Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa
File:                     8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa (raw, json)
Hash identifier:          Dt2vfQPVsZvP5FjuHrzV97UeVDJWdPTFpkxoFH0ym5k=
Subject key identifier:   10:70:CD:1A:BC:F8:4C:F6:3C:F5:C9:C4:4E:A8:89:13:DE:A6:AD:7D
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584E253F1FFEB7B8907F955C11A0
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     395301
IP address blocks:        208.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1f:fe:b7:b8:90:7f:95:5c:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=67e649af-5805-4def-872b-7602c0c190c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:40:07:d3:c1:af:0e:79:ab:55:27:2f:7f:
                    01:da:a3:76:c4:74:e6:99:a0:fc:36:a9:84:25:33:
                    55:54:c2:7e:bc:8f:ce:c4:0d:00:3b:37:a7:22:19:
                    a6:cd:b5:e5:1e:ae:77:65:5e:d5:5c:35:0c:3f:77:
                    7d:8d:b2:26:7b:76:d5:0c:ba:ac:67:e7:6f:01:1a:
                    46:60:c6:21:41:8c:c0:1d:c4:06:6e:b4:da:5e:21:
                    61:a8:0b:34:d3:53:dc:2d:23:fa:a5:a5:3a:da:62:
                    a9:78:45:24:56:3d:95:a6:84:a7:a4:4d:a0:d7:4a:
                    55:63:85:ca:1e:ed:d5:fd:ee:0c:70:49:01:78:ca:
                    d2:52:56:45:b5:cd:48:34:de:3d:17:6c:3b:a8:d3:
                    08:8d:d0:2b:9d:39:b6:8c:8a:16:d1:ff:ec:06:48:
                    9f:c6:3a:3a:57:23:61:cf:d1:9b:83:02:ab:00:96:
                    40:c9:a6:0a:9a:21:cb:c2:c8:63:0e:24:76:83:ed:
                    f7:aa:84:43:50:fc:19:ac:39:0d:9f:62:d5:50:c6:
                    c2:6d:7a:7a:71:ce:b0:a7:11:dd:49:89:6d:24:fd:
                    ea:2e:06:1c:1d:35:4d:03:88:fc:6a:a0:07:42:76:
                    98:4c:7c:44:a2:46:de:14:d3:14:94:76:2e:fb:93:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:CD:1A:BC:F8:4C:F6:3C:F5:C9:C4:4E:A8:89:13:DE:A6:AD:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:e2:29:7a:5e:3e:ce:0a:5b:18:b6:64:70:69:c7:c9:22:
         7a:0b:39:1f:8b:c6:91:a4:22:60:ef:54:50:cb:3c:26:23:eb:
         b4:e8:c8:d8:cf:97:ee:14:e3:d1:33:d5:e9:76:80:69:db:8e:
         06:61:28:64:2b:81:e4:54:77:02:90:0f:93:9c:f4:37:19:ec:
         35:a1:f4:0e:e3:35:f3:9f:61:d5:07:79:41:67:13:0e:3f:c0:
         25:22:b2:e2:e2:a7:cc:5b:02:ba:c7:61:0e:85:fe:4f:f6:f9:
         c9:28:69:96:46:59:a0:54:4a:3f:95:32:67:05:94:5d:b2:ac:
         cb:44:ae:b3:d7:91:b2:c1:bf:41:7d:5c:25:85:ee:bb:ac:a9:
         61:9e:77:cb:b9:5d:e0:e0:54:4d:12:c2:90:ad:c1:db:d2:7b:
         d5:f9:63:1c:38:0f:c4:7b:2b:86:82:bb:dc:4b:f0:ac:d1:11:
         9f:11:e3:ba:62:af:09:f8:40:76:e6:86:22:b7:44:7f:71:cc:
         3c:a7:df:1b:bd:ea:8a:f1:a4:30:ce:f9:37:9f:f6:42:0a:3d:
         21:c8:bb:81:df:76:4b:b1:b7:d1:37:b9:bb:51:b0:fc:09:0e:
         08:48:7b:94:26:09:a7:fe:f7:d5:f4:47:d7:6c:33:55:15:f9:
         17:20:c6:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPx/+t7iQf5VcEaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NjdlNjQ5YWYtNTgwNS00ZGVmLTg3MmItNzYwMmMwYzE5MGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDhAB9PBrw55q1UnL38B2qN2xHTmmaD8NqmE
JTNVVMJ+vI/OxA0AOzenIhmmzbXlHq53ZV7VXDUMP3d9jbIme3bVDLqsZ+dvARpG
YMYhQYzAHcQGbrTaXiFhqAs001PcLSP6paU62mKpeEUkVj2VpoSnpE2g10pVY4XK
Hu3V/e4McEkBeMrSUlZFtc1INN49F2w7qNMIjdArnTm2jIoW0f/sBkifxjo6VyNh
z9GbgwKrAJZAyaYKmiHLwshjDiR2g+33qoRDUPwZrDkNn2LVUMbCbXp6cc6wpxHd
SYltJP3qLgYcHTVNA4j8aqAHQnaYTHxEokbeFNMUlHYu+5P1wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBwzRq8+Ez2PPXJxE6oiRPepq19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvOGJlZjc5YTctZWM1Zi0z
Nzk3LTgzYTgtYWEwMGIwYmM2ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvv4il6Xj7OClsYtmRwacfJInoLOR+LxpGkImDvVFDLPCYj67ToyNjP
l+4U49Ez1el2gGnbjgZhKGQrgeRUdwKQD5Oc9DcZ7DWh9A7jNfOfYdUHeUFnEw4/
wCUisuLip8xbArrHYQ6F/k/2+ckoaZZGWaBUSj+VMmcFlF2yrMtErrPXkbLBv0F9
XCWF7rusqWGed8u5XeDgVE0SwpCtwdvSe9X5Yxw4D8R7K4aCu9xL8KzREZ8R47pi
rwn4QHbmhiK3RH9xzDyn3xu96orxpDDO+Tef9kIKPSHIu4Hfdkuxt9E3ubtRsPwJ
DghIe5QmCaf+99X0R9dsM1UV+Rcgxkc=
-----END CERTIFICATE-----
Generated at Fri Jun 12 20:45:50 2026 by rpki-client