Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a291e078-89e9-3804-b69a-c329e494dc85.roa
File:                     a291e078-89e9-3804-b69a-c329e494dc85.roa (raw, json)
Hash identifier:          SJ3UywPf7YHBVkBZySPnknzvKWmPgWlGfEylqYhJf0M=
Subject key identifier:   C0:61:CD:44:2C:FD:78:61:2C:E5:FF:C6:2E:B1:06:ED:F5:ED:D4:D0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77A3903BCA6B84CE09E500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a291e078-89e9-3804-b69a-c329e494dc85.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        66.54.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a3:90:3b:ca:6b:84:ce:09:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=09f85565-cdd3-4e3f-99c1-70d9970e4fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:26:4a:55:27:e9:35:4d:06:bb:f5:36:c5:
                    d4:6b:d9:d7:17:13:13:a0:5b:50:09:bd:8b:99:60:
                    40:9f:ff:e3:16:a0:25:61:18:f4:cd:c7:80:f4:9a:
                    22:69:b9:b7:c5:43:3a:6c:8e:98:13:12:d5:cb:e2:
                    e4:e5:6b:27:33:6f:f4:32:0d:c0:61:91:ab:68:09:
                    af:69:21:a0:96:6f:34:cd:12:59:b9:8d:ac:ca:f1:
                    20:3c:e0:45:7e:61:c5:8b:c9:87:c2:c2:33:ea:69:
                    09:8f:a7:1d:bc:cb:0b:a4:de:1b:d3:f6:0d:2e:f2:
                    4d:5d:a1:d8:52:db:ea:cd:f7:24:80:b2:f9:b4:6c:
                    a7:dc:6f:00:6e:e8:f6:6d:55:c0:cd:39:8c:39:4e:
                    8c:c4:d6:1a:37:8a:26:4b:72:1d:21:dd:22:33:48:
                    f7:33:98:0d:0f:0a:43:9e:93:db:07:fd:7f:09:8e:
                    05:15:85:7f:a4:be:e6:6a:62:88:19:47:35:b5:10:
                    69:cc:e3:da:e7:fe:13:25:21:7c:ca:40:62:8b:f3:
                    a6:e6:50:2b:3f:44:61:9f:21:2e:bc:4d:e6:93:f9:
                    2a:32:1d:f1:ee:51:62:5a:a0:20:48:e8:c2:42:b9:
                    e4:af:d3:b5:cc:fd:10:98:e0:15:26:db:be:30:95:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:61:CD:44:2C:FD:78:61:2C:E5:FF:C6:2E:B1:06:ED:F5:ED:D4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a291e078-89e9-3804-b69a-c329e494dc85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:e4:2a:f4:78:6f:93:b5:07:db:87:d8:3a:db:fb:95:2f:
         38:d1:9a:cb:1c:67:4c:cb:9b:a2:ad:2a:42:94:86:9f:de:26:
         a0:72:20:a4:93:d3:1f:0d:89:0e:a1:a6:70:64:94:72:e5:8e:
         65:c1:5a:91:05:79:4d:10:d5:28:bc:11:a3:c9:8e:3d:87:df:
         ff:20:f0:57:b4:0e:d1:af:f9:4b:a2:de:ea:7a:43:11:67:9f:
         09:6b:4f:f9:34:e7:4e:9a:52:f5:14:ab:51:8a:4d:1e:f3:e5:
         0b:02:a7:d2:47:b8:89:6d:c9:35:73:df:d5:1b:6c:d9:fc:bf:
         14:25:cd:a7:4a:1d:3d:78:3b:c0:2d:d3:8b:64:f6:34:6f:52:
         1a:92:ea:f4:83:fd:68:8c:76:2c:aa:ed:80:a0:23:88:ff:d1:
         4c:46:b7:cf:97:71:84:9b:32:53:f7:de:cb:34:69:1a:09:73:
         49:ac:82:b2:de:1d:b0:c2:67:c7:61:6b:34:e7:04:86:55:b5:
         e9:8c:9a:4d:90:df:0f:a3:e3:46:19:e5:05:56:bb:2d:67:b6:
         7b:13:06:ff:65:0e:cf:49:88:74:30:8b:63:68:ee:05:26:e8:
         b6:20:40:fd:20:17:76:6f:6a:a5:15:4a:ed:87:02:70:de:3d:
         66:f6:de:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6OQO8prhM4J5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
MDlmODU1NjUtY2RkMy00ZTNmLTk5YzEtNzBkOTk3MGU0ZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkQmSlUn6TVNBrv1NsXUa9nXFxMToFtQCb2L
mWBAn//jFqAlYRj0zceA9Joiabm3xUM6bI6YExLVy+Lk5WsnM2/0Mg3AYZGraAmv
aSGglm80zRJZuY2syvEgPOBFfmHFi8mHwsIz6mkJj6cdvMsLpN4b0/YNLvJNXaHY
UtvqzfckgLL5tGyn3G8Abuj2bVXAzTmMOU6MxNYaN4omS3IdId0iM0j3M5gNDwpD
npPbB/1/CY4FFYV/pL7mamKIGUc1tRBpzOPa5/4TJSF8ykBii/Om5lArP0RhnyEu
vE3mk/kqMh3x7lFiWqAgSOjCQrnkr9O1zP0QmOAVJtu+MJWOyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBhzUQs/XhhLOX/xi6xBu317dTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTI5MWUwNzgtODllOS0z
ODA0LWI2OWEtYzMyOWU0OTRkYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWh5Cr0eG+TtQfbh9g62/uVLzjRmsscZ0zLm6KtKkKUhp/eJqByIKST
0x8NiQ6hpnBklHLljmXBWpEFeU0Q1Si8EaPJjj2H3/8g8Fe0DtGv+Uui3up6QxFn
nwlrT/k0506aUvUUq1GKTR7z5QsCp9JHuIltyTVz39UbbNn8vxQlzadKHT14O8At
04tk9jRvUhqS6vSD/WiMdiyq7YCgI4j/0UxGt8+XcYSbMlP33ss0aRoJc0msgrLe
HbDCZ8dhazTnBIZVtemMmk2Q3w+j40YZ5QVWuy1ntnsTBv9lDs9JiHQwi2No7gUm
6LYgQP0gF3ZvaqUVSu2HAnDePWb23iU=
-----END CERTIFICATE-----
Generated at Wed Mar 11 20:55:44 2026 by rpki-client