Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
File:                     e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa (raw, json)
Hash identifier:          urZ8mq4sboJD9iFAMvDb/q2HDJ4p8LyE8noS6C5gk1c=
Subject key identifier:   4D:CF:E9:C6:96:50:D5:40:75:06:7F:89:B7:4B:9E:C4:64:A7:EF:DF
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F7782F0EE43C64ACC05CA6F00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     2734
IP address blocks:        66.128.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:f0:ee:43:c6:4a:cc:05:ca:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=2fc8da70-4b74-4e19-a6f5-a889ecd417ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:68:3e:30:a8:ca:ee:c5:0f:07:67:3f:77:
                    3c:46:62:44:50:f0:b6:ab:e4:8b:30:9a:1b:59:49:
                    65:57:28:cc:40:4a:a0:5f:71:b1:ca:49:ac:b1:29:
                    ff:f4:b9:0f:20:c6:70:f6:fe:d5:18:cb:7e:d5:49:
                    06:72:2a:ff:b0:c3:4f:ae:27:95:7c:39:78:1d:b0:
                    be:29:b8:4d:e1:e8:12:0f:26:90:06:38:f0:f6:50:
                    08:6c:c9:bf:bc:0f:a5:8d:85:25:ca:07:12:18:7b:
                    94:a5:17:d1:61:f7:9d:ec:bb:5f:79:40:7f:36:d1:
                    67:48:c5:ff:54:c7:ec:3e:80:45:01:cf:2b:a0:b0:
                    c8:de:a7:e6:8e:fe:99:93:88:c4:ca:7c:2e:75:11:
                    32:03:5d:1a:58:92:27:05:54:cd:6b:9a:23:94:0e:
                    64:24:c6:ec:30:72:af:d9:fb:6a:b4:b7:6d:3f:ab:
                    f0:8f:ec:6b:e7:cc:1a:ba:69:3c:e7:ac:58:39:2e:
                    bb:26:a5:f1:91:08:4e:99:e7:58:9a:59:0f:b0:14:
                    7d:37:dc:86:da:ec:81:6b:ad:80:2a:1f:ec:af:0b:
                    06:4a:c5:2c:d2:ee:f2:f5:43:54:f7:fc:75:ca:fd:
                    e1:50:c1:77:84:b6:3e:4f:8c:93:dd:2d:a3:c7:73:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CF:E9:C6:96:50:D5:40:75:06:7F:89:B7:4B:9E:C4:64:A7:EF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c8:15:cd:cc:6c:e6:46:f2:f9:52:2d:92:fe:e5:a0:16:44:
         02:5d:45:0b:0f:60:98:fb:cc:cc:4a:ce:3b:aa:32:39:51:65:
         73:ae:f0:0a:95:d7:2b:c7:9f:d4:37:91:39:c8:e4:ff:3e:a3:
         d2:82:1c:47:f1:b5:f1:21:92:9c:84:3c:fd:7c:40:dc:03:d0:
         87:67:dd:28:87:4a:5a:e4:75:60:3c:58:74:64:ea:94:59:90:
         74:a9:64:11:55:15:48:ef:60:10:5b:30:ba:2f:c0:1a:33:47:
         25:b9:e0:02:18:3e:5b:a3:b0:de:fa:10:ca:11:92:0c:6d:c0:
         54:5e:51:a1:72:d9:0a:02:d2:0d:04:d4:4e:aa:46:be:93:95:
         dd:f1:6b:a1:c7:0a:db:73:a7:4e:29:d1:99:c5:61:e8:5e:fd:
         02:15:1b:36:e1:5f:2d:eb:16:10:28:da:8e:fa:e8:e5:f9:26:
         3b:b6:38:22:18:b6:4b:89:0d:a6:41:0b:56:34:93:77:aa:bc:
         16:2f:80:0b:0f:a6:f3:01:9a:f9:07:e6:91:f1:5f:b9:98:ee:
         58:62:16:e2:ce:6f:08:62:a5:f8:87:79:cb:67:6f:7f:d8:ed:
         88:23:3c:0a:a7:26:12:60:27:f3:cd:64:44:a3:32:34:51:af:
         34:0d:0f:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvDuQ8ZKzAXKbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
MmZjOGRhNzAtNGI3NC00ZTE5LWE2ZjUtYTg4OWVjZDQxN2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3hoPjCoyu7FDwdnP3c8RmJEUPC2q+SLMJob
WUllVyjMQEqgX3GxykmssSn/9LkPIMZw9v7VGMt+1UkGcir/sMNPrieVfDl4HbC+
KbhN4egSDyaQBjjw9lAIbMm/vA+ljYUlygcSGHuUpRfRYfed7LtfeUB/NtFnSMX/
VMfsPoBFAc8roLDI3qfmjv6Zk4jEynwudREyA10aWJInBVTNa5ojlA5kJMbsMHKv
2ftqtLdtP6vwj+xr58waumk856xYOS67JqXxkQhOmedYmlkPsBR9N9yG2uyBa62A
Kh/srwsGSsUs0u7y9UNU9/x1yv3hUMF3hLY+T4yT3S2jx3N1XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3P6caWUNVAdQZ/ibdLnsRkp+/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvZTFjMmFkZjktMjE3My0z
MzI5LWI1ZGMtN2U4MWVhMzdlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoCUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETIFc3MbOZG8vlSLZL+5aAWRAJdRQsPYJj7zMxKzjuqMjlRZXOu8AqV
1yvHn9Q3kTnI5P8+o9KCHEfxtfEhkpyEPP18QNwD0Idn3SiHSlrkdWA8WHRk6pRZ
kHSpZBFVFUjvYBBbMLovwBozRyW54AIYPlujsN76EMoRkgxtwFReUaFy2QoC0g0E
1E6qRr6Tld3xa6HHCttzp04p0ZnFYehe/QIVGzbhXy3rFhAo2o766OX5Jju2OCIY
tkuJDaZBC1Y0k3eqvBYvgAsPpvMBmvkH5pHxX7mY7lhiFuLObwhipfiHectnb3/Y
7YgjPAqnJhJgJ/PNZESjMjRRrzQND0I=
-----END CERTIFICATE-----
Generated at Wed Nov 4 19:02:39 2026 by rpki-client