Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/2ccf0481-97c0-354c-9001-4ee727929a7f.roa
File:                     2ccf0481-97c0-354c-9001-4ee727929a7f.roa (raw, json)
Hash identifier:          dQhD9kP/6twwUl3HJ9pY+VA1kMffrCTXZZKoPOCNXaI=
Subject key identifier:   9B:C0:DC:07:9A:1C:27:72:7D:38:13:C1:E3:63:FD:D2:96:AD:5C:98
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584E31CF0ABBB2CEEAC34FE5EDE9
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/2ccf0481-97c0-354c-9001-4ee727929a7f.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     6453
IP address blocks:        66.198.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0a:bb:b2:ce:ea:c3:4f:e5:ed:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=948b1165-cc8b-4241-80b6-c71df508432e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:f9:f2:df:da:4d:9b:86:9e:05:7a:1d:cc:
                    a8:20:5e:93:97:6f:c3:bb:0e:14:51:1c:00:b3:bb:
                    16:16:6a:7d:25:c7:fd:c0:a9:f5:cb:82:0d:28:8c:
                    9d:d3:9e:ae:7f:76:f6:2f:80:b9:38:94:0c:a9:c2:
                    70:72:9c:3a:6f:cb:78:36:cf:11:c8:e9:51:4e:53:
                    9b:a9:20:01:47:60:29:9e:a9:46:77:31:54:85:87:
                    3a:18:63:d6:f2:37:2c:5c:f8:79:e5:64:0c:b6:3f:
                    dd:7f:c0:a2:d0:6a:d2:e0:b3:e0:34:41:e5:ba:b1:
                    7c:bd:46:f1:44:a4:be:6e:a4:80:1c:30:c2:d1:fb:
                    ed:6b:0c:83:40:3e:d9:22:80:1d:0e:56:d6:3a:e2:
                    69:7d:24:6b:85:2a:25:8e:35:a5:28:04:a8:6b:ba:
                    a0:8c:de:b7:57:b7:b0:9b:83:e4:8b:31:2b:75:54:
                    cc:be:9e:53:81:41:88:9b:05:53:dd:47:6a:9c:7f:
                    a9:fe:d6:dd:fc:64:f4:5f:6e:d8:90:98:ab:95:f0:
                    2a:28:66:62:20:f9:81:d7:01:ef:5e:f7:3d:d6:41:
                    f7:d0:46:dc:1f:41:6e:6b:67:88:75:dd:c5:d6:d1:
                    49:f4:f0:5c:2e:ad:c7:9e:f7:96:68:6b:7a:af:e8:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:DC:07:9A:1C:27:72:7D:38:13:C1:E3:63:FD:D2:96:AD:5C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/2ccf0481-97c0-354c-9001-4ee727929a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ca:c4:fd:d2:b1:9a:74:e9:33:2f:06:48:54:63:a2:1d:60:
         8e:05:2c:ce:e5:fe:4b:e5:8f:4a:61:5a:6c:b7:b4:a1:df:bb:
         23:76:5a:fa:3f:84:47:62:92:8c:ed:fb:88:29:e4:40:fc:18:
         b7:6c:60:f2:01:1e:92:8e:77:41:47:07:53:27:73:12:07:09:
         eb:8b:be:77:d4:95:a3:bb:8d:f2:7a:7f:c2:af:aa:53:08:b9:
         00:91:da:e1:c6:0d:ce:d7:35:47:aa:4f:00:52:46:5c:4d:d7:
         4d:61:58:d2:6d:1a:1a:e8:f7:de:a1:91:00:96:8a:4b:cb:85:
         59:3b:1e:6b:29:b6:73:b2:41:0a:26:35:40:68:a9:90:d2:f7:
         69:6a:8c:e5:a5:7a:bd:38:e1:e2:51:76:7f:6a:99:b0:f1:54:
         8e:b6:32:e4:31:bd:5e:f4:7c:8f:b5:be:57:8f:03:e2:4f:91:
         44:cc:95:2e:59:b1:d1:d7:eb:56:d3:81:82:64:6a:94:75:92:
         f6:9b:1e:6b:e3:13:77:4b:a0:77:30:4f:40:46:90:1b:b4:fe:
         9c:1e:fd:c2:6d:cc:57:43:d6:7f:35:dc:81:dc:d8:7a:5c:c7:
         a8:7e:71:21:08:ca:f7:ea:12:dc:c4:b4:b1:9e:d9:4e:d9:d6:
         1c:d1:59:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzwq7ss7qw0/l7ekwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
OTQ4YjExNjUtY2M4Yi00MjQxLTgwYjYtYzcxZGY1MDg0MzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwD58t/aTZuGngV6HcyoIF6Tl2/Duw4UURwA
s7sWFmp9Jcf9wKn1y4INKIyd056uf3b2L4C5OJQMqcJwcpw6b8t4Ns8RyOlRTlOb
qSABR2ApnqlGdzFUhYc6GGPW8jcsXPh55WQMtj/df8Ci0GrS4LPgNEHlurF8vUbx
RKS+bqSAHDDC0fvtawyDQD7ZIoAdDlbWOuJpfSRrhSoljjWlKASoa7qgjN63V7ew
m4PkizErdVTMvp5TgUGImwVT3UdqnH+p/tbd/GT0X27YkJirlfAqKGZiIPmB1wHv
Xvc91kH30EbcH0Fua2eIdd3F1tFJ9PBcLq3HnveWaGt6r+iXgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvA3AeaHCdyfTgTweNj/dKWrVyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMmNjZjA0ODEtOTdjMC0z
NTRjLTkwMDEtNGVlNzI3OTI5YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQsYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTKxP3SsZp06TMvBkhUY6IdYI4FLM7l/kvlj0phWmy3tKHfuyN2Wvo/
hEdikozt+4gp5ED8GLdsYPIBHpKOd0FHB1MncxIHCeuLvnfUlaO7jfJ6f8KvqlMI
uQCR2uHGDc7XNUeqTwBSRlxN101hWNJtGhro996hkQCWikvLhVk7HmsptnOyQQom
NUBoqZDS92lqjOWler044eJRdn9qmbDxVI62MuQxvV70fI+1vlePA+JPkUTMlS5Z
sdHX61bTgYJkapR1kvabHmvjE3dLoHcwT0BGkBu0/pwe/cJtzFdD1n813IHc2Hpc
x6h+cSEIyvfqEtzEtLGe2U7Z1hzRWYM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:22:59 2026 by rpki-client