Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
File:                     933cd287-75bf-387a-83e6-d85b86aba33d.roa (raw, json)
Hash identifier:          z42Rx6mm0xd7IArMhHZ1H2GizzXsfyEhgbhI4uhodnU=
Subject key identifier:   F7:A4:88:74:66:32:ED:5A:A4:CC:7D:91:ED:01:DC:40:21:3B:51:DC
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F82ADB78BF227C17B93C24B40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     2734
IP address blocks:        66.35.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b7:8b:f2:27:c1:7b:93:c2:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=f3081652-4f8d-4c4c-989a-b6a2378122c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:07:c9:ab:20:94:b6:7e:5a:f3:a3:b2:37:
                    57:83:5d:96:4b:c1:01:46:5f:56:2b:19:4a:2d:cd:
                    c1:79:e4:1e:e6:bd:ec:3b:40:c2:1f:d2:24:5f:66:
                    32:ab:a3:74:c1:87:c9:28:00:4f:56:4d:38:c4:ea:
                    56:08:fb:fb:ad:25:78:e9:a8:97:88:17:5d:52:9a:
                    b4:b4:17:2b:f0:a3:54:44:78:48:c0:fa:bb:5b:db:
                    dc:1a:78:ce:55:10:43:05:fe:c9:9a:b3:99:5d:39:
                    d4:1e:eb:94:3e:34:db:01:b5:d4:f0:5c:d0:35:51:
                    7c:7f:13:d0:17:a9:67:cc:ac:b6:f3:af:e3:dd:94:
                    65:cf:96:03:3e:b9:26:04:f8:a9:83:30:d3:d4:84:
                    be:f4:73:7a:59:47:c8:2e:89:13:69:85:6e:b0:e2:
                    b9:a4:64:6d:0e:ca:4c:c4:cb:90:ec:fb:15:8b:72:
                    62:08:8d:eb:13:fb:93:92:91:08:83:c3:0d:99:3c:
                    3c:ca:04:2e:55:8d:8b:bd:27:04:dd:18:a1:5b:97:
                    99:2e:93:1f:66:f3:7b:42:86:b0:4e:65:ee:39:6c:
                    bb:79:a2:18:a7:4b:6b:18:72:0d:6b:3e:78:b1:5d:
                    73:7e:03:36:98:8a:ce:e7:16:00:9e:6b:67:ee:17:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:88:74:66:32:ED:5A:A4:CC:7D:91:ED:01:DC:40:21:3B:51:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:00:70:3d:61:70:04:e6:58:5e:85:a5:3c:03:62:be:89:73:
         19:14:f1:75:74:31:a7:fe:86:32:54:2a:73:9e:3d:76:86:e5:
         1b:4b:29:6f:7b:20:81:de:a2:45:05:7b:63:d8:29:d3:68:20:
         68:89:31:5a:ad:2c:52:9c:24:2d:9c:52:4f:57:46:ab:d6:cb:
         20:c4:04:1f:a1:b4:72:15:da:64:7b:44:ca:cb:de:1a:3f:95:
         6e:8f:b2:02:2b:32:f9:89:e1:1f:f5:4a:e8:af:b8:44:49:1d:
         92:23:55:1d:cf:66:03:23:89:f5:e6:37:dd:67:27:75:d0:c1:
         dd:a9:58:c7:b4:d4:7b:b4:e6:ee:9b:2e:51:49:df:92:d9:df:
         0c:29:5f:aa:b6:91:dd:e4:48:76:7d:cb:ee:e6:37:4e:a0:68:
         2e:ac:46:0a:de:d2:80:ce:4a:38:cc:2e:6f:b4:b2:32:a5:a6:
         a1:a5:f1:bb:5a:1a:df:16:0f:c9:26:6c:24:74:3f:0b:d4:ac:
         c4:51:d2:76:8a:6c:49:e6:21:d7:20:c9:f8:92:3c:ba:93:2d:
         99:74:d8:f8:94:87:30:30:c8:71:bc:0e:8c:40:2f:ba:91:97:
         73:c9:91:65:a6:63:43:da:96:e9:26:a6:87:88:39:41:c8:05:
         64:b0:0a:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrbeL8ifBe5PCS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
ZjMwODE2NTItNGY4ZC00YzRjLTk4OWEtYjZhMjM3ODEyMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus4HyasglLZ+WvOjsjdXg12WS8EBRl9WKxlK
Lc3BeeQe5r3sO0DCH9IkX2Yyq6N0wYfJKABPVk04xOpWCPv7rSV46aiXiBddUpq0
tBcr8KNURHhIwPq7W9vcGnjOVRBDBf7JmrOZXTnUHuuUPjTbAbXU8FzQNVF8fxPQ
F6lnzKy286/j3ZRlz5YDPrkmBPipgzDT1IS+9HN6WUfILokTaYVusOK5pGRtDspM
xMuQ7PsVi3JiCI3rE/uTkpEIg8MNmTw8ygQuVY2LvScE3RihW5eZLpMfZvN7Qoaw
TmXuOWy7eaIYp0trGHINaz54sV1zfgM2mIrO5xYAnmtn7hdutwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPekiHRmMu1apMx9ke0B3EAhO1HcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvOTMzY2QyODctNzViZi0z
ODdhLTgzZTYtZDg1Yjg2YWJhMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYAcD1hcATmWF6FpTwDYr6JcxkU8XV0Maf+hjJUKnOePXaG5RtLKW97
IIHeokUFe2PYKdNoIGiJMVqtLFKcJC2cUk9XRqvWyyDEBB+htHIV2mR7RMrL3ho/
lW6PsgIrMvmJ4R/1SuivuERJHZIjVR3PZgMjifXmN91nJ3XQwd2pWMe01Hu05u6b
LlFJ35LZ3wwpX6q2kd3kSHZ9y+7mN06gaC6sRgre0oDOSjjMLm+0sjKlpqGl8bta
Gt8WD8kmbCR0PwvUrMRR0naKbEnmIdcgyfiSPLqTLZl02PiUhzAwyHG8DoxAL7qR
l3PJkWWmY0PalukmpoeIOUHIBWSwCoc=
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:40:54 2026 by rpki-client