Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa
File:                     8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa (raw, json)
Hash identifier:          YpTcR0DwUA3un9dc8P7papm1b1jb3i229DDmfnCkJXU=
Subject key identifier:   80:74:EA:DC:63:09:38:3C:17:E8:2A:F5:3F:9B:7D:B4:CF:08:6F:23
Certificate issuer:       /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial:       010D0C9F4328584DE150A35AD089B5465D267CB0
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     54981
IP address blocks:        66.118.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a3:5a:d0:89:b5:46:5d:26:7c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=3091d718-a106-41ac-a15d-a0ab4b98c161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:38:91:fe:4c:37:62:7b:92:38:2a:c2:c8:df:
                    27:ca:b1:8c:35:be:74:7f:e8:72:6b:33:96:fa:fc:
                    b1:08:29:e2:f8:9e:6d:e3:47:88:58:77:78:2a:dd:
                    56:44:ad:43:6a:70:7b:16:60:22:ed:3d:1a:69:34:
                    ef:f7:92:43:50:ce:ec:f7:26:c8:f3:58:db:0f:40:
                    6d:b9:fc:bf:61:9f:b3:a2:19:c0:f2:93:3d:da:6d:
                    70:75:52:fa:4e:9c:cc:61:de:48:15:e5:1b:07:0b:
                    5e:a2:18:d8:21:7c:89:05:49:96:98:9a:1f:81:8a:
                    82:2a:14:c7:c7:26:45:cd:d7:c3:d0:f7:9a:a2:c1:
                    f4:b2:3c:9a:9b:e8:a9:5e:13:89:4c:6b:d3:6e:00:
                    6a:9e:85:0c:6d:0e:aa:fe:d8:3c:44:c7:1b:f3:b7:
                    e8:bc:11:09:fe:ca:6c:c2:7b:a6:f0:ea:91:33:19:
                    bb:82:6c:9b:c9:9b:f1:13:b5:cc:18:2d:58:6e:d4:
                    e4:67:47:40:40:87:80:be:f7:03:b5:cf:8c:e3:71:
                    04:cd:ba:fb:55:3a:00:af:15:50:e8:d7:96:44:86:
                    6e:d2:31:a4:ad:6f:d5:49:2f:52:af:40:bd:8a:37:
                    0e:ba:cb:7c:ed:df:9f:4c:a5:9c:10:98:db:f2:f7:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:EA:DC:63:09:38:3C:17:E8:2A:F5:3F:9B:7D:B4:CF:08:6F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/8b2ebd48-a57e-30b0-94e2-f444bb5ba7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl

            X509v3 Authority Key Identifier:
                keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:f3:68:c3:5d:88:9b:a6:f8:e6:3d:fa:86:d5:9b:56:8e:
         c6:d7:fe:03:6b:32:52:45:44:47:ec:da:48:62:ce:80:f9:39:
         e0:e6:9f:47:43:29:bf:9d:d9:83:de:f9:af:df:10:46:50:70:
         da:5f:21:31:4f:51:a4:52:ba:53:5e:9f:ed:81:c4:29:90:fe:
         3c:a5:aa:3d:82:45:87:37:85:e1:e0:03:97:3e:49:a4:01:a8:
         e3:5d:25:b5:9b:6b:1d:de:5c:ae:be:6a:50:f5:ed:23:c5:f8:
         bd:1c:89:ea:f1:f2:41:4b:c7:7e:62:e1:85:13:f0:61:f8:ee:
         4f:30:28:9e:0e:74:d7:4d:e1:fd:65:b0:9a:50:fb:c1:ee:ea:
         d7:21:4e:18:88:78:47:d6:55:a5:31:12:d6:83:45:47:32:40:
         96:ec:36:46:07:f2:39:b2:5a:31:d5:07:80:07:4c:fc:ad:74:
         ec:9f:6a:7c:e1:57:5d:01:4c:16:db:44:b5:9d:98:aa:05:62:
         40:5e:34:bc:05:67:62:c5:46:ce:e4:17:cd:73:b0:2d:d0:5b:
         29:15:97:4e:64:89:24:c5:e5:85:40:fa:65:37:e0:3e:3c:53:
         63:e3:ca:06:37:e5:b3:95:a5:4b:e0:f5:28:20:29:c6:96:bb:
         7e:4c:52:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKNa0Im1Rl0mfLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmYzAxZGItZDdlNi00N2QxLWFkNGQtNzYxMmEzMjU4
MDVjMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MzA5MWQ3MTgtYTEwNi00MWFjLWExNWQtYTBhYjRiOThjMTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjiR/kw3YnuSOCrCyN8nyrGMNb50f+hyazOW
+vyxCCni+J5t40eIWHd4Kt1WRK1DanB7FmAi7T0aaTTv95JDUM7s9ybI81jbD0Bt
ufy/YZ+zohnA8pM92m1wdVL6TpzMYd5IFeUbBwteohjYIXyJBUmWmJofgYqCKhTH
xyZFzdfD0PeaosH0sjyam+ipXhOJTGvTbgBqnoUMbQ6q/tg8RMcb87fovBEJ/sps
wnum8OqRMxm7gmybyZvxE7XMGC1YbtTkZ0dAQIeAvvcDtc+M43EEzbr7VToArxVQ
6NeWRIZu0jGkrW/VSS9Sr0C9ijcOust87d+fTKWcEJjb8vdz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIB06txjCTg8F+gq9T+bfbTPCG8jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWZj
MDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEyYTMyNTgwNWMvOGIyZWJkNDgtYTU3ZS0z
MGIwLTk0ZTItZjQ0NGJiNWJhN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFmYzAxZGItZDdlNi00N2QxLWFk
NGQtNzYxMmEzMjU4MDVjLzYxZmMwMWRiLWQ3ZTYtNDdkMS1hZDRkLTc2MTJhMzI1
ODA1Yy5jcmwwHwYDVR0jBBgwFoAUgZu/FDKVcC6B9/0YnZ6paVfbUEwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWZjMDFkYi1kN2U2LTQ3ZDEtYWQ0ZC03NjEy
YTMyNTgwNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSu82jDXYibpvjmPfqG1ZtWjsbX/gNrMlJFREfs2khizoD5OeDmn0dD
Kb+d2YPe+a/fEEZQcNpfITFPUaRSulNen+2BxCmQ/jylqj2CRYc3heHgA5c+SaQB
qONdJbWbax3eXK6+alD17SPF+L0cierx8kFLx35i4YUT8GH47k8wKJ4OdNdN4f1l
sJpQ+8Hu6tchThiIeEfWVaUxEtaDRUcyQJbsNkYH8jmyWjHVB4AHTPytdOyfanzh
V10BTBbbRLWdmKoFYkBeNLwFZ2LFRs7kF81zsC3QWykVl05kiSTF5YVA+mU34D48
U2PjygY35bOVpUvg9SggKcaWu35MUi8=
-----END CERTIFICATE-----
Generated at Fri May 22 16:08:09 2026 by rpki-client