Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47e57e2e-da55-3282-8658-6bdfed8ef934.roa
File:                     47e57e2e-da55-3282-8658-6bdfed8ef934.roa (raw, json)
Hash identifier:          VA9I/xXXEsNaohNGWNARrRkyE8ck0eyyE8NJrMrCKiw=
Subject key identifier:   B9:E9:C4:AC:44:49:F8:EC:B2:C1:20:C7:CE:F8:7B:7C:C1:FD:23:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BA787DE77E008AF19940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47e57e2e-da55-3282-8658-6bdfed8ef934.roa
Signing time:             Tue 15 Jul 2025 20:27:06 +0000
ROA not before:           Tue 15 Jul 2025 20:27:06 +0000
ROA not after:            Mon 13 Oct 2025 20:27:06 +0000
asID:                     44559
IP address blocks:        166.1.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:ba:78:7d:e7:7e:00:8a:f1:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:06 2025 GMT
            Not After : Oct 13 20:27:06 2025 GMT
        Subject: CN=899f5284-32c6-4ea7-8262-2c6c39b8316b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:4f:24:d1:5f:aa:ba:fe:ee:92:40:5d:ec:
                    dc:80:0d:cd:92:d1:6a:65:7d:19:1c:61:92:ff:b7:
                    bd:c8:7b:7f:cb:8c:1a:7d:df:38:7a:39:a4:8e:9e:
                    e3:39:59:27:c6:4b:a2:d4:29:b1:1c:7e:60:61:84:
                    49:51:4c:2a:5a:bf:a4:3f:ae:a0:c4:cd:99:a0:d9:
                    9c:2e:97:8a:75:45:4e:70:26:3e:5d:59:be:12:44:
                    9b:b3:53:cf:10:22:4c:3d:d3:dd:6e:2c:99:05:1e:
                    a5:3c:be:d9:26:ba:0d:35:b5:b1:c5:81:64:44:3c:
                    5f:57:fc:82:bd:00:8b:c7:cb:91:a4:f4:c0:df:f8:
                    71:8c:e6:95:aa:d6:94:4e:ea:2e:2f:83:47:1f:57:
                    a3:71:3f:71:32:41:17:a2:40:d1:8b:7a:95:43:e5:
                    56:9f:1f:8c:a1:b6:88:e1:c3:c3:aa:0b:77:9a:13:
                    a0:cb:f7:71:8b:b5:de:05:ac:04:6d:dd:85:1b:f0:
                    b8:3d:5e:71:76:ee:1f:54:91:12:db:6d:40:09:d3:
                    81:9d:ee:eb:9b:24:56:d2:d8:d2:08:39:99:7c:1a:
                    d9:94:84:9a:1a:84:d6:1d:4e:72:0e:f6:20:14:ac:
                    bd:99:6b:c1:79:a4:59:3c:3c:77:0f:85:58:ba:85:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:C4:AC:44:49:F8:EC:B2:C1:20:C7:CE:F8:7B:7C:C1:FD:23:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47e57e2e-da55-3282-8658-6bdfed8ef934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:09:ea:9a:8b:fd:4d:94:33:e6:2d:a2:6d:50:24:c7:32:15:
         77:76:e2:0d:4b:04:4a:c9:5b:fe:f2:ad:6b:5e:e9:10:fe:dc:
         e6:42:00:b0:fe:ee:77:3d:d6:09:6e:53:18:fc:6f:0c:36:b9:
         2b:f4:bc:ab:2b:41:75:57:6e:e7:5b:d7:a0:0f:94:b0:6f:4f:
         e5:76:73:87:39:5a:4b:00:c7:06:44:e9:c0:48:a9:75:4c:6f:
         cc:79:86:6b:ff:9d:84:9d:b7:06:c6:7d:41:b9:d7:82:31:be:
         ac:29:e9:70:05:f4:04:9e:65:79:b2:52:f9:d7:f3:3d:4f:40:
         73:35:d8:7c:0b:c2:3d:70:b9:96:5e:8b:3e:d1:3a:00:d2:e6:
         92:d1:e2:9f:c7:1c:53:de:8a:ee:f5:cf:21:24:61:2b:40:dd:
         90:78:f2:3c:f3:da:cf:54:58:ec:42:c0:38:06:03:1a:1c:ad:
         12:f5:83:05:1f:4d:6b:37:1d:7d:59:8e:77:b1:68:ee:fc:5a:
         ae:d1:c0:f1:5b:89:12:d1:52:af:e3:a8:53:4b:fd:b8:b8:d1:
         21:04:d9:e4:8b:32:3f:a9:51:ff:5d:21:fc:4e:17:a7:71:61:
         91:c1:47:9c:04:50:74:38:e9:00:31:09:1f:1f:73:aa:92:58:
         82:30:74:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLp4fed+AIrxmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcxNTIwMjcwNloXDTI1MTAxMzIwMjcwNlowLzEtMCsGA1UEAxMk
ODk5ZjUyODQtMzJjNi00ZWE3LTgyNjItMmM2YzM5YjgzMTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvlPJNFfqrr+7pJAXezcgA3NktFqZX0ZHGGS
/7e9yHt/y4wafd84ejmkjp7jOVknxkui1CmxHH5gYYRJUUwqWr+kP66gxM2ZoNmc
LpeKdUVOcCY+XVm+EkSbs1PPECJMPdPdbiyZBR6lPL7ZJroNNbWxxYFkRDxfV/yC
vQCLx8uRpPTA3/hxjOaVqtaUTuouL4NHH1ejcT9xMkEXokDRi3qVQ+VWnx+MobaI
4cPDqgt3mhOgy/dxi7XeBawEbd2FG/C4PV5xdu4fVJES221ACdOBne7rmyRW0tjS
CDmZfBrZlISaGoTWHU5yDvYgFKy9mWvBeaRZPDx3D4VYuoVlhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLnpxKxESfjsssEgx874e3zB/SMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDdlNTdlMmUtZGE1NS0z
MjgyLTg2NTgtNmJkZmVkOGVmOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIJ6pqL/U2UM+Ytom1QJMcyFXd24g1LBErJW/7yrWte6RD+3OZCALD+
7nc91gluUxj8bww2uSv0vKsrQXVXbudb16APlLBvT+V2c4c5WksAxwZE6cBIqXVM
b8x5hmv/nYSdtwbGfUG514Ixvqwp6XAF9ASeZXmyUvnX8z1PQHM12HwLwj1wuZZe
iz7ROgDS5pLR4p/HHFPeiu71zyEkYStA3ZB48jzz2s9UWOxCwDgGAxocrRL1gwUf
TWs3HX1ZjnexaO78Wq7RwPFbiRLRUq/jqFNL/bi40SEE2eSLMj+pUf9dIfxOF6dx
YZHBR5wEUHQ46QAxCR8fc6qSWIIwdAs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:41:16 2025 by rpki-client