Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfb57543-4ec5-3bc5-bf47-c168bb726b5a.roa
File:                     bfb57543-4ec5-3bc5-bf47-c168bb726b5a.roa (raw, json)
Hash identifier:          mle0j3VNmCsB8fq5Wv1JXpSunO5Wr8baUEFlAgO7KWI=
Subject key identifier:   97:94:04:F8:E7:32:FC:29:91:BA:AD:25:9F:DA:C3:A7:FD:E6:10:24
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E5BAF54D85FEE995E71C0AD00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfb57543-4ec5-3bc5-bf47-c168bb726b5a.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     6461
IP address blocks:        66.62.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:54:d8:5f:ee:99:5e:71:c0:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=dc4dbde2-e4d5-4e40-aa50-9e560c2bcfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:25:c2:e0:a9:6d:9b:e2:36:6f:ff:55:a1:
                    a9:4e:48:95:25:b0:6d:26:2f:af:df:80:55:9f:5a:
                    6d:bd:6a:7e:6e:36:38:5e:3f:7d:1d:63:f4:ff:9e:
                    0e:e6:8c:1a:e3:b1:90:6b:15:9e:2f:e5:8d:b8:6e:
                    2a:b0:49:41:eb:1d:f2:67:89:80:56:f6:70:8f:ca:
                    7e:00:5b:3e:62:b7:b7:74:b3:ac:b0:03:77:0f:51:
                    bd:c2:da:cc:9f:44:b2:9d:23:14:70:43:c5:56:50:
                    e2:8f:a3:8b:90:19:bd:55:3b:e2:90:39:f7:26:c4:
                    5f:bd:d4:28:21:c3:2d:15:70:74:21:01:2a:f9:01:
                    03:c5:f5:a3:cc:bf:00:c4:e4:4a:0b:f2:e7:8c:e7:
                    93:65:a3:12:b9:da:46:26:cd:55:cb:97:c4:4a:44:
                    ec:33:6f:b9:aa:95:7e:69:30:0a:3a:ca:d3:a3:b8:
                    68:0c:67:b5:4e:d4:65:fa:27:ce:0a:e6:ec:5d:ec:
                    52:2c:9e:bd:e3:82:83:25:1d:32:ee:e4:40:6c:43:
                    e9:c4:a5:c4:8c:b9:e5:f8:74:bb:e2:1c:07:32:25:
                    61:17:fb:7e:d3:aa:e0:36:e8:e8:1d:47:a5:b7:51:
                    f4:de:33:be:48:1d:71:d0:b5:e4:e0:93:84:0c:09:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:94:04:F8:E7:32:FC:29:91:BA:AD:25:9F:DA:C3:A7:FD:E6:10:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfb57543-4ec5-3bc5-bf47-c168bb726b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:56:94:76:37:fe:f6:cb:f3:1c:d9:20:47:cd:ba:4e:78:
         83:f1:9d:fe:9d:1a:a4:55:6f:6f:2e:77:c3:b4:00:5c:56:84:
         f0:10:cc:91:e7:66:2f:2b:b8:58:1b:bc:de:25:40:37:32:8a:
         90:04:ae:8b:80:c9:ac:eb:bb:1f:d2:57:b5:1f:fc:ef:b1:c7:
         9e:9e:5e:4a:28:d5:a4:c8:e5:35:c1:5a:26:72:44:17:d3:55:
         79:b7:3f:1d:83:b8:be:e5:7f:11:d4:1e:ea:ad:91:72:7e:8e:
         d7:1a:83:c4:82:42:64:4a:e6:0f:1c:68:16:df:7a:b9:07:b7:
         95:20:f6:5f:33:10:72:e2:3d:d0:5b:41:db:b2:eb:cb:99:84:
         be:84:9b:aa:a7:26:99:54:40:ce:36:ee:d1:46:86:e5:02:93:
         70:a4:74:d7:cd:a3:c1:b9:a8:d9:f2:82:ae:9d:a4:f2:c8:e4:
         4f:b2:55:87:0c:66:71:9a:df:e1:27:d5:d1:f1:57:a0:27:85:
         6f:1e:06:1b:1e:eb:5f:e8:50:3a:f9:bc:48:59:f8:1e:8f:0f:
         f2:4d:f4:67:c2:61:24:2b:da:38:37:79:0f:71:a9:03:3b:f9:
         ab:5a:e3:4c:c6:e0:81:0d:e5:54:1f:bb:37:4e:e9:35:ca:2b:
         54:0a:32:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br1TYX+6ZXnHArQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk
ZGM0ZGJkZTItZTRkNS00ZTQwLWFhNTAtOWU1NjBjMmJjZmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QQlwuCpbZviNm//VaGpTkiVJbBtJi+v34BV
n1ptvWp+bjY4Xj99HWP0/54O5owa47GQaxWeL+WNuG4qsElB6x3yZ4mAVvZwj8p+
AFs+Yre3dLOssAN3D1G9wtrMn0SynSMUcEPFVlDij6OLkBm9VTvikDn3JsRfvdQo
IcMtFXB0IQEq+QEDxfWjzL8AxORKC/LnjOeTZaMSudpGJs1Vy5fESkTsM2+5qpV+
aTAKOsrTo7hoDGe1TtRl+ifOCubsXexSLJ6944KDJR0y7uRAbEPpxKXEjLnl+HS7
4hwHMiVhF/t+06rgNujoHUelt1H03jO+SB1x0LXk4JOEDAkO3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeUBPjnMvwpkbqtJZ/aw6f95hAkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYmZiNTc1NDMtNGVjNS0z
YmM1LWJmNDctYzE2OGJiNzI2YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQj62MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbPVpR2N/72y/Mc2SBHzbpOeIPxnf6dGqRVb28ud8O0AFxWhPAQzJHn
Zi8ruFgbvN4lQDcyipAErouAyazrux/SV7Uf/O+xx56eXkoo1aTI5TXBWiZyRBfT
VXm3Px2DuL7lfxHUHuqtkXJ+jtcag8SCQmRK5g8caBbferkHt5Ug9l8zEHLiPdBb
Qduy68uZhL6Em6qnJplUQM427tFGhuUCk3CkdNfNo8G5qNnygq6dpPLI5E+yVYcM
ZnGa3+En1dHxV6AnhW8eBhse61/oUDr5vEhZ+B6PD/JN9GfCYSQr2jg3eQ9xqQM7
+ata40zG4IEN5VQfuzdO6TXKK1QKMj0=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:07:42 2026 by rpki-client