Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa
File:                     70c8300b-3f8c-3cac-af15-749f60c97054.roa (raw, json)
Hash identifier:          Eu279VfZVO33VnkBBLYWj/Y0m+uUtFg9r0T6jonCiBo=
Subject key identifier:   FB:4E:A9:FC:4D:2C:85:2B:2A:29:56:95:22:2D:91:F2:9D:5A:FC:B7
Certificate issuer:       /CN=b40428c0-ba21-44c7-86bd-39d34a17e438
Certificate serial:       010D0C9F4328584F7E7DD1B135368902F6A2C380
Authority key identifier: 62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        66.33.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:d1:b1:35:36:89:02:f6:a2:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40428c0-ba21-44c7-86bd-39d34a17e438
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=0cd457a7-fec6-4312-a156-ee2d380ded82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:25:8f:42:d1:1d:6d:3e:80:26:d4:f5:3e:
                    62:35:6d:46:26:6a:65:fd:95:5b:4a:e8:44:4c:70:
                    5f:ec:ec:9f:a7:92:94:02:80:5d:ee:0a:20:66:2b:
                    49:41:65:6d:f3:41:14:fa:83:bc:b9:25:b3:d7:a9:
                    32:30:a7:58:a0:68:4d:6f:28:ba:ba:91:f9:15:9d:
                    31:23:a9:db:02:be:64:d5:55:86:1f:ef:35:36:d5:
                    ae:9d:a3:80:9a:c1:c0:c4:86:18:fc:bc:99:8b:1d:
                    98:45:77:71:e9:ca:16:06:93:ec:09:8d:bf:13:92:
                    d6:63:ed:b7:49:bc:6d:02:25:9d:03:5a:26:ac:24:
                    69:c6:0c:29:47:47:8c:64:1d:34:8d:a1:69:ef:dd:
                    a6:d6:db:e0:cb:ff:4a:61:07:c1:50:72:78:17:49:
                    55:49:68:de:83:38:5f:00:55:5f:d3:c1:e6:cd:12:
                    f9:02:4d:88:a0:a8:c6:fd:30:5b:3b:44:d3:35:a9:
                    5c:a6:27:34:dd:4c:2c:53:a7:01:ee:16:41:cb:63:
                    27:00:39:44:ac:19:15:28:74:81:d2:a1:25:14:7a:
                    9c:c2:03:8a:a8:78:c6:05:ed:47:8f:4d:1b:c9:5a:
                    c2:12:0f:4c:29:81:d8:73:d5:48:49:64:0f:92:e6:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:A9:FC:4D:2C:85:2B:2A:29:56:95:22:2D:91:F2:9D:5A:FC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/70c8300b-3f8c-3cac-af15-749f60c97054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl

            X509v3 Authority Key Identifier:
                keyid:62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:e3:af:ef:64:d1:c1:2f:a2:50:f4:ae:21:8a:18:22:d4:fd:
         8e:c4:17:01:2e:42:be:bc:3a:ad:07:f9:20:06:a0:94:47:26:
         a7:18:a9:75:27:41:5c:61:a2:19:96:29:1c:a1:e1:a6:00:79:
         fc:46:46:39:00:eb:cc:53:fd:08:6d:ca:14:59:ab:d4:9d:ad:
         ff:f8:a9:b9:0f:e6:64:f0:20:a1:f2:7a:9b:34:8b:94:3e:53:
         43:58:15:6b:85:b6:4d:64:ab:78:f0:18:31:ad:f1:c5:de:de:
         3d:01:71:b4:05:5c:af:4c:25:bf:4e:5f:5b:f3:1b:17:64:bf:
         58:d1:c7:59:db:3d:80:ac:68:cc:e6:55:69:8f:e9:52:ef:00:
         c9:70:2c:58:25:28:23:db:d5:f7:bc:c1:4c:6d:ab:e1:32:04:
         e4:d0:f1:cb:1d:c2:02:cf:c6:cc:37:06:a3:99:4c:ca:2e:ef:
         9c:11:5b:d3:47:88:39:a3:5f:49:97:c4:a8:78:f4:28:af:96:
         8c:e5:37:b1:ef:9b:2d:ee:98:6a:8e:df:bb:31:cf:81:bb:1c:
         e2:42:04:7c:8c:1a:16:7c:bf:a0:99:6d:5a:d9:31:f7:85:d2:
         17:5b:6f:ab:94:a3:c4:b6:fe:88:a2:78:89:3c:60:24:85:79:
         a6:fc:f1:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdGxNTaJAvaiw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQwNDI4YzAtYmEyMS00NGM3LTg2YmQtMzlkMzRhMTdl
NDM4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MGNkNDU3YTctZmVjNi00MzEyLWExNTYtZWUyZDM4MGRlZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR4lj0LRHW0+gCbU9T5iNW1GJmpl/ZVbSuhE
THBf7Oyfp5KUAoBd7gogZitJQWVt80EU+oO8uSWz16kyMKdYoGhNbyi6upH5FZ0x
I6nbAr5k1VWGH+81NtWunaOAmsHAxIYY/LyZix2YRXdx6coWBpPsCY2/E5LWY+23
SbxtAiWdA1omrCRpxgwpR0eMZB00jaFp792m1tvgy/9KYQfBUHJ4F0lVSWjegzhf
AFVf08HmzRL5Ak2IoKjG/TBbO0TTNalcpic03UwsU6cB7hZBy2MnADlErBkVKHSB
0qElFHqcwgOKqHjGBe1Hj00byVrCEg9MKYHYc9VISWQPkuYKdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtOqfxNLIUrKilWlSItkfKdWvy3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNDA0
MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQzNGExN2U0MzgvNzBjODMwMGItM2Y4Yy0z
Y2FjLWFmMTUtNzQ5ZjYwYzk3MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjQwNDI4YzAtYmEyMS00NGM3LTg2
YmQtMzlkMzRhMTdlNDM4L2I0MDQyOGMwLWJhMjEtNDRjNy04NmJkLTM5ZDM0YTE3
ZTQzOC5jcmwwHwYDVR0jBBgwFoAUYii1ecqVTkstiLpdYZmWySaiBK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNDA0MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQz
NGExN2U0MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMbjr+9k0cEvolD0riGKGCLU/Y7EFwEuQr68Oq0H+SAGoJRHJqcYqXUn
QVxhohmWKRyh4aYAefxGRjkA68xT/QhtyhRZq9Sdrf/4qbkP5mTwIKHyeps0i5Q+
U0NYFWuFtk1kq3jwGDGt8cXe3j0BcbQFXK9MJb9OX1vzGxdkv1jRx1nbPYCsaMzm
VWmP6VLvAMlwLFglKCPb1fe8wUxtq+EyBOTQ8csdwgLPxsw3BqOZTMou75wRW9NH
iDmjX0mXxKh49CivlozlN7Hvmy3umGqO37sxz4G7HOJCBHyMGhZ8v6CZbVrZMfeF
0hdbb6uUo8S2/oiieIk8YCSFeab88TY=
-----END CERTIFICATE-----
Generated at Wed Nov 4 10:30:11 2026 by rpki-client