Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
File:                     ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa (raw, json)
Hash identifier:          4tlBOx2P0U5lzXVz/cNUDtHFDe4o0w8M5CpM5GdnSqo=
Subject key identifier:   BF:4F:04:3C:EF:63:53:87:9E:C5:3E:8D:A4:32:A4:7E:AB:CD:38:21
Certificate issuer:       /CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff
Certificate serial:       010D0C9F4328584EE4F1F3D18F3FF705F1694440
Authority key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     54381
IP address blocks:        66.180.72.0/21 maxlen: 24
                          199.122.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f3:d1:8f:3f:f7:05:f1:69:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=6e276cd2-77de-4d1c-ab3e-42d4788f9fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e4:a9:b4:88:16:48:03:7a:29:f9:20:ca:30:
                    a2:d3:33:da:8b:4c:96:ba:58:1d:86:a3:69:df:65:
                    5d:8a:58:95:2f:d4:f4:8f:f3:17:31:0e:3d:cb:00:
                    a0:ae:e4:1c:61:6d:a1:a9:78:22:96:ac:16:4f:da:
                    b2:e0:85:bf:cb:54:01:bb:35:57:95:e0:40:65:3a:
                    40:e1:8d:52:d2:85:47:6e:b7:88:08:b4:dd:f0:19:
                    df:ac:b4:7e:64:8f:ce:f5:dc:c2:73:f7:03:1c:c0:
                    f7:bf:df:14:e1:8a:a0:08:fe:a5:e0:f8:99:00:9d:
                    ae:4b:69:70:5c:dd:af:37:bb:e4:f9:ae:be:6f:3a:
                    eb:e6:24:1d:36:64:57:14:41:37:16:63:29:70:9e:
                    e9:15:12:45:5a:15:35:c9:d2:b4:67:fa:5f:fc:05:
                    d5:43:ba:1c:f9:7b:ad:f7:25:bf:59:0c:a0:fb:5b:
                    6e:f6:3a:75:45:1a:a0:fe:f5:43:b2:96:d3:0e:9b:
                    d4:0f:81:83:1a:72:7a:ac:2e:8c:1a:14:1e:d5:0e:
                    f8:61:fd:ae:0f:41:d7:53:4f:fd:fa:29:7e:ab:31:
                    ca:75:aa:2b:ba:79:21:da:94:20:e3:9e:0c:9c:40:
                    d9:6f:11:88:0c:aa:08:2e:89:97:d6:58:92:83:b6:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:04:3C:EF:63:53:87:9E:C5:3E:8D:A4:32:A4:7E:AB:CD:38:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl

            X509v3 Authority Key Identifier:
                keyid:35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.72.0/21
                  199.122.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:fa:5d:22:af:16:54:d5:53:bf:53:60:da:6e:da:60:78:
         87:b8:4b:27:3b:2b:09:1f:fd:46:ba:6c:7c:51:87:4a:66:a3:
         c0:75:66:70:f2:e3:c2:c1:57:c7:67:90:09:4e:34:43:29:c4:
         2f:11:69:fb:2e:80:e1:bd:fb:5f:73:67:51:22:12:8d:56:42:
         24:1d:70:10:19:20:72:73:e8:b3:2c:fd:e7:ba:a1:ab:c2:b2:
         d6:94:dc:a5:2b:92:2e:f6:52:3a:31:5d:03:6d:de:f3:84:63:
         63:0c:19:93:f8:16:ef:f1:5c:ec:12:1f:cc:ea:e2:9f:5d:b4:
         ce:23:41:c3:f9:10:1a:61:1f:07:cd:dc:5c:80:f6:f8:e8:b5:
         4c:ec:57:83:51:8c:ed:25:f6:48:8a:ce:30:0e:d5:b7:96:cd:
         82:9c:c8:88:de:03:7b:a8:64:92:5a:5d:d0:6d:d8:e1:e9:88:
         be:43:cb:4b:37:62:58:7a:c4:23:eb:2f:9b:f3:05:e7:ca:af:
         69:af:de:74:fb:8a:b2:77:64:ee:ff:14:78:42:dc:10:d7:cb:
         62:61:8d:d1:8c:43:2e:e7:e9:af:b5:88:e6:28:32:8e:d9:d9:
         3f:51:c3:39:50:50:d6:fe:6a:ce:bc:b3:fc:da:54:ec:f0:39:
         c6:80:df:bc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7k8fPRjz/3BfFpREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU0ZTRhNWEtYzhlNC00NDQ0LTk4M2QtYWJmZTZjNWU5
ZWZmMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
NmUyNzZjZDItNzdkZS00ZDFjLWFiM2UtNDJkNDc4OGY5ZmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOSptIgWSAN6KfkgyjCi0zPai0yWulgdhqNp
32VdiliVL9T0j/MXMQ49ywCgruQcYW2hqXgilqwWT9qy4IW/y1QBuzVXleBAZTpA
4Y1S0oVHbreICLTd8BnfrLR+ZI/O9dzCc/cDHMD3v98U4YqgCP6l4PiZAJ2uS2lw
XN2vN7vk+a6+bzrr5iQdNmRXFEE3FmMpcJ7pFRJFWhU1ydK0Z/pf/AXVQ7oc+Xut
9yW/WQyg+1tu9jp1RRqg/vVDspbTDpvUD4GDGnJ6rC6MGhQe1Q74Yf2uD0HXU0/9
+il+qzHKdaorunkh2pQg454MnEDZbxGIDKoILomX1liSg7YKxwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL9PBDzvY1OHnsU+jaQypH6rzTghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZTRl
NGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1ZTllZmYvZmY0NWY2ZjktOGFmYS0z
ZjIxLWEyNGYtMmE2OGVmZDNiZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmU0ZTRhNWEtYzhlNC00NDQ0LTk4
M2QtYWJmZTZjNWU5ZWZmL2ZlNGU0YTVhLWM4ZTQtNDQ0NC05ODNkLWFiZmU2YzVl
OWVmZi5jcmwwHwYDVR0jBBgwFoAUNWWyaV7/ppcVH1h7s6UK3gS8fwIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZl
NmM1ZTllZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQrRIAwQC
x3pwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIr++l0irxZU1VO/U2DabtpgeIe4Syc7Kwkf/Ua6bHxRh0pm
o8B1ZnDy48LBV8dnkAlONEMpxC8RafsugOG9+19zZ1EiEo1WQiQdcBAZIHJz6LMs
/ee6oavCstaU3KUrki72UjoxXQNt3vOEY2MMGZP4Fu/xXOwSH8zq4p9dtM4jQcP5
EBphHwfN3FyA9vjotUzsV4NRjO0l9kiKzjAO1beWzYKcyIjeA3uoZJJaXdBt2OHp
iL5Dy0s3Ylh6xCPrL5vzBefKr2mv3nT7irJ3ZO7/FHhC3BDXy2JhjdGMQy7n6a+1
iOYoMo7Z2T9RwzlQUNb+as68s/zaVOzwOcaA37w=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:40 2026 by rpki-client