Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
File:                     7a58c066-a3a1-386d-87a0-7cb55812f128.roa (raw, json)
Hash identifier:          CtBiGrgoMrLBoZzJ4K/LYYCPwAJE9HzVXrDgyWnK9cE=
Subject key identifier:   14:E5:F4:8F:E3:AE:2F:15:05:57:CB:7D:E4:27:BF:B4:01:B9:59:98
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584EA7879F870719FE71E2396E80
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15171
IP address blocks:        64.66.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9f:87:07:19:fe:71:e2:39:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cf739e50-7fe1-45ed-81e7-f7d848c3a574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:d5:21:2b:c1:60:14:ca:14:ff:e6:22:20:
                    8e:5b:5b:f3:ce:d4:c2:fc:62:29:e0:a6:66:ce:c2:
                    0e:62:44:94:9e:5e:27:63:7a:a3:26:4a:8f:9b:3a:
                    39:77:c5:11:f1:e1:8d:37:09:bf:18:37:c6:f7:d0:
                    b2:22:ff:f4:2d:4d:50:3b:1f:55:a5:65:de:61:2b:
                    56:c2:6a:ce:12:2d:b5:42:8b:5a:de:41:26:98:05:
                    f9:51:9d:98:9f:ae:40:44:a8:2d:a6:31:24:52:65:
                    a0:25:77:c8:f2:6c:30:28:5e:94:90:3b:cb:c3:a6:
                    62:80:49:b2:92:ca:bb:81:0e:fa:e5:c2:5d:2f:94:
                    90:17:67:e6:d6:98:f1:c8:82:fd:11:38:7a:d5:f0:
                    06:c8:79:e6:8e:63:06:53:5c:d6:39:04:f1:72:e0:
                    61:3c:b5:fe:a0:51:8f:a5:93:90:d3:7d:58:20:36:
                    1f:b6:b2:f5:d5:fd:57:54:13:df:a9:33:e0:09:87:
                    f2:7d:54:0f:52:94:ba:13:21:34:93:0d:20:e7:5e:
                    8b:76:e7:aa:4b:31:b5:ba:e8:b7:fb:27:88:6a:07:
                    45:39:e9:6e:65:90:9f:96:16:93:41:ad:e7:b9:80:
                    65:0c:6a:ae:d7:a0:60:df:23:9b:7f:39:40:3b:ae:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:F4:8F:E3:AE:2F:15:05:57:CB:7D:E4:27:BF:B4:01:B9:59:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:d7:ce:e3:7d:19:07:87:6c:14:b8:f0:9c:30:3e:7c:f4:
         b2:ad:69:49:5d:c3:f6:34:ce:54:d0:57:fb:f7:f5:1f:79:ab:
         d3:8e:bb:78:2c:32:ec:65:c2:1c:8c:9c:ef:cf:e3:6c:1c:d4:
         7d:b4:2d:d3:b0:2e:56:6f:d1:24:2d:63:b7:aa:65:f7:37:37:
         69:b6:9b:48:bf:c6:c7:73:5d:47:5e:aa:25:a4:b5:df:1b:9d:
         d5:97:49:00:c9:4f:d4:4b:cf:3f:d7:8e:82:63:1f:28:16:b6:
         0a:91:d5:16:da:54:aa:b4:be:9d:d8:bd:9a:68:e0:c6:77:82:
         66:cf:3f:33:8d:35:59:25:02:18:08:5c:25:8c:d0:15:21:9b:
         e8:23:5f:bb:c9:2e:40:8a:80:56:25:5d:c2:1b:2c:a8:be:13:
         0f:2f:8c:c7:41:1a:5a:36:05:ec:5b:c9:61:7a:4f:c2:2d:62:
         d3:74:bd:22:d1:b9:8e:ac:80:41:f6:bb:14:49:eb:cc:cd:e3:
         40:34:0a:a6:7a:2e:38:2c:f9:5a:45:cf:1e:6e:cd:dc:7a:fa:
         60:01:9a:af:16:e4:9f:5d:8c:5c:9c:d6:9e:b7:cc:92:ac:16:
         f0:0a:6c:68:27:9e:85:92:13:09:f0:6a:f9:f3:37:00:c5:88:
         82:7f:be:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5+HBxn+ceI5boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJkMTEwNzUtY2RkNC00Y2M3LTk0N2MtYTk0YzU2MjRh
ZGVkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2Y3MzllNTAtN2ZlMS00NWVkLTgxZTctZjdkODQ4YzNhNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4rVISvBYBTKFP/mIiCOW1vzztTC/GIp4KZm
zsIOYkSUnl4nY3qjJkqPmzo5d8UR8eGNNwm/GDfG99CyIv/0LU1QOx9VpWXeYStW
wmrOEi21Qota3kEmmAX5UZ2Yn65ARKgtpjEkUmWgJXfI8mwwKF6UkDvLw6ZigEmy
ksq7gQ765cJdL5SQF2fm1pjxyIL9ETh61fAGyHnmjmMGU1zWOQTxcuBhPLX+oFGP
pZOQ031YIDYftrL11f1XVBPfqTPgCYfyfVQPUpS6EyE0kw0g516LdueqSzG1uui3
+yeIagdFOeluZZCflhaTQa3nuYBlDGqu16Bg3yObfzlAO66XpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTl9I/jri8VBVfLfeQnv7QBuVmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YmQx
MTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRjNTYyNGFkZWQvN2E1OGMwNjYtYTNhMS0z
ODZkLTg3YTAtN2NiNTU4MTJmMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmJkMTEwNzUtY2RkNC00Y2M3LTk0
N2MtYTk0YzU2MjRhZGVkLzZiZDExMDc1LWNkZDQtNGNjNy05NDdjLWE5NGM1NjI0
YWRlZC5jcmwwHwYDVR0jBBgwFoAUP5ADfwiMLsR8qc08o/FSGtCv/EUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82YmQxMTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRj
NTYyNGFkZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEL4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH76187jfRkHh2wUuPCcMD589LKtaUldw/Y0zlTQV/v39R95q9OOu3gs
MuxlwhyMnO/P42wc1H20LdOwLlZv0SQtY7eqZfc3N2m2m0i/xsdzXUdeqiWktd8b
ndWXSQDJT9RLzz/XjoJjHygWtgqR1RbaVKq0vp3YvZpo4MZ3gmbPPzONNVklAhgI
XCWM0BUhm+gjX7vJLkCKgFYlXcIbLKi+Ew8vjMdBGlo2BexbyWF6T8ItYtN0vSLR
uY6sgEH2uxRJ68zN40A0CqZ6Ljgs+VpFzx5uzdx6+mABmq8W5J9djFyc1p63zJKs
FvAKbGgnnoWSEwnwavnzNwDFiIJ/vuM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:52 2026 by rpki-client