Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa
File:                     09ef4b44-ba95-30f1-91ff-60c41204628c.roa (raw, json)
Hash identifier:          OL2JC3CIrBWabYxV7H13a7dU9392UwBNbUpgmMbwkbU=
Subject key identifier:   6B:19:74:13:BB:75:18:7D:01:C9:1A:46:9A:CC:2B:E1:8C:3B:81:E3
Certificate issuer:       /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b
Certificate serial:       010D0C9F4328584ECBD1D36C0C1C59D441F2EC00
Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     13917
IP address blocks:        66.206.160.0/20 maxlen: 20
                          66.206.175.0/24 maxlen: 24
                          2606:f000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d3:6c:0c:1c:59:d4:41:f2:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=6416d0d3-5c92-473e-9902-583d1e27b383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:17:9f:e2:92:f3:0d:87:77:de:90:f5:a1:
                    18:db:29:94:b3:e4:67:65:a5:83:ce:cf:50:8b:d2:
                    d3:76:af:bf:91:a0:9d:e9:07:e8:11:d4:5c:a1:11:
                    d6:75:2d:2d:3c:6a:62:29:af:23:2e:68:3f:58:6d:
                    e4:b5:e9:59:da:32:a3:11:3b:e9:84:51:6c:83:2d:
                    82:01:29:01:1c:77:5c:d0:5b:6a:56:09:33:9e:ec:
                    64:59:6f:cb:62:18:7d:f1:0a:3d:10:4b:25:e1:a3:
                    8a:3f:62:98:3b:9b:78:d7:4f:f1:2d:61:c8:e1:7a:
                    10:23:e4:42:a6:ed:7b:71:16:91:6d:a6:64:59:eb:
                    11:72:0f:c5:7f:d5:dd:ce:87:7c:e7:bf:40:92:a3:
                    c9:8c:a3:56:df:35:3b:52:5c:d8:66:e8:b8:bc:2b:
                    b6:6c:4b:4f:ff:45:cc:93:3b:0c:6b:6a:5d:c9:5d:
                    72:ad:bd:9b:3d:fd:c6:c9:f8:01:26:a4:cb:e8:77:
                    d3:70:e7:05:ba:63:b1:b3:87:87:92:ca:36:8b:dc:
                    ed:dd:8f:86:ac:34:99:5b:c3:02:b8:4b:fb:d1:a0:
                    a0:64:ee:b9:bf:73:6a:26:c9:52:6b:0d:fa:df:2c:
                    8d:a0:d2:25:24:f4:0f:c5:e0:ed:46:d7:36:ed:3e:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:74:13:BB:75:18:7D:01:C9:1A:46:9A:CC:2B:E1:8C:3B:81:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/09ef4b44-ba95-30f1-91ff-60c41204628c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl

            X509v3 Authority Key Identifier:
                keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.160.0/20
                IPv6:
                  2606:f000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:e1:81:48:7e:8a:fe:09:bf:34:1d:1d:37:44:2f:a4:c1:
         68:15:15:25:11:d0:af:d0:73:43:8b:f9:5f:85:b7:92:ec:a7:
         f5:0a:69:36:9b:d7:b4:1d:1b:96:8d:6d:15:fc:e9:21:c5:14:
         f7:5c:1d:bf:0f:18:ea:4b:80:e9:22:2f:27:42:81:8d:ab:24:
         2d:96:5d:32:50:25:6b:a4:7f:f6:64:25:93:b8:f5:93:d0:55:
         43:29:bb:6a:38:44:60:f3:65:51:da:75:ce:20:97:d0:fc:5e:
         32:0e:c4:c3:05:02:84:07:bc:72:87:45:bc:ea:de:5d:e1:54:
         4c:0b:87:6f:d2:17:62:a6:54:2a:ec:1b:0f:85:b2:0d:51:25:
         3e:21:fc:fd:fa:2a:f3:46:eb:36:4b:5f:92:ab:55:08:d1:7f:
         32:d3:be:fa:94:49:ba:b9:f4:88:e0:19:dc:0a:41:3b:fa:46:
         5a:39:4f:09:b6:33:6a:06:dc:07:61:47:4a:2a:b6:4a:5b:9f:
         81:88:4a:03:3d:e5:97:ae:92:28:cc:57:ef:12:e5:da:31:f9:
         45:ee:94:29:67:4b:fb:87:35:ad:c3:6b:44:49:18:94:f6:46:
         92:f0:fd:94:ca:68:ed:95:4d:64:10:3e:70:bf:6d:df:60:96:
         bd:b6:a7:48
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE7L0dNsDBxZ1EHy7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1
YjhiMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
NjQxNmQwZDMtNWM5Mi00NzNlLTk5MDItNTgzZDFlMjdiMzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk8Xn+KS8w2Hd96Q9aEY2ymUs+RnZaWDzs9Q
i9LTdq+/kaCd6QfoEdRcoRHWdS0tPGpiKa8jLmg/WG3ktelZ2jKjETvphFFsgy2C
ASkBHHdc0FtqVgkznuxkWW/LYhh98Qo9EEsl4aOKP2KYO5t410/xLWHI4XoQI+RC
pu17cRaRbaZkWesRcg/Ff9Xdzod8579AkqPJjKNW3zU7UlzYZui4vCu2bEtP/0XM
kzsMa2pdyV1yrb2bPf3GyfgBJqTL6HfTcOcFumOxs4eHkso2i9zt3Y+GrDSZW8MC
uEv70aCgZO65v3NqJslSaw363yyNoNIlJPQPxeDtRtc27T5+wwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFGsZdBO7dRh9AckaRprMK+GMO4HjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx
ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvMDllZjRiNDQtYmE5NS0z
MGYxLTkxZmYtNjBjNDEyMDQ2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5
NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx
NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4
YWRmMTViOGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQs6gMA0E
AgACMAcDBQAmBvAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAEwZ4YFIfor+Cb80HR03RC+kwWgVFSUR0K/Q
c0OL+V+Ft5Lsp/UKaTab17QdG5aNbRX86SHFFPdcHb8PGOpLgOkiLydCgY2rJC2W
XTJQJWukf/ZkJZO49ZPQVUMpu2o4RGDzZVHadc4gl9D8XjIOxMMFAoQHvHKHRbzq
3l3hVEwLh2/SF2KmVCrsGw+Fsg1RJT4h/P36KvNG6zZLX5KrVQjRfzLTvvqUSbq5
9IjgGdwKQTv6Rlo5Twm2M2oG3AdhR0oqtkpbn4GISgM95ZeukijMV+8S5dox+UXu
lClnS/uHNa3Da0RJGJT2RpLw/ZTKaO2VTWQQPnC/bd9glr22p0g=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:11 2026 by rpki-client