYwryWn3P/yiiQEJDY58mgH0TZwSuZbFU3
dMU9KL+chsmbcXvseN+YVqQMWBvbded0Uw2DK09ON49x32RxWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbYKtFIEJNZMf94m4Ptn1opNOjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjZhMjE5YjEtOWE4NS0z
ODE2LWIzMDYtODI3ZWQ5NzU5NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCNwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3hqswgo18Qqw6HgG6PdZ2SKNT9esFv9/qOK5aW6suNVen4rW/6nrNw
8rbcygR6Et2yYUixcq9OhTrj2a6/8PZo01FVkpTn0D9hXee3aMuT6npfC5k41eQk
S8Wf7ENG3CEoWA58fZhBEhb60kffhd/cz50n0TEqxyewhrAe4AZueEpkl+e2VYeS
t1xlBHpHBEmdwwzXd3/MBO4K8QR9szVIxeWq8ZzNTrfhZgiX5EIJLtcQY65oaRzn
363JWvqg3imjnCbI1KCIsIBpnjSyioXNzY61YWGsuPOS7UOaqSp3uxDUT7SaPCj/
7Dk+5D6Rw75iJZP3oIUDNR7WXQRQzps=
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:34:46 2026 by rpki-client