Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77ae36d5-6cd5-32ef-9e90-513f72a2d7fe.roa
File:                     77ae36d5-6cd5-32ef-9e90-513f72a2d7fe.roa (raw, json)
Hash identifier:          Oh1aCTtGdygNb/i4/QnBH7cS1p2wt5Gc1fUlbQHVzF4=
Subject key identifier:   86:2F:67:DE:FB:4A:2F:70:D2:73:AC:05:E8:40:81:73:64:B4:74:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC921781745ECD5CAC9E5280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77ae36d5-6cd5-32ef-9e90-513f72a2d7fe.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     26652
IP address blocks:        216.66.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:17:81:74:5e:cd:5c:ac:9e:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=a183bd27-5e8f-460e-9a8e-5706a7520c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:aa:10:65:a1:09:74:6c:ec:73:e8:b9:c3:
                    3d:dc:21:a1:ce:c1:54:4e:ab:ce:e3:26:f0:74:17:
                    cd:ea:5d:32:a3:b2:ef:47:2e:96:38:e6:ad:62:ad:
                    e7:7a:e7:ad:9a:0a:9d:b3:c2:a4:41:9b:76:3a:89:
                    21:ad:19:91:9f:84:ee:35:65:bb:c4:83:ea:d6:56:
                    ca:da:eb:72:b7:98:4c:1a:8f:78:f4:da:52:7a:36:
                    40:a8:3a:cb:fa:bc:37:71:11:16:20:cb:bf:8e:e3:
                    6d:bb:87:35:2c:97:38:1f:44:f6:b9:5a:d0:ae:c5:
                    85:eb:68:0b:1f:bf:4e:06:8a:ad:61:fa:81:12:78:
                    f8:5c:ea:53:e2:eb:6c:03:37:cd:c4:30:b4:9b:56:
                    04:5a:fe:0f:f6:95:36:c4:ea:05:7f:c3:40:fa:be:
                    ab:d4:ec:5c:a0:8b:d6:75:35:0a:10:a4:7a:32:d6:
                    80:66:d2:a3:13:bc:07:dd:8d:5d:dd:28:74:ff:ae:
                    5e:fb:af:fd:20:b1:79:c0:97:98:f5:1e:84:e0:c3:
                    f5:b0:fd:58:86:0a:5e:cb:23:0c:12:35:be:63:b6:
                    85:7f:9a:81:99:70:cd:2d:74:25:87:a8:91:f2:6c:
                    04:30:32:3a:b9:81:cf:e3:1d:e9:4e:18:0d:a0:65:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:67:DE:FB:4A:2F:70:D2:73:AC:05:E8:40:81:73:64:B4:74:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77ae36d5-6cd5-32ef-9e90-513f72a2d7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:86:ec:a8:61:90:b1:4e:d7:7f:d8:54:f4:27:b6:ca:28:4f:
         51:4b:7b:d1:0b:43:9d:a8:bf:38:92:bf:e4:61:d9:7e:ac:a1:
         01:28:4c:0e:d1:57:70:5c:1a:40:bd:33:0c:33:05:f0:1f:3a:
         61:ff:5b:ac:5d:a9:f6:d8:e2:12:96:a4:c2:74:47:17:41:50:
         f7:1f:23:8e:ad:47:ac:54:cd:14:6e:09:73:44:9a:cc:84:1d:
         29:b6:c7:e1:21:be:25:56:6f:a8:25:de:8b:20:c5:84:1d:58:
         40:49:63:4a:84:c0:fd:8c:13:dc:76:f6:6a:94:65:e3:98:59:
         74:f5:98:2b:6e:12:45:8c:12:76:05:20:df:17:09:2a:7d:be:
         05:0c:b7:f6:bd:1d:69:df:b9:83:ff:4c:a5:d2:6c:cd:2f:44:
         2a:aa:e8:5d:3c:f4:9e:f3:9c:b9:a3:02:ca:4a:d8:85:ae:17:
         38:b1:7a:da:ff:4c:cf:5c:ed:7b:4e:da:53:33:ea:89:b9:60:
         11:0f:3f:73:0b:62:a9:6e:6c:28:2e:fd:4b:c8:42:43:ff:72:
         bc:94:4c:c6:ef:92:68:a0:21:c3:ba:55:ae:0c:65:8b:06:85:
         ff:1b:f6:79:5d:5a:67:72:93:56:70:a9:0a:f8:3a:99:0b:49:
         a5:c7:33:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckheBdF7NXKyeUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
YTE4M2JkMjctNWU4Zi00NjBlLTlhOGUtNTcwNmE3NTIwYzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX2qEGWhCXRs7HPoucM93CGhzsFUTqvO4ybw
dBfN6l0yo7LvRy6WOOatYq3neuetmgqds8KkQZt2OokhrRmRn4TuNWW7xIPq1lbK
2utyt5hMGo949NpSejZAqDrL+rw3cREWIMu/juNtu4c1LJc4H0T2uVrQrsWF62gL
H79OBoqtYfqBEnj4XOpT4utsAzfNxDC0m1YEWv4P9pU2xOoFf8NA+r6r1OxcoIvW
dTUKEKR6MtaAZtKjE7wH3Y1d3Sh0/65e+6/9ILF5wJeY9R6E4MP1sP1YhgpeyyMM
EjW+Y7aFf5qBmXDNLXQlh6iR8mwEMDI6uYHP4x3pThgNoGUIgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYvZ977Si9w0nOsBehAgXNktHSzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzdhZTM2ZDUtNmNkNS0z
MmVmLTllOTAtNTEzZjcyYTJkN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EJLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+G7KhhkLFO13/YVPQntsooT1FLe9ELQ52ovziSv+Rh2X6soQEoTA7R
V3BcGkC9MwwzBfAfOmH/W6xdqfbY4hKWpMJ0RxdBUPcfI46tR6xUzRRuCXNEmsyE
HSm2x+EhviVWb6gl3osgxYQdWEBJY0qEwP2ME9x29mqUZeOYWXT1mCtuEkWMEnYF
IN8XCSp9vgUMt/a9HWnfuYP/TKXSbM0vRCqq6F089J7znLmjAspK2IWuFzixetr/
TM9c7XtO2lMz6om5YBEPP3MLYqlubCgu/UvIQkP/cryUTMbvkmigIcO6Va4MZYsG
hf8b9nldWmdyk1ZwqQr4OpkLSaXHM8I=
-----END CERTIFICATE-----
Generated at Sat Sep 12 08:26:53 2026 by rpki-client