Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/cf9443b8-7527-3d46-bf8a-e49c51552f49.roa
File:                     cf9443b8-7527-3d46-bf8a-e49c51552f49.roa (raw, json)
Hash identifier:          3frkF6SWLug1RcC5naMKNxAqTWubowmltFDJ4DqVMFA=
Subject key identifier:   C2:01:19:3C:66:A0:F5:6D:F8:F6:CA:7E:FE:1C:B5:32:2B:58:44:63
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584D36272128C156162546072080
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/cf9443b8-7527-3d46-bf8a-e49c51552f49.roa
Signing time:             Wed 18 Mar 2026 17:34:04 +0000
ROA not before:           Wed 18 Mar 2026 17:34:04 +0000
ROA not after:            Tue 16 Jun 2026 17:34:04 +0000
asID:                     398324
IP address blocks:        66.234.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:27:21:28:c1:56:16:25:46:07:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Mar 18 17:34:04 2026 GMT
            Not After : Jun 16 17:34:04 2026 GMT
        Subject: CN=fc68a014-a1df-499a-bfcb-7414d693918b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:06:87:b8:f4:01:92:04:22:1f:82:28:88:
                    d0:f8:b9:a5:d9:f5:94:96:fa:a6:1c:79:be:6d:40:
                    2d:cd:b5:83:cb:a1:65:72:00:9a:7b:e2:c1:2d:2f:
                    8b:63:b1:50:81:51:85:56:60:74:c8:33:a1:a7:1a:
                    6c:2c:d8:5a:c6:33:56:37:e6:c7:45:dc:d0:27:c4:
                    be:e8:c7:79:2f:b9:d1:c7:87:5c:89:2f:a5:08:d8:
                    0e:22:02:31:d0:24:14:b6:50:b6:c7:ec:60:4d:81:
                    44:e0:70:64:23:41:36:80:28:dd:a8:b2:a3:68:b7:
                    6a:3c:dd:d8:dd:2c:b7:93:4d:f1:03:42:99:c1:1d:
                    b7:d0:1d:33:52:57:85:bf:82:08:9f:d9:78:5a:43:
                    d8:d6:13:0e:a0:dd:5c:05:de:61:36:ca:2f:40:69:
                    7c:b8:89:83:3f:68:7a:63:1c:57:c2:03:9f:4f:00:
                    c4:e2:af:0b:1c:e4:0b:b9:e9:d4:71:ee:58:04:24:
                    67:43:76:5e:1f:c9:69:2c:d5:e4:71:7a:4d:a9:a8:
                    77:31:9b:1b:e9:d3:a0:9e:21:05:1d:19:0d:d6:1e:
                    27:74:89:94:8d:5a:95:11:1f:22:4c:7d:1b:5c:32:
                    bc:94:e0:04:74:50:d4:13:5b:90:bd:f5:d3:31:2e:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:19:3C:66:A0:F5:6D:F8:F6:CA:7E:FE:1C:B5:32:2B:58:44:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/cf9443b8-7527-3d46-bf8a-e49c51552f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.234.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:c6:08:bd:99:9a:5f:f2:be:1f:cb:ea:d3:72:50:0b:97:
         41:95:7f:12:fc:08:5a:66:c6:d2:a8:14:ed:62:40:1c:8b:67:
         0e:56:68:37:b8:b5:a9:ab:d3:07:87:c4:c5:d7:8a:50:f5:ee:
         7d:14:e1:40:7d:03:ed:5d:28:85:81:5b:24:bb:4d:92:fe:dc:
         8f:c2:0f:cb:98:c1:e2:ae:de:56:ee:b3:15:e1:68:f2:0f:27:
         b2:1a:72:59:f5:ce:b9:e0:98:4e:90:39:87:24:9b:6c:a3:2c:
         26:f5:c4:73:0c:c3:7f:42:1a:c5:8e:60:de:36:2e:06:e2:3c:
         2d:21:e0:bd:c2:aa:96:9c:fe:c9:88:69:3d:23:7c:f3:29:af:
         54:ff:e9:9c:ed:a5:e2:6d:88:35:2a:3a:22:ac:24:7e:a6:54:
         f5:04:a9:b6:51:52:9d:28:33:45:ac:ef:5d:01:c5:8b:1e:f4:
         0a:39:04:6b:bd:29:65:ca:0f:63:e3:c1:50:1c:30:8b:db:0f:
         64:f9:fd:bf:d8:6b:bd:16:b5:0a:f2:57:8c:13:61:b0:aa:b3:
         a7:9e:5a:41:56:11:31:02:d9:20:89:63:2f:f9:7e:f9:c5:ac:
         5f:d0:c0:98:db:5a:c1:55:c2:71:76:6d:12:46:38:09:17:ca:
         d7:8e:36:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02JyEowVYWJUYHIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI2MDMxODE3MzQwNFoXDTI2MDYxNjE3MzQwNFowLzEtMCsGA1UEAxMk
ZmM2OGEwMTQtYTFkZi00OTlhLWJmY2ItNzQxNGQ2OTM5MThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0IGh7j0AZIEIh+CKIjQ+Lml2fWUlvqmHHm+
bUAtzbWDy6FlcgCae+LBLS+LY7FQgVGFVmB0yDOhpxpsLNhaxjNWN+bHRdzQJ8S+
6Md5L7nRx4dciS+lCNgOIgIx0CQUtlC2x+xgTYFE4HBkI0E2gCjdqLKjaLdqPN3Y
3Sy3k03xA0KZwR230B0zUleFv4IIn9l4WkPY1hMOoN1cBd5hNsovQGl8uImDP2h6
YxxXwgOfTwDE4q8LHOQLuenUce5YBCRnQ3ZeH8lpLNXkcXpNqah3MZsb6dOgniEF
HRkN1h4ndImUjVqVER8iTH0bXDK8lOAEdFDUE1uQvfXTMS6FJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIBGTxmoPVt+PbKfv4ctTIrWERjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvY2Y5NDQzYjgtNzUyNy0z
ZDQ2LWJmOGEtZTQ5YzUxNTUyZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQuoBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKzxgi9mZpf8r4fy+rTclALl0GVfxL8CFpmxtKoFO1iQByLZw5WaDe4
tamr0weHxMXXilD17n0U4UB9A+1dKIWBWyS7TZL+3I/CD8uYweKu3lbusxXhaPIP
J7Iacln1zrngmE6QOYckm2yjLCb1xHMMw39CGsWOYN42LgbiPC0h4L3Cqpac/smI
aT0jfPMpr1T/6ZztpeJtiDUqOiKsJH6mVPUEqbZRUp0oM0Ws710BxYse9Ao5BGu9
KWXKD2PjwVAcMIvbD2T5/b/Ya70WtQryV4wTYbCqs6eeWkFWETEC2SCJYy/5fvnF
rF/QwJjbWsFVwnF2bRJGOAkXyteONsI=
-----END CERTIFICATE-----
Generated at Thu Mar 19 16:45:48 2026 by rpki-client