Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa
File:                     1aab2dbe-d208-3e83-ad04-b139cc44c834.roa (raw, json)
Hash identifier:          HiipseQvjmmUSe8Mxm7EsfhQ3/dP8EWGyUhhYbBmPDc=
Subject key identifier:   9F:17:7C:0E:37:2D:8F:97:A6:6E:A9:46:90:7D:50:A5:1D:0F:B0:DF
Certificate issuer:       /CN=213412d0-2e00-4f54-95bc-e72555790689
Certificate serial:       010D0C9F4328584DDE87F76A977EE165B6B0B5C0
Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     40509
IP address blocks:        66.241.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:f7:6a:97:7e:e1:65:b6:b0:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=acfd5a52-429d-406f-8484-f52e36bad088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:2f:2d:17:03:ba:cb:9b:0f:d4:6b:50:5a:
                    42:2f:94:99:8f:ae:49:00:ef:50:ff:94:0a:4e:3a:
                    95:26:28:da:ac:f7:06:fa:67:8b:36:9e:1c:90:bb:
                    59:23:6e:ec:7b:b4:cf:78:e3:b4:dc:af:bb:f2:db:
                    fe:93:03:f9:6d:b5:0e:cb:3c:1b:86:ee:41:8a:be:
                    2a:b7:a3:cf:a0:ef:05:d7:57:4f:84:11:37:9a:c8:
                    2d:f0:bd:5f:50:3b:18:41:98:5a:30:ee:fd:a0:69:
                    6a:78:6b:4f:fe:2b:0e:b0:c2:cd:ca:7b:bf:6c:df:
                    89:1a:22:91:45:bf:5f:bf:58:ab:6e:a1:23:e0:56:
                    01:66:c0:12:ef:d4:49:2d:5c:02:54:17:a6:c3:b5:
                    96:a6:5e:a2:59:d2:e0:29:ce:43:75:7d:65:9d:dd:
                    bb:fe:05:f5:91:9b:a6:ca:53:cf:63:8e:41:21:07:
                    85:97:cc:71:6e:06:d2:32:df:b9:02:90:70:cb:ef:
                    de:74:45:47:09:fa:25:36:cb:85:be:b3:98:40:c4:
                    44:ab:a3:5c:b1:a0:6b:e3:66:21:8d:03:04:7e:50:
                    ae:e0:9d:12:53:c3:ab:ab:7c:ae:b8:7a:c4:60:41:
                    de:5d:a1:a4:8d:79:ef:17:b4:2b:f9:74:b1:ae:20:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:7C:0E:37:2D:8F:97:A6:6E:A9:46:90:7D:50:A5:1D:0F:B0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl

            X509v3 Authority Key Identifier:
                keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.241.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:32:f4:03:8b:82:5e:91:8e:57:79:d3:fc:ae:97:b7:3f:e0:
         1f:07:38:f0:f4:98:7c:b7:0b:1e:d7:98:c3:91:33:2b:54:2d:
         40:0e:16:8d:29:4c:b2:e8:a1:b2:77:0b:86:87:f4:c4:a2:15:
         40:9e:35:4c:77:02:a7:db:52:1a:57:46:da:e3:15:d9:09:50:
         3f:fa:45:07:aa:43:20:7a:e6:10:ad:ad:82:0f:71:2a:a1:6f:
         4b:c0:8d:ea:69:f1:0f:62:de:8e:fd:93:e2:20:ca:cc:49:8f:
         4f:22:42:4b:53:bd:95:7b:1c:1d:ad:5b:bc:9d:2e:a7:34:de:
         39:37:cc:96:03:a8:be:f4:fa:30:5a:dd:79:1f:37:a9:86:86:
         70:59:6d:12:ec:48:b1:87:44:f1:db:f5:09:f7:ea:21:36:39:
         94:8b:a2:90:84:94:dd:9c:f3:d9:0f:3e:1c:42:38:d6:e2:18:
         b2:46:77:32:40:5f:c2:ed:2c:95:23:4c:57:53:e7:86:92:bb:
         ad:12:8f:e3:f0:f7:68:37:06:d8:c1:98:ed:cf:c6:c2:a2:3e:
         9c:cf:60:41:7b:fe:4f:18:8f:8f:a1:0f:02:0a:ab:4b:2a:d8:
         0d:0d:8c:d7:c3:03:b3:24:47:de:08:a8:e6:b0:12:57:8d:3d:
         bc:da:3b:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eh/dql37hZbawtcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw
Njg5MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
YWNmZDVhNTItNDI5ZC00MDZmLTg0ODQtZjUyZTM2YmFkMDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNcvLRcDusubD9RrUFpCL5SZj65JAO9Q/5QK
TjqVJijarPcG+meLNp4ckLtZI27se7TPeOO03K+78tv+kwP5bbUOyzwbhu5Bir4q
t6PPoO8F11dPhBE3msgt8L1fUDsYQZhaMO79oGlqeGtP/isOsMLNynu/bN+JGiKR
Rb9fv1irbqEj4FYBZsAS79RJLVwCVBemw7WWpl6iWdLgKc5DdX1lnd27/gX1kZum
ylPPY45BIQeFl8xxbgbSMt+5ApBwy+/edEVHCfolNsuFvrOYQMREq6NcsaBr42Yh
jQMEflCu4J0SU8Orq3yuuHrEYEHeXaGkjXnvF7Qr+XSxriCyYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8XfA43LY+Xpm6pRpB9UKUdD7DfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0
MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMWFhYjJkYmUtZDIwOC0z
ZTgzLWFkMDQtYjEzOWNjNDRjODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1
YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5
MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1
NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcy9AOLgl6Rjld50/yul7c/4B8HOPD0mHy3Cx7XmMORMytULUAOFo0p
TLLoobJ3C4aH9MSiFUCeNUx3AqfbUhpXRtrjFdkJUD/6RQeqQyB65hCtrYIPcSqh
b0vAjepp8Q9i3o79k+IgysxJj08iQktTvZV7HB2tW7ydLqc03jk3zJYDqL70+jBa
3XkfN6mGhnBZbRLsSLGHRPHb9Qn36iE2OZSLopCElN2c89kPPhxCONbiGLJGdzJA
X8LtLJUjTFdT54aSu60Sj+Pw92g3BtjBmO3PxsKiPpzPYEF7/k8Yj4+hDwIKq0sq
2A0NjNfDA7MkR94IqOawEleNPbzaO6g=
-----END CERTIFICATE-----
Generated at Mon May 25 05:49:20 2026 by rpki-client