Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/4d91a427-844f-3bae-99ed-265067fdc741.roa
File:                     4d91a427-844f-3bae-99ed-265067fdc741.roa (raw, json)
Hash identifier:          hJ955ae0f5Dkg8+mLjCy/fQ0WcfOQbSVeW3QuYB8ORU=
Subject key identifier:   D0:69:AF:50:25:84:4A:83:E9:25:CA:A2:19:C8:E1:F6:B9:AC:AB:1F
Certificate issuer:       /CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
Certificate serial:       010D0C9F4328584F4B14AE1891D313F591B14B00
Authority key identifier: 4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/4d91a427-844f-3bae-99ed-265067fdc741.roa
Signing time:             Fri 25 Sep 2026 15:02:45 +0000
ROA not before:           Fri 25 Sep 2026 15:02:45 +0000
ROA not after:            Thu 24 Dec 2026 16:02:45 +0000
asID:                     40676
IP address blocks:        66.117.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:14:ae:18:91:d3:13:f5:91:b1:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5f16a2-59f2-43d6-9783-b59c3b9ad843
        Validity
            Not Before: Sep 25 15:02:45 2026 GMT
            Not After : Dec 24 16:02:45 2026 GMT
        Subject: CN=af42a3a2-5091-47e2-9cb6-7465749bf48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:df:07:32:90:d8:5a:d2:52:8a:bd:25:bf:
                    f4:c3:bc:35:d9:2a:03:aa:56:29:e0:c8:7a:76:b0:
                    88:1c:98:61:c2:16:e6:24:69:c6:9d:35:35:1a:32:
                    18:57:68:81:66:d5:76:7c:59:51:5b:d6:ef:66:19:
                    76:80:a3:12:80:0e:ec:5c:90:ee:48:50:ea:a8:2b:
                    b2:cb:6b:e9:30:d3:1f:0c:2d:c4:1c:3c:2f:3a:a3:
                    0d:e0:ef:e8:85:f8:41:ce:7f:a0:55:57:31:2d:38:
                    81:82:5f:10:4d:e5:50:b0:23:12:3f:33:c0:a3:e3:
                    d9:80:fc:f7:1b:cf:37:04:47:e7:e8:96:05:03:7e:
                    02:0a:55:ba:55:f5:ac:8c:fa:10:87:79:78:34:f7:
                    6b:55:76:c2:2e:76:f3:3c:70:31:fd:db:28:bc:6e:
                    a7:0c:48:66:fc:9b:59:91:08:a0:9a:e1:01:a8:f3:
                    5a:2d:56:66:7a:d1:fa:a3:d0:95:74:89:82:a3:48:
                    59:ba:6b:2c:c2:e4:18:7b:b0:e7:cf:bf:ba:5f:77:
                    09:09:8f:0e:8f:c3:5a:5c:68:a1:3f:3e:71:f1:09:
                    c4:41:fd:0c:34:72:33:06:dc:53:dd:79:69:35:0f:
                    bb:1d:5b:b3:ad:9a:42:4b:af:4b:d2:5e:4a:da:cc:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:AF:50:25:84:4A:83:E9:25:CA:A2:19:C8:E1:F6:B9:AC:AB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/4d91a427-844f-3bae-99ed-265067fdc741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.crl

            X509v3 Authority Key Identifier:
