Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/958dcdba-92bd-30ce-9550-8ea6360d7437.roa
File:                     958dcdba-92bd-30ce-9550-8ea6360d7437.roa (raw, json)
Hash identifier:          53/7+oYIoTMq+ZQNPb5cDxs/bW4ECmA6+B5HsRJqVZ4=
Subject key identifier:   29:3B:96:34:C6:19:1A:F5:9C:AD:37:47:8A:CC:77:B7:79:78:AE:25
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB3C7387D9AD63F2EE7F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/958dcdba-92bd-30ce-9550-8ea6360d7437.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     22677
IP address blocks:        66.189.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3c:73:87:d9:ad:63:f2:ee:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=74a4c8c1-875a-4bb6-8c78-329e9f5eb832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:08:04:7b:a9:23:45:5a:ef:a1:b8:f2:67:
                    5a:86:b8:87:48:f9:db:8e:41:61:c8:ec:57:87:9d:
                    f8:c9:2e:f0:89:9c:62:86:c0:d1:d8:45:18:6c:8d:
                    e0:ad:3c:da:79:e6:33:a1:ca:cf:b7:e7:89:e7:4e:
                    96:c1:5d:a2:20:a4:f8:f1:7b:89:31:5f:e0:64:09:
                    dc:34:3c:14:05:38:64:c9:d7:62:36:fd:13:fe:16:
                    5c:66:4e:9a:f6:b3:19:4b:8f:bd:8c:70:1c:02:67:
                    8f:9f:44:19:ff:d3:4c:d6:4d:bf:8f:f8:f5:41:50:
                    6d:70:db:20:67:5f:41:c7:73:8f:86:ac:5b:d2:66:
                    b9:f8:a5:64:ac:ab:23:31:74:8b:f4:b2:3f:1c:76:
                    e4:9c:f5:d3:9d:c4:8e:fd:67:23:1a:59:84:d8:c4:
                    81:14:e9:b3:2e:b9:a9:ca:a9:fa:7c:c4:f8:f0:1a:
                    b6:d4:57:87:33:55:a9:02:d0:0d:23:3c:38:21:b1:
                    6c:51:39:e8:64:ad:eb:44:db:56:ad:ad:18:43:72:
                    a7:e2:00:eb:40:4c:b9:04:16:15:06:41:e1:07:19:
                    e2:0f:88:b5:f9:44:fd:4f:0f:fd:8f:1e:66:0b:54:
                    91:94:c4:30:ce:aa:86:f9:ea:8d:e6:90:2e:60:5b:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:96:34:C6:19:1A:F5:9C:AD:37:47:8A:CC:77:B7:79:78:AE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/958dcdba-92bd-30ce-9550-8ea6360d7437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:4e:02:72:ec:8f:8d:82:64:f3:c8:bc:83:91:70:e8:52:
         e2:71:f6:a1:88:3b:e5:2c:f3:9a:8d:d6:cc:45:9c:8c:9a:ee:
         75:55:5f:f1:22:98:5f:76:bd:e6:8e:c4:da:0b:fa:47:05:14:
         9f:02:88:9d:e5:0e:d8:71:49:d4:26:78:bb:1f:cc:e1:fd:d9:
         14:a8:b4:f8:d0:74:4c:63:51:7f:cd:87:c2:da:fe:5a:28:cb:
         2c:6d:ea:4a:b6:cd:9f:a0:98:24:3e:a1:15:fc:60:c7:88:b9:
         a1:cb:16:65:94:29:29:78:19:82:9a:79:fa:71:d8:68:46:64:
         56:36:e1:bd:9a:71:fb:4d:cb:99:92:ae:e0:1f:41:9f:ee:f8:
         d1:b2:33:1a:8d:74:f8:c0:97:b1:7b:2f:b1:ec:b2:17:a4:6f:
         94:86:5e:dd:0d:8a:dd:68:f5:e8:3a:e9:d4:a5:23:55:61:89:
         f0:52:c9:dc:25:80:ae:f8:62:db:de:bd:39:f4:73:36:5c:96:
         a6:25:38:40:1a:ab:f2:74:60:4e:95:56:e3:3c:c1:dc:c2:a2:
         f3:22:ec:e8:60:17:25:e0:4c:e0:c6:94:c9:b7:84:6a:5f:14:
         9f:36:6f:22:57:82:33:12:a7:94:d2:54:90:7c:68:e6:9f:d4:
         17:eb:11:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Jyzxzh9mtY/LufwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYwMjEzMDAxMFoXDTI2MDgzMTEzMDAxMFowLzEtMCsGA1UEAxMk
NzRhNGM4YzEtODc1YS00YmI2LThjNzgtMzI5ZTlmNWViODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFoIBHupI0Va76G48mdahriHSPnbjkFhyOxX
h534yS7wiZxihsDR2EUYbI3grTzaeeYzocrPt+eJ506WwV2iIKT48XuJMV/gZAnc
NDwUBThkyddiNv0T/hZcZk6a9rMZS4+9jHAcAmePn0QZ/9NM1k2/j/j1QVBtcNsg
Z19Bx3OPhqxb0ma5+KVkrKsjMXSL9LI/HHbknPXTncSO/WcjGlmE2MSBFOmzLrmp
yqn6fMT48Bq21FeHM1WpAtANIzw4IbFsUTnoZK3rRNtWra0YQ3Kn4gDrQEy5BBYV
BkHhBxniD4i1+UT9Tw/9jx5mC1SRlMQwzqqG+eqN5pAuYFstNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCk7ljTGGRr1nK03R4rMd7d5eK4lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTU4ZGNkYmEtOTJiZC0z
MGNlLTk1NTAtOGVhNjM2MGQ3NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArATgJy7I+NgmTzyLyDkXDoUuJx9qGIO+Us85qN1sxFnIya7nVVX/Ei
mF92veaOxNoL+kcFFJ8CiJ3lDthxSdQmeLsfzOH92RSotPjQdExjUX/Nh8La/loo
yyxt6kq2zZ+gmCQ+oRX8YMeIuaHLFmWUKSl4GYKaefpx2GhGZFY24b2acftNy5mS
ruAfQZ/u+NGyMxqNdPjAl7F7L7Hsshekb5SGXt0Nit1o9eg66dSlI1VhifBSydwl
gK74YtvevTn0czZclqYlOEAaq/J0YE6VVuM8wdzCovMi7OhgFyXgTODGlMm3hGpf
FJ82byJXgjMSp5TSVJB8aOaf1BfrEfY=
-----END CERTIFICATE-----
Generated at Fri Jun 5 18:10:13 2026 by rpki-client