Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
File:                     976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (raw, json)
Hash identifier:          eZniw0vzVw+PrGoxQ4bI3nDqv9kUQwEHw99xJwYKZLE=
Subject key identifier:   5E:37:F9:CF:6D:07:06:37:34:71:59:A0:0E:A2:9E:D8:74:FF:8C:C6
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584E2D9F1659A474306A757D8900
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     15344
IP address blocks:        66.212.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:16:59:a4:74:30:6a:75:7d:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=2c4097b3-0a98-4fa8-a08c-8213b2820ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:94:dc:9e:23:18:2c:ba:a5:fa:62:07:b4:
                    ca:d5:4e:f2:23:c8:d1:a6:07:8e:f3:1d:20:7a:66:
                    5b:48:d7:7a:b5:af:3f:06:3a:aa:ce:08:f4:a8:49:
                    8a:05:1e:4a:33:22:45:08:6e:cb:9d:c3:3d:cd:11:
                    bb:8c:00:43:e8:8d:7b:ea:44:08:87:12:6c:17:d1:
                    75:44:5f:00:76:a3:02:f6:17:23:2c:dd:52:14:84:
                    03:7a:4b:04:0d:06:56:28:4c:b7:3f:d4:57:0b:78:
                    f2:fe:73:d2:b1:e0:39:dd:c7:4b:88:36:a7:d5:fc:
                    af:ee:2e:34:47:9d:22:ed:02:77:7d:a5:84:bf:cd:
                    6d:4b:88:8e:90:0a:ef:f9:51:c5:1a:32:59:49:c5:
                    b1:2b:10:1e:79:c6:8f:33:5c:ef:28:fe:e8:3c:06:
                    4e:0f:5f:f6:b8:80:64:03:8f:b4:60:17:43:2b:ae:
                    98:b4:e5:a9:9b:83:b1:29:d2:9f:ba:3d:bc:bb:63:
                    71:ab:86:27:57:a8:d8:c2:28:b8:26:13:02:b4:5d:
                    1c:0e:8a:c9:71:3a:3b:f4:53:8d:82:da:82:48:d3:
                    51:a8:10:f7:7e:de:20:9c:ae:67:f8:ec:05:78:93:
                    54:b8:89:f8:8e:69:d0:6a:08:86:7f:48:73:26:9d:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:F9:CF:6D:07:06:37:34:71:59:A0:0E:A2:9E:D8:74:FF:8C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/976bff61-e8bf-3711-88dc-a4ab9c98b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:b5:a6:46:60:83:8b:54:b6:94:ee:6d:a4:b6:85:65:ea:
         bb:e7:d3:a3:c4:91:b7:b1:79:c4:19:a3:62:96:87:92:81:93:
         bc:0e:13:41:94:22:23:24:47:5c:d0:4c:48:6f:f1:2a:2c:c2:
         9d:f6:a3:02:f0:6c:31:b1:f4:95:32:9b:99:40:9e:71:1e:28:
         cd:a2:78:fb:a1:80:4e:1d:b1:34:03:e2:b8:28:e3:88:c8:6b:
         b6:85:22:47:64:c8:81:66:0f:96:43:fa:57:eb:47:9a:15:ea:
         bf:c9:5a:13:d7:b4:37:73:5c:0d:14:6e:6a:fa:70:65:f3:37:
         19:4a:85:6e:40:1a:ed:8a:68:34:2b:06:f3:d1:d0:c1:4b:c5:
         e5:78:fa:f7:e5:00:a8:3f:38:07:f1:84:6c:3e:dc:66:3b:47:
         12:04:63:bc:83:e3:76:54:c5:1a:b4:17:7d:13:9a:2d:df:7e:
         d7:3e:38:3a:39:7f:28:92:f9:11:3b:8b:79:2f:4d:18:2a:38:
         35:eb:2d:a7:14:e6:70:82:b0:b6:56:92:e9:85:ee:07:44:89:
         da:a9:ab:72:fd:d0:12:21:87:d0:51:d5:8d:bb:2e:a1:99:03:
         e6:61:5e:f6:3d:f2:14:5a:db:7c:89:00:a7:a2:d4:3a:81:8f:
         2b:75:ef:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxZZpHQwanV9iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3
OTBkMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
MmM0MDk3YjMtMGE5OC00ZmE4LWEwOGMtODIxM2IyODIwY2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbGU3J4jGCy6pfpiB7TK1U7yI8jRpgeO8x0g
emZbSNd6ta8/Bjqqzgj0qEmKBR5KMyJFCG7LncM9zRG7jABD6I176kQIhxJsF9F1
RF8AdqMC9hcjLN1SFIQDeksEDQZWKEy3P9RXC3jy/nPSseA53cdLiDan1fyv7i40
R50i7QJ3faWEv81tS4iOkArv+VHFGjJZScWxKxAeecaPM1zvKP7oPAZOD1/2uIBk
A4+0YBdDK66YtOWpm4OxKdKfuj28u2Nxq4YnV6jYwii4JhMCtF0cDorJcTo79FON
gtqCSNNRqBD3ft4gnK5n+OwFeJNUuIn4jmnQagiGf0hzJp2fbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF43+c9tBwY3NHFZoA6inth0/4zGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy
NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvOTc2YmZmNjEtZThiZi0z
NzExLTg4ZGMtYTRhYjljOThiNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh
M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4
NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz
Y2UyODc5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtQ+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyGtaZGYIOLVLaU7m2ktoVl6rvn06PEkbexecQZo2KWh5KBk7wOE0GU
IiMkR1zQTEhv8Soswp32owLwbDGx9JUym5lAnnEeKM2iePuhgE4dsTQD4rgo44jI
a7aFIkdkyIFmD5ZD+lfrR5oV6r/JWhPXtDdzXA0Ubmr6cGXzNxlKhW5AGu2KaDQr
BvPR0MFLxeV4+vflAKg/OAfxhGw+3GY7RxIEY7yD43ZUxRq0F30Tmi3fftc+ODo5
fyiS+RE7i3kvTRgqODXrLacU5nCCsLZWkumF7gdEidqpq3L90BIhh9BR1Y27LqGZ
A+ZhXvY98hRa23yJAKei1DqBjyt176E=
-----END CERTIFICATE-----
Generated at Tue Jul 14 11:59:58 2026 by rpki-client