Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa
File:                     66e45a7d-1f5b-3734-935a-1f34866304be.roa (raw, json)
Hash identifier:          tnHrGR3uj8DgPFh3Kaj+ZFDz0JxxsJUeH/IY/ABIDYM=
Subject key identifier:   D7:E1:11:B7:DF:8F:59:92:51:E0:DA:14:08:D8:EC:18:FB:BB:A0:D3
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F4328584D4D5A66DE071665BADA688B80
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     13984
IP address blocks:        206.124.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:66:de:07:16:65:ba:da:68:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=c66f4dd6-f046-467a-ab7e-1c246a1e502f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:71:0f:48:f0:6e:34:2b:d2:6d:e6:85:8f:
                    95:21:4c:e6:2a:78:5d:b1:34:0f:ef:55:49:67:2f:
                    6c:1d:df:d1:9a:91:23:45:c3:c2:7b:c2:27:38:ca:
                    12:6a:7f:2c:43:f0:ae:a1:ce:32:cd:10:f2:de:34:
                    21:93:d6:fe:eb:66:8b:fd:2e:d4:1f:13:a2:85:78:
                    ef:7d:8a:1b:73:1d:13:5e:b0:80:f6:3f:1d:66:c8:
                    0b:f3:15:08:18:ac:cf:51:5e:22:61:6c:91:d0:17:
                    94:df:97:a4:bb:88:55:dc:15:61:ae:5c:74:01:3d:
                    b7:59:09:b9:10:ab:7c:e0:67:ab:c7:fa:cb:38:7e:
                    2f:0b:f5:49:75:20:6f:13:69:54:2a:af:95:b7:bb:
                    18:72:46:d7:f1:70:57:e1:56:82:37:59:ec:93:6b:
                    b8:0b:06:9b:6e:d8:43:e5:0f:e9:e0:c5:5a:b2:44:
                    67:1a:7a:17:6e:d6:6f:47:b3:65:38:fb:52:ae:5b:
                    31:d1:5f:d5:18:c3:9a:44:ce:22:99:70:82:42:c2:
                    5c:d4:d3:ed:bf:50:f3:2c:37:87:c1:65:a0:1a:ca:
                    4f:16:22:13:82:b9:31:c8:f4:45:8a:99:7b:73:a5:
                    ed:5b:b7:04:ce:40:49:3b:43:97:a6:72:7f:1f:c0:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E1:11:B7:DF:8F:59:92:51:E0:DA:14:08:D8:EC:18:FB:BB:A0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:b7:d6:96:ab:a4:f1:c6:29:66:5a:49:44:e6:4a:ad:01:58:
         9e:b3:95:a3:d3:be:e5:b6:71:c6:d0:fe:0f:88:74:86:e9:93:
         d0:f5:4b:da:e1:52:61:80:3e:c7:93:27:3e:8c:6f:c9:be:ff:
         13:e2:13:e2:e8:80:f2:f5:2f:67:da:1e:65:72:81:7b:b4:f2:
         03:b6:19:84:66:5e:b3:53:08:8f:66:d8:fc:b8:9e:d6:a4:93:
         93:97:2e:19:f6:9c:38:5a:81:d0:9c:2b:df:bb:57:29:a6:02:
         08:b4:c4:de:7f:cb:d0:cc:2d:2f:5a:df:58:f3:a6:32:26:ab:
         29:1f:58:0a:6a:14:8f:10:3c:15:3d:b2:ea:c0:ec:9d:e5:47:
         9c:62:3d:6a:45:91:ce:b7:b7:a8:2f:64:0c:e2:cf:f5:bd:48:
         da:b9:09:b2:12:cf:1b:f9:a1:7f:86:55:7f:e2:05:1a:e8:44:
         72:b0:51:59:8c:ee:5d:9f:06:c5:49:7c:41:16:98:9b:c8:1d:
         b6:90:dd:43:d0:fc:39:66:2c:48:08:2a:37:88:1b:8e:34:d4:
         86:69:ac:af:14:3a:ac:73:0a:28:37:46:35:fc:ee:95:71:41:
         b6:83:c0:38:5b:b5:4c:e8:b0:ac:2f:cc:f7:b7:fc:df:a7:bd:
         e6:d2:20:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmbeBxZlutpoi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy
MjcwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YzY2ZjRkZDYtZjA0Ni00NjdhLWFiN2UtMWMyNDZhMWU1MDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh1xD0jwbjQr0m3mhY+VIUzmKnhdsTQP71VJ
Zy9sHd/RmpEjRcPCe8InOMoSan8sQ/Cuoc4yzRDy3jQhk9b+62aL/S7UHxOihXjv
fYobcx0TXrCA9j8dZsgL8xUIGKzPUV4iYWyR0BeU35eku4hV3BVhrlx0AT23WQm5
EKt84Gerx/rLOH4vC/VJdSBvE2lUKq+Vt7sYckbX8XBX4VaCN1nsk2u4CwabbthD
5Q/p4MVaskRnGnoXbtZvR7NlOPtSrlsx0V/VGMOaRM4imXCCQsJc1NPtv1DzLDeH
wWWgGspPFiITgrkxyPRFipl7c6XtW7cEzkBJO0OXpnJ/H8CaawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfhEbffj1mSUeDaFAjY7Bj7u6DTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw
ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvNjZlNDVhN2QtMWY1Yi0z
NzM0LTkzNWEtMWYzNDg2NjMwNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4
OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1
MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx
Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznytMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMO31parpPHGKWZaSUTmSq0BWJ6zlaPTvuW2ccbQ/g+IdIbpk9D1S9rh
UmGAPseTJz6Mb8m+/xPiE+LogPL1L2faHmVygXu08gO2GYRmXrNTCI9m2Py4ntak
k5OXLhn2nDhagdCcK9+7VymmAgi0xN5/y9DMLS9a31jzpjImqykfWApqFI8QPBU9
surA7J3lR5xiPWpFkc63t6gvZAziz/W9SNq5CbISzxv5oX+GVX/iBRroRHKwUVmM
7l2fBsVJfEEWmJvIHbaQ3UPQ/DlmLEgIKjeIG4401IZprK8UOqxzCig3RjX87pVx
QbaDwDhbtUzosKwvzPe3/N+nvebSIKA=
-----END CERTIFICATE-----
Generated at Mon Mar 30 11:44:42 2026 by rpki-client