                keyid:4A:16:A5:F3:FC:17:30:6E:A0:0F:DF:47:75:67:99:FB:0A:AA:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2a5f16a2-59f2-43d6-9783-b59c3b9ad843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:79:64:a5:63:2d:67:3c:8d:34:0d:1c:c7:41:73:a4:ed:
         27:0e:72:08:56:33:e3:65:39:5b:86:fb:0d:dc:fa:b4:b0:87:
         ea:13:ad:a6:46:6a:11:36:03:46:39:8f:d5:c1:4e:28:d1:50:
         fb:03:11:cb:b7:1b:35:8a:59:99:1e:a7:46:3a:ac:02:b3:a9:
         e1:cd:80:ad:71:8b:b4:83:70:8d:ca:bd:92:ab:a9:27:4f:d1:
         19:1e:c1:66:9e:e7:23:7e:f3:31:e2:88:4a:d5:04:79:ba:c3:
         93:dd:39:0f:a4:f1:48:9b:f9:d9:43:c9:3a:c6:31:1b:fb:0f:
         eb:c4:2b:b7:b4:c7:8e:3c:38:eb:37:16:4f:bd:50:18:73:f9:
         e1:20:c0:94:5a:ed:57:27:cc:b8:35:33:2a:d3:90:26:a2:c4:
         92:54:39:17:ef:d1:d4:67:e1:e5:42:6d:3c:16:91:5c:5e:9b:
         73:30:d7:33:3d:0c:da:59:9f:80:0c:7e:e5:7d:5a:94:93:60:
         de:df:d9:cf:26:fd:ad:e9:22:35:3b:1e:ab:ba:4f:36:10:fa:
         1a:34:9c:b1:80:7e:aa:0c:98:7a:ee:51:7f:0f:d7:08:82:aa:
         fe:31:b7:2c:f9:3b:22:16:04:c1:4a:60:8a:8a:4f:e9:3d:c1:
         a6:f2:05:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LFK4YkdMT9ZGxSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE1ZjE2YTItNTlmMi00M2Q2LTk3ODMtYjU5YzNiOWFk
ODQzMB4XDTI2MDkyNTE1MDI0NVoXDTI2MTIyNDE2MDI0NVowLzEtMCsGA1UEAxMk
YWY0MmEzYTItNTA5MS00N2UyLTljYjYtNzQ2NTc0OWJmNDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ/fBzKQ2FrSUoq9Jb/0w7w12SoDqlYp4Mh6
drCIHJhhwhbmJGnGnTU1GjIYV2iBZtV2fFlRW9bvZhl2gKMSgA7sXJDuSFDqqCuy
y2vpMNMfDC3EHDwvOqMN4O/ohfhBzn+gVVcxLTiBgl8QTeVQsCMSPzPAo+PZgPz3
G883BEfn6JYFA34CClW6VfWsjPoQh3l4NPdrVXbCLnbzPHAx/dsovG6nDEhm/JtZ
kQigmuEBqPNaLVZmetH6o9CVdImCo0hZumsswuQYe7Dnz7+6X3cJCY8Oj8NaXGih
Pz5x8QnEQf0MNHIzBtxT3XlpNQ+7HVuzrZpCS69L0l5K2szXSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBpr1AlhEqD6SXKohnI4fa5rKsfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVm
MTZhMi01OWYyLTQzZDYtOTc4My1iNTljM2I5YWQ4NDMvNGQ5MWE0MjctODQ0Zi0z
YmFlLTk5ZWQtMjY1MDY3ZmRjNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmE1ZjE2YTItNTlmMi00M2Q2LTk3
ODMtYjU5YzNiOWFkODQzLzJhNWYxNmEyLTU5ZjItNDNkNi05NzgzLWI1OWMzYjlh
ZDg0My5jcmwwHwYDVR0jBBgwFoAUShal8/wXMG6gD99HdWeZ+wqqZU8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYTVmMTZhMi01OWYyLTQzZDYtOTc4My1iNTlj
M2I5YWQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnWEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUKeWSlYy1nPI00DRzHQXOk7ScOcghWM+NlOVuG+w3c+rSwh+oTraZG
ahE2A0Y5j9XBTijRUPsDEcu3GzWKWZkep0Y6rAKzqeHNgK1xi7SDcI3KvZKrqSdP
0RkewWae5yN+8zHiiErVBHm6w5PdOQ+k8Uib+dlDyTrGMRv7D+vEK7e0x448OOs3
Fk+9UBhz+eEgwJRa7VcnzLg1MyrTkCaixJJUORfv0dRn4eVCbTwWkVxem3Mw1zM9
DNpZn4AMfuV9WpSTYN7f2c8m/a3pIjU7Hqu6TzYQ+ho0nLGAfqoMmHruUX8P1wiC
qv4xtyz5OyIWBMFKYIqKT+k9wabyBf4=
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:02 2026 by rpki-client