Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fe00e6ad-3d9f-3f28-8449-fbeeac9bcd34.roa
File:                     fe00e6ad-3d9f-3f28-8449-fbeeac9bcd34.roa (raw, json)
Hash identifier:          pAWxadeSLO/c3fS0ipzS/TRANc+OtPJePBDCYxqMz5o=
Subject key identifier:   38:3D:E5:C6:2D:DC:14:41:34:56:3D:62:71:EC:9D:4E:77:9A:F0:70
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D1DE4911DF1F7CC6EACBC6780
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fe00e6ad-3d9f-3f28-8449-fbeeac9bcd34.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        66.253.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:91:1d:f1:f7:cc:6e:ac:bc:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=399cd479-9128-45fe-ba13-6890e8d1b242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:17:ae:24:ea:3c:9d:45:dc:b2:36:f2:1e:
                    78:b0:3f:1a:e6:b9:4e:fa:e6:1b:12:fb:5a:d6:19:
                    1b:d1:8a:7f:b7:97:8a:c4:d7:5d:d2:10:39:92:e1:
                    cb:5f:8a:98:c3:bd:b0:93:40:c4:54:6d:4f:90:de:
                    c9:ad:0a:7d:6a:31:35:ba:93:59:4b:66:f9:82:d5:
                    ea:77:59:e9:76:dc:bc:07:c8:5d:77:f9:ca:28:66:
                    19:85:2f:f4:91:67:30:ef:74:98:2b:35:57:34:c1:
                    ce:05:47:c6:4e:2c:83:76:cb:c9:c9:11:f8:4a:e0:
                    66:c1:f6:d7:3c:64:2a:e4:1d:15:fb:18:4c:b7:10:
                    b8:47:dd:c7:0d:3e:da:92:04:be:8e:85:58:94:12:
                    ad:31:89:af:29:6c:55:2b:ce:b7:90:9c:24:2e:88:
                    ef:f4:3c:c0:f3:ff:40:3e:23:85:04:1b:8b:6f:e6:
                    a8:6a:9f:79:8e:20:c1:56:6d:ba:57:6a:dc:84:e6:
                    c0:f3:22:78:33:c3:3a:7b:09:72:1f:8e:a3:46:b1:
                    44:31:a3:fc:d0:d2:83:24:3e:e3:fe:9a:b6:b5:3c:
                    57:c2:49:fb:5e:8e:16:1a:16:04:04:01:a6:15:c5:
                    c3:05:94:ad:ea:07:8b:1e:62:1d:1b:d5:77:c9:eb:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:E5:C6:2D:DC:14:41:34:56:3D:62:71:EC:9D:4E:77:9A:F0:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fe00e6ad-3d9f-3f28-8449-fbeeac9bcd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:e0:cb:c3:03:a0:54:07:9a:86:ea:cb:e2:0a:90:65:8f:
         68:9b:2a:d9:f9:68:36:12:33:c5:50:12:50:d9:15:f2:48:33:
         23:0c:9e:b7:ac:0d:c3:5b:9e:87:cb:7b:5a:f2:76:b4:a5:26:
         7e:c7:86:75:d7:5f:64:dc:f2:27:53:98:ce:14:a0:d4:96:f0:
         e2:29:af:74:fe:44:12:c9:96:68:6b:90:04:cd:a1:e7:ca:2b:
         4e:b8:8e:78:a5:7c:d7:0e:ff:1f:22:d3:f0:a9:09:fc:f6:20:
         98:4c:8a:fc:59:7e:be:50:bb:a9:e3:70:3e:45:61:26:23:41:
         70:d6:05:07:6c:83:a1:d4:fd:2b:db:b2:65:a0:0c:d9:34:2e:
         b3:aa:60:45:95:70:8f:24:d4:54:c7:0c:6b:46:9c:36:32:e6:
         53:ed:2a:1a:5c:96:7b:5d:b7:e7:d2:b1:df:d2:38:eb:41:3c:
         f6:f4:db:9c:99:ec:9b:10:b4:38:2f:7b:bd:39:77:77:b2:b4:
         be:ae:c0:c2:bd:94:4f:b9:2b:12:89:ef:a2:5a:31:43:5e:e0:
         e4:96:7c:6f:d4:a6:74:08:4e:00:6c:a5:17:70:3f:9d:43:f6:
         81:a1:9f:67:23:33:62:02:37:08:2e:5f:9c:30:71:93:fc:06:
         b4:8c:e4:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JEd8ffMbqy8Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk
Mzk5Y2Q0NzktOTEyOC00NWZlLWJhMTMtNjg5MGU4ZDFiMjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDgXriTqPJ1F3LI28h54sD8a5rlO+uYbEvta
1hkb0Yp/t5eKxNdd0hA5kuHLX4qYw72wk0DEVG1PkN7JrQp9ajE1upNZS2b5gtXq
d1npdty8B8hdd/nKKGYZhS/0kWcw73SYKzVXNMHOBUfGTiyDdsvJyRH4SuBmwfbX
PGQq5B0V+xhMtxC4R93HDT7akgS+joVYlBKtMYmvKWxVK863kJwkLojv9DzA8/9A
PiOFBBuLb+aoap95jiDBVm26V2rchObA8yJ4M8M6ewlyH46jRrFEMaP80NKDJD7j
/pq2tTxXwkn7Xo4WGhYEBAGmFcXDBZSt6geLHmIdG9V3yetP8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDg95cYt3BRBNFY9YnHsnU53mvBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmUwMGU2YWQtM2Q5Zi0z
ZjI4LTg0NDktZmJlZWFjOWJjZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQv22MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFf4MvDA6BUB5qG6sviCpBlj2ibKtn5aDYSM8VQElDZFfJIMyMMnres
DcNbnofLe1rydrSlJn7HhnXXX2Tc8idTmM4UoNSW8OIpr3T+RBLJlmhrkATNoefK
K064jnilfNcO/x8i0/CpCfz2IJhMivxZfr5Qu6njcD5FYSYjQXDWBQdsg6HU/Svb
smWgDNk0LrOqYEWVcI8k1FTHDGtGnDYy5lPtKhpclntdt+fSsd/SOOtBPPb025yZ
7JsQtDgve705d3eytL6uwMK9lE+5KxKJ76JaMUNe4OSWfG/UpnQITgBspRdwP51D
9oGhn2cjM2ICNwguX5wwcZP8BrSM5Fo=
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:56:46 2026 by rpki-client