Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cb232b83-f9ae-3733-99ea-57b4c8693a6c.roa
File:                     cb232b83-f9ae-3733-99ea-57b4c8693a6c.roa (raw, json)
Hash identifier:          Kc48tIp+kp/jQ2XUKTWQ0EqfNTPEV+hZo+X5MmV7pDs=
Subject key identifier:   52:60:08:08:8D:0C:32:D8:8C:04:A7:D2:9E:93:5E:1A:C5:32:ED:B4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DD4C06D3491C0CA6CC0E04B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cb232b83-f9ae-3733-99ea-57b4c8693a6c.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     401605
IP address blocks:        66.78.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:6d:34:91:c0:ca:6c:c0:e0:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=ea9f4d68-2644-49a2-85d2-0843a7a69b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:b2:9a:3e:f2:79:73:a1:d4:1d:70:22:0b:
                    f3:18:ff:82:2f:7c:3d:14:b0:14:c0:eb:8c:4e:b6:
                    cb:54:67:1c:a9:1d:55:c3:b2:98:72:c6:25:e4:29:
                    fd:58:77:b1:cc:b3:60:fd:d3:a6:18:12:89:69:23:
                    88:f7:66:2e:0c:cb:2a:4d:db:d6:7c:8c:c6:21:26:
                    be:8a:c7:d2:55:ad:34:0f:cc:87:06:8e:2f:44:69:
                    20:f9:84:92:1f:28:e6:be:53:e5:dc:16:b4:85:f3:
                    d1:6a:95:5e:c2:b9:1a:42:91:a5:ab:88:c9:b5:ab:
                    b4:64:83:30:6d:be:24:50:ae:e5:12:e6:a3:02:8e:
                    89:bd:62:ff:9b:c9:87:7e:19:1c:b1:44:2c:17:91:
                    49:b2:51:08:d2:7c:3f:ff:1b:0b:26:3a:9e:9e:7e:
                    5f:ff:e4:8b:25:a2:96:e2:fc:8b:a2:96:5a:20:6f:
                    09:c7:a2:c0:b3:32:5e:00:ae:04:c9:8d:7a:8e:6b:
                    10:e6:52:02:22:85:d7:e7:70:38:63:71:aa:b1:a0:
                    50:a9:77:d2:02:7c:37:2b:1f:4a:47:9e:9c:39:ce:
                    1b:6d:e2:88:24:9a:a2:f5:cf:b6:ec:79:eb:b8:9c:
                    b5:0a:78:95:01:e5:c5:e5:c3:49:35:04:e0:dd:19:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:60:08:08:8D:0C:32:D8:8C:04:A7:D2:9E:93:5E:1A:C5:32:ED:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cb232b83-f9ae-3733-99ea-57b4c8693a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:43:cf:6c:8e:7e:5e:86:49:fe:04:7c:6f:b5:f6:04:cb:
         0f:e8:bb:a4:df:84:a7:f1:ee:f7:61:08:06:1d:cd:d4:b5:2f:
         15:37:73:b5:66:65:ef:58:98:37:f4:27:c6:26:ca:26:01:04:
         ae:5e:52:58:81:14:f6:27:67:f4:8d:fa:14:d7:18:8c:da:a8:
         f6:7c:16:8f:e2:63:29:e2:04:d1:d8:f6:25:ee:90:49:66:1a:
         d2:42:73:0b:c6:b5:6e:6d:76:17:c0:88:0c:ca:42:a6:cd:c9:
         52:43:f3:08:28:42:9a:ab:74:a3:32:20:07:99:3d:5d:3b:ad:
         a3:83:71:cc:fd:15:fb:97:ed:20:3a:8d:9c:1b:1d:00:1f:40:
         b0:3f:87:67:91:12:af:7b:d6:e6:80:5a:49:d4:e3:25:4f:7a:
         ed:44:72:a9:62:4e:e6:d5:16:ee:6d:e5:6a:d8:72:40:65:43:
         bc:21:d7:69:c3:0e:08:2a:59:0a:12:3d:27:8c:af:54:4e:27:
         f3:eb:be:17:7a:25:bc:d3:60:02:c3:93:a4:33:c3:cc:dd:9e:
         57:70:15:ee:f4:0d:b5:92:61:6b:eb:01:6f:4d:bd:0b:4a:d3:
         6f:36:fa:4e:fb:fe:34:3b:f9:f0:b4:dc:e6:ad:18:7b:cb:79:
         cd:5b:16:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwG00kcDKbMDgSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
ZWE5ZjRkNjgtMjY0NC00OWEyLTg1ZDItMDg0M2E3YTY5YjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Cymj7yeXOh1B1wIgvzGP+CL3w9FLAUwOuM
TrbLVGccqR1Vw7KYcsYl5Cn9WHexzLNg/dOmGBKJaSOI92YuDMsqTdvWfIzGISa+
isfSVa00D8yHBo4vRGkg+YSSHyjmvlPl3Ba0hfPRapVewrkaQpGlq4jJtau0ZIMw
bb4kUK7lEuajAo6JvWL/m8mHfhkcsUQsF5FJslEI0nw//xsLJjqenn5f/+SLJaKW
4vyLopZaIG8Jx6LAszJeAK4EyY16jmsQ5lICIoXX53A4Y3GqsaBQqXfSAnw3Kx9K
R56cOc4bbeKIJJqi9c+27HnruJy1CniVAeXF5cNJNQTg3RmNnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJgCAiNDDLYjASn0p6TXhrFMu20MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvY2IyMzJiODMtZjlhZS0z
NzMzLTk5ZWEtNTdiNGM4NjkzYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQk47MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOcQ89sjn5ehkn+BHxvtfYEyw/ou6TfhKfx7vdhCAYdzdS1LxU3c7Vm
Ze9YmDf0J8YmyiYBBK5eUliBFPYnZ/SN+hTXGIzaqPZ8Fo/iYyniBNHY9iXukElm
GtJCcwvGtW5tdhfAiAzKQqbNyVJD8wgoQpqrdKMyIAeZPV07raODccz9FfuX7SA6
jZwbHQAfQLA/h2eREq971uaAWknU4yVPeu1EcqliTubVFu5t5WrYckBlQ7wh12nD
DggqWQoSPSeMr1ROJ/Prvhd6JbzTYALDk6Qzw8zdnldwFe70DbWSYWvrAW9NvQtK
0282+k77/jQ7+fC03OatGHvLec1bFok=
-----END CERTIFICATE-----
Generated at Tue May 19 00:29:06 2026 by rpki-client