Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa
File:                     cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa (raw, json)
Hash identifier:          twXQUfd5/c994byjYwAMOW5/+W1GPwldutNFs7WY96k=
Subject key identifier:   8D:F4:20:21:12:B0:E7:EB:94:32:04:0E:86:E7:D7:59:DB:3A:EB:B2
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584ED9C765C58E65DD8942EE8A80
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16509
IP address blocks:        66.114.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:65:c5:8e:65:dd:89:42:ee:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=15faa316-4b31-4b9e-ba80-43073313928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:8d:1b:c4:40:b5:c2:85:68:4e:7b:b9:46:
                    15:27:8c:3c:5e:ca:b7:ba:d4:19:cb:2e:70:80:db:
                    1f:85:da:14:7b:63:59:40:65:55:0f:7c:13:6b:4d:
                    61:1f:2f:09:df:a6:66:4b:c1:25:af:2c:ae:ec:50:
                    d5:da:5b:0e:75:4f:f3:0d:97:56:ff:6e:6e:ec:1a:
                    b2:b8:86:d7:e5:cd:4e:ed:b1:26:10:95:2c:15:4a:
                    d1:58:2e:2d:96:40:81:0c:67:11:03:13:a0:9d:c2:
                    97:9b:d4:70:12:e6:6e:ec:d6:dc:f1:3f:ce:fa:80:
                    55:a6:c5:98:0b:1e:06:83:91:a1:57:9c:4f:2e:6e:
                    17:f6:a0:d6:37:36:d5:29:b8:87:30:6f:ea:8b:f6:
                    57:37:dc:a6:b2:65:c0:35:00:b3:26:69:e5:12:73:
                    01:d1:ef:64:c5:36:af:52:5e:56:32:10:4a:0a:7d:
                    8a:76:d1:f1:53:5b:39:84:ee:73:eb:0a:71:88:6d:
                    8a:55:2d:d2:f2:42:4c:5b:15:b9:7b:94:93:95:26:
                    c5:71:3e:56:78:62:53:63:ef:1f:1f:67:81:ef:d8:
                    1a:e7:11:5b:25:9b:7b:65:f4:94:1b:ac:87:00:ea:
                    b0:58:b4:c6:2a:1f:94:89:b5:22:c1:be:c6:60:53:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:20:21:12:B0:E7:EB:94:32:04:0E:86:E7:D7:59:DB:3A:EB:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:21:eb:9a:62:79:a2:08:22:95:ab:d3:64:80:e3:ea:77:
         30:4c:ba:b4:3d:50:5c:c8:32:5a:8e:88:70:45:c4:ae:59:da:
         e0:b3:04:e9:ff:a1:cd:56:fc:42:eb:ab:2b:67:46:61:1a:0c:
         c0:29:15:ea:7b:66:8b:9b:ca:21:17:39:db:ef:dc:f1:c2:70:
         02:30:25:59:de:a2:7b:12:7b:44:70:7d:73:fb:ce:94:3d:82:
         75:8e:8e:51:a1:65:c2:8d:d3:8f:db:a3:fc:df:f0:99:97:bf:
         02:97:2d:73:c3:ee:15:84:77:0d:db:ed:ac:9c:65:52:b4:49:
         9d:b3:2d:8c:82:c8:68:b5:6b:97:4c:44:2c:67:d3:83:79:92:
         0f:36:bf:cc:9d:97:43:32:42:23:12:71:4e:ee:51:c5:d1:0e:
         f5:8c:e8:ef:4a:74:81:1a:24:95:f8:88:66:3b:58:9c:4a:2f:
         8b:6e:e0:b8:d3:69:ad:bb:4a:7e:50:a6:be:d2:15:2f:68:7a:
         7a:60:df:cd:3c:94:14:35:da:b2:10:72:8c:20:5e:01:42:cd:
         85:72:d1:8b:92:66:1f:21:d4:33:6d:f6:f3:c2:b0:fd:a8:50:
         86:be:f4:9b:12:a5:13:a6:f5:cf:0b:58:1d:dc:b1:e0:19:ac:
         e2:da:d8:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2XFjmXdiULuioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5
OTg4MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
MTVmYWEzMTYtNGIzMS00YjllLWJhODAtNDMwNzMzMTM5MjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+yNG8RAtcKFaE57uUYVJ4w8Xsq3utQZyy5w
gNsfhdoUe2NZQGVVD3wTa01hHy8J36ZmS8Elryyu7FDV2lsOdU/zDZdW/25u7Bqy
uIbX5c1O7bEmEJUsFUrRWC4tlkCBDGcRAxOgncKXm9RwEuZu7Nbc8T/O+oBVpsWY
Cx4Gg5GhV5xPLm4X9qDWNzbVKbiHMG/qi/ZXN9ymsmXANQCzJmnlEnMB0e9kxTav
Ul5WMhBKCn2KdtHxU1s5hO5z6wpxiG2KVS3S8kJMWxW5e5STlSbFcT5WeGJTY+8f
H2eB79ga5xFbJZt7ZfSUG6yHAOqwWLTGKh+UibUiwb7GYFMu/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI30ICESsOfrlDIEDobn11nbOuuyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2
NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvY2JhNmMwNGQtYWQ1Zi0z
MjkwLWFjYTItMmUzZDM3ZmRkMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz
ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3
OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm
N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABibIeuaYnmiCCKVq9NkgOPqdzBMurQ9UFzIMlqOiHBFxK5Z2uCzBOn/
oc1W/ELrqytnRmEaDMApFep7ZoubyiEXOdvv3PHCcAIwJVneonsSe0RwfXP7zpQ9
gnWOjlGhZcKN04/bo/zf8JmXvwKXLXPD7hWEdw3b7aycZVK0SZ2zLYyCyGi1a5dM
RCxn04N5kg82v8ydl0MyQiMScU7uUcXRDvWM6O9KdIEaJJX4iGY7WJxKL4tu4LjT
aa27Sn5Qpr7SFS9oenpg3808lBQ12rIQcowgXgFCzYVy0YuSZh8h1DNt9vPCsP2o
UIa+9JsSpROm9c8LWB3cseAZrOLa2CU=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:32 2026 by rpki-client