Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ca8c306f-89a9-35fc-b355-78f19545a54a.roa
File:                     ca8c306f-89a9-35fc-b355-78f19545a54a.roa (raw, json)
Hash identifier:          lQIj8JPjIpGINokbnMiSs+BfFuWeAwTij2oYy+rf2vg=
Subject key identifier:   77:C9:10:16:58:E3:49:EE:AF:E9:4B:5B:9C:1B:A1:40:88:B1:EA:BC
Certificate issuer:       /CN=72ef9c16-2d45-4e8c-b035-49d30318c10f
Certificate serial:       010D0C9F4328584EA7876391F11854AAB6FFADA0
Authority key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ca8c306f-89a9-35fc-b355-78f19545a54a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10352
IP address blocks:        66.208.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:63:91:f1:18:54:aa:b6:ff:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0942e8e2-fc1b-4b04-881a-d58685cbd631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:8f:61:f8:a1:c6:a3:bb:a6:bb:3b:c9:3c:
                    14:66:4b:43:6e:61:0e:6c:af:7e:87:d2:fd:7b:e4:
                    a0:31:5f:6c:c7:5d:14:4f:b3:77:87:4e:12:b5:cd:
                    32:b2:f0:c8:6c:55:cb:a5:6b:90:f9:5b:3b:80:ef:
                    e9:6a:0a:98:85:53:bd:78:d8:f9:cf:06:10:dd:bb:
                    fd:35:fa:39:c5:86:94:79:dc:e9:14:99:36:3b:0f:
                    a6:af:e3:65:ce:e0:65:6e:df:10:21:fa:2d:78:b0:
                    6b:79:86:3e:91:42:cd:95:29:cd:05:fa:08:79:e7:
                    6e:c9:68:29:04:17:bf:51:b1:3a:46:35:55:d4:64:
                    f1:b5:79:7f:cb:06:1b:da:98:9c:57:19:0c:7e:f5:
                    f7:e2:ae:d2:41:5a:fc:fb:44:26:4b:18:6e:00:27:
                    16:e3:8a:0d:c8:af:e6:95:c6:70:f7:4b:93:86:12:
                    c8:d3:a5:0f:2d:1a:44:16:a9:0c:00:b4:c0:67:ce:
                    cc:a2:30:61:99:95:6e:97:7d:e8:03:86:79:65:b7:
                    b2:41:0d:1d:74:91:be:ff:0f:18:f7:fc:21:7f:85:
                    98:89:21:3e:0c:24:5f:58:1c:34:fc:f6:18:35:05:
                    fd:40:2f:61:fc:bf:92:12:23:55:83:18:f6:d6:57:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:10:16:58:E3:49:EE:AF:E9:4B:5B:9C:1B:A1:40:88:B1:EA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ca8c306f-89a9-35fc-b355-78f19545a54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:29:02:0b:b3:6f:bf:7b:ad:00:f1:78:3e:03:ef:af:ea:
         d0:67:33:e7:ad:73:15:f9:1d:2a:22:39:d3:24:18:9a:30:86:
         94:19:1b:2d:f7:d3:72:ac:a1:8a:35:70:9f:ce:b2:94:69:07:
         63:d4:22:af:cf:9a:e5:ab:8f:c7:a6:9a:1c:f9:9e:ee:55:d7:
         6b:38:1f:23:5c:b9:71:c8:17:93:6e:f3:b4:c5:e4:98:42:4a:
         98:da:bb:05:0c:23:85:85:fb:a8:ac:d5:5a:c1:99:c8:71:89:
         ea:36:bd:1e:20:b0:ca:a2:f4:7d:a2:00:ba:36:a1:05:b7:8c:
         3f:01:ff:2e:35:f0:ed:dd:d2:a4:5f:7b:f8:c4:c3:f5:d7:55:
         5c:ee:cd:cf:ea:2e:78:f7:a5:f3:84:3f:53:3e:fa:fa:b7:59:
         80:69:81:10:84:40:da:73:b7:8b:91:56:c4:d3:74:c9:a1:28:
         c7:e4:2b:df:9c:bf:d6:25:97:80:c2:78:b5:c1:0f:8f:24:31:
         34:10:e8:97:89:43:28:3b:d9:37:3f:81:fa:7b:f6:89:ed:16:
         05:f8:8b:2f:c5:e1:83:d9:b3:a0:03:a6:9f:fe:44:c7:7f:b7:
         e7:8d:f8:19:e3:cb:e5:13:84:d1:8f:9d:61:09:e2:c6:16:3f:
         ac:17:bd:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2OR8RhUqrb/raAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJlZjljMTYtMmQ0NS00ZThjLWIwMzUtNDlkMzAzMThj
MTBmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDk0MmU4ZTItZmMxYi00YjA0LTg4MWEtZDU4Njg1Y2JkNjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiiPYfihxqO7prs7yTwUZktDbmEObK9+h9L9
e+SgMV9sx10UT7N3h04Stc0ysvDIbFXLpWuQ+Vs7gO/pagqYhVO9eNj5zwYQ3bv9
Nfo5xYaUedzpFJk2Ow+mr+NlzuBlbt8QIfoteLBreYY+kULNlSnNBfoIeeduyWgp
BBe/UbE6RjVV1GTxtXl/ywYb2picVxkMfvX34q7SQVr8+0QmSxhuACcW44oNyK/m
lcZw90uThhLI06UPLRpEFqkMALTAZ87MojBhmZVul33oA4Z5ZbeyQQ0ddJG+/w8Y
9/whf4WYiSE+DCRfWBw0/PYYNQX9QC9h/L+SEiNVgxj21lf0/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfJEBZY40nur+lLW5wboUCIseq8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MmVm
OWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMxOGMxMGYvY2E4YzMwNmYtODlhOS0z
NWZjLWIzNTUtNzhmMTk1NDVhNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzJlZjljMTYtMmQ0NS00ZThjLWIw
MzUtNDlkMzAzMThjMTBmLzcyZWY5YzE2LTJkNDUtNGU4Yy1iMDM1LTQ5ZDMwMzE4
YzEwZi5jcmwwHwYDVR0jBBgwFoAUwJQaHpV5r81TL2aPT9JfY/dqqIgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQz
MDMxOGMxMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvLKQILs2+/e60A8Xg+A++v6tBnM+etcxX5HSoiOdMkGJowhpQZGy33
03KsoYo1cJ/OspRpB2PUIq/PmuWrj8emmhz5nu5V12s4HyNcuXHIF5Nu87TF5JhC
SpjauwUMI4WF+6is1VrBmchxieo2vR4gsMqi9H2iALo2oQW3jD8B/y418O3d0qRf
e/jEw/XXVVzuzc/qLnj3pfOEP1M++vq3WYBpgRCEQNpzt4uRVsTTdMmhKMfkK9+c
v9Yll4DCeLXBD48kMTQQ6JeJQyg72Tc/gfp79ontFgX4iy/F4YPZs6ADpp/+RMd/
t+eN+Bnjy+UThNGPnWEJ4sYWP6wXvfs=
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:32 2026 by rpki-client