Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa
File:                     2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa (raw, json)
Hash identifier:          Fxxw5dVCK9L4MSFnnOvuG0CoWoqGQaJEi3hKXxso6oY=
Subject key identifier:   62:88:94:DD:B0:59:7D:5E:DB:52:62:79:BB:DF:C5:93:04:1C:4B:06
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F4328584EB2B1C47408667D33C5C3DE80
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     401199
IP address blocks:        66.163.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c4:74:08:66:7d:33:c5:c3:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=91ad8912-76ae-4452-98e0-5c820a1fddc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:b1:44:89:0d:36:ad:36:a0:a0:fd:6f:88:
                    d8:1b:b1:95:0a:e1:66:54:e0:bd:dc:10:9b:e4:6c:
                    5c:64:06:4f:f5:dd:c5:ba:f0:56:18:94:e8:68:05:
                    d2:a9:37:01:b1:46:3d:57:1a:58:ea:3e:50:c2:e6:
                    3e:90:8d:a7:dd:a2:44:74:79:7b:0a:1d:8f:ba:1c:
                    51:be:20:2d:ea:78:38:46:7d:47:79:fa:61:c7:d8:
                    e1:f7:20:79:28:d2:8e:25:fb:61:bf:bd:5c:6c:a0:
                    5f:c5:37:da:19:f9:4d:6a:21:11:18:73:94:9f:91:
                    65:f9:fd:70:5b:e1:4d:62:f6:a7:a1:2c:3f:23:71:
                    08:c8:f6:ad:7c:54:84:de:9e:96:ba:4d:58:f3:3d:
                    ce:90:48:53:e4:39:05:ed:88:ce:08:6e:8a:d8:a7:
                    93:20:87:b9:d2:3e:6b:a9:83:64:bf:ca:9c:ce:d8:
                    ad:d1:3e:8c:a1:8a:da:77:f7:8d:cd:1d:6d:b4:c5:
                    aa:37:40:52:71:e9:03:22:af:c1:ad:be:b6:93:1c:
                    4e:31:a5:96:7b:03:e0:85:ec:7b:13:d9:2c:92:f3:
                    7a:79:8a:4a:92:c9:05:e3:f2:eb:85:96:e0:60:6b:
                    86:8f:c9:ab:91:87:84:48:0f:69:a0:f5:ae:70:4e:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:88:94:DD:B0:59:7D:5E:DB:52:62:79:BB:DF:C5:93:04:1C:4B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:87:64:b5:96:26:d1:ba:ac:ed:a4:85:d1:75:ef:7c:2b:
         1b:4d:02:9a:45:22:a5:9c:c3:3d:33:18:47:52:9c:08:87:08:
         56:d6:e7:ac:31:18:49:fc:ea:04:1c:c8:61:59:8a:06:ce:c4:
         36:d6:79:e0:71:82:70:7a:16:36:a1:a9:cc:6e:6d:5b:99:d7:
         e4:2d:5d:78:50:79:86:a0:bf:6d:8a:4f:35:41:75:4e:f8:98:
         3e:3d:f6:04:9d:f3:fb:ee:ed:c0:e1:bc:2a:4f:f1:85:7d:0c:
         9d:60:9f:1c:3b:5c:8d:7e:0d:be:a4:20:02:9c:c3:32:9d:d2:
         b3:7d:c0:f4:8f:11:f5:6e:1c:29:d9:48:6e:25:51:26:72:3b:
         9b:5e:ee:cb:90:ae:0d:94:03:38:0e:a2:a1:be:2a:c6:1e:16:
         a8:1d:e1:a0:a6:8a:92:1d:59:c5:56:66:8c:68:78:b7:ae:68:
         39:d8:c9:38:ad:21:16:7d:a0:a5:8e:92:1f:93:68:f0:a2:76:
         f3:54:fe:dd:e1:a3:b1:08:35:8a:2b:3c:78:a1:fd:18:c3:c1:
         b2:03:62:f7:cb:41:48:96:0b:93:8c:89:b4:6e:11:8e:cf:b1:
         de:49:6a:eb:26:a1:05:40:be:cc:ce:57:b3:31:0c:bb:1a:e9:
         9f:d5:e5:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscR0CGZ9M8XD3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM5ZTZhMWQtYjdkYy00YjZmLWE5NWEtYjVlNDMyY2Zl
YWU2MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
OTFhZDg5MTItNzZhZS00NDUyLTk4ZTAtNWM4MjBhMWZkZGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPyxRIkNNq02oKD9b4jYG7GVCuFmVOC93BCb
5GxcZAZP9d3FuvBWGJToaAXSqTcBsUY9VxpY6j5QwuY+kI2n3aJEdHl7Ch2PuhxR
viAt6ng4Rn1Hefphx9jh9yB5KNKOJfthv71cbKBfxTfaGflNaiERGHOUn5Fl+f1w
W+FNYvanoSw/I3EIyPatfFSE3p6Wuk1Y8z3OkEhT5DkF7YjOCG6K2KeTIIe50j5r
qYNkv8qcztit0T6MoYrad/eNzR1ttMWqN0BScekDIq/Brb62kxxOMaWWewPghex7
E9kskvN6eYpKkskF4/LrhZbgYGuGj8mrkYeESA9poPWucE5uRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKIlN2wWX1e21JiebvfxZMEHEsGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMzll
NmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0MzJjZmVhZTYvMjI1MWZkOWQtOGEwYy0z
NmJiLWI4N2UtMThmNGQ4NzMzNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDM5ZTZhMWQtYjdkYy00YjZmLWE5
NWEtYjVlNDMyY2ZlYWU2L2QzOWU2YTFkLWI3ZGMtNGI2Zi1hOTVhLWI1ZTQzMmNm
ZWFlNi5jcmwwHwYDVR0jBBgwFoAUGaNdaUuKPlvKvHRJfH6WhITONSMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMzllNmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0
MzJjZmVhZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqPfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKrh2S1libRuqztpIXRde98KxtNAppFIqWcwz0zGEdSnAiHCFbW56wx
GEn86gQcyGFZigbOxDbWeeBxgnB6FjahqcxubVuZ1+QtXXhQeYagv22KTzVBdU74
mD499gSd8/vu7cDhvCpP8YV9DJ1gnxw7XI1+Db6kIAKcwzKd0rN9wPSPEfVuHCnZ
SG4lUSZyO5te7suQrg2UAzgOoqG+KsYeFqgd4aCmipIdWcVWZoxoeLeuaDnYyTit
IRZ9oKWOkh+TaPCidvNU/t3ho7EINYorPHih/RjDwbIDYvfLQUiWC5OMibRuEY7P
sd5JausmoQVAvszOV7MxDLsa6Z/V5Ug=
-----END CERTIFICATE-----
Generated at Sun Sep 13 14:48:04 2026 by rpki-client