Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e5d3f29-6504-303a-b177-586a90a28954.roa
File:                     9e5d3f29-6504-303a-b177-586a90a28954.roa (raw, json)
Hash identifier:          Kc0MCwCsxoMGJ+WAzpb3B4gtWi1Mdx2WMrNVwC+zXpU=
Subject key identifier:   8F:14:83:D6:A4:CA:86:69:D1:36:6F:4C:CF:44:1E:E2:87:F9:36:02
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E655B0D3EE42B908C126340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e5d3f29-6504-303a-b177-586a90a28954.roa
Signing time:             Wed 23 Jul 2025 23:22:42 +0000
ROA not before:           Wed 23 Jul 2025 23:22:42 +0000
ROA not after:            Tue 21 Oct 2025 23:22:42 +0000
asID:                     7385
IP address blocks:        166.0.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:5b:0d:3e:e4:2b:90:8c:12:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:42 2025 GMT
            Not After : Oct 21 23:22:42 2025 GMT
        Subject: CN=74604fd8-3bee-4549-9f43-38698e3a10de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:b8:5a:26:13:5c:c8:38:2d:53:54:bf:cb:
                    3d:ff:29:36:e8:87:85:6f:52:de:6a:e0:9a:a4:e9:
                    85:b3:df:8c:b2:71:01:0e:9f:51:4a:f5:1a:96:f1:
                    63:e0:db:22:7b:41:8b:23:ff:8b:62:5d:2e:96:3a:
                    ba:82:9a:4e:d7:7c:56:32:38:7f:1c:7e:0e:93:81:
                    e9:3b:93:f2:b5:fb:58:03:50:33:df:08:39:e1:ab:
                    66:e8:02:9f:65:25:b3:31:3c:58:81:d0:84:08:68:
                    bb:db:41:b2:54:f0:c0:94:b8:78:b8:0d:bf:62:5e:
                    df:f7:00:a7:a6:89:6c:d1:9d:f2:9e:f6:16:eb:3b:
                    d8:71:2a:c4:57:7b:73:e0:8d:6e:f5:85:8b:e5:3b:
                    aa:7b:60:da:cb:28:a2:87:42:37:07:be:41:be:32:
                    c6:2f:18:f7:12:4f:0b:63:f6:7e:77:a1:1d:e4:99:
                    1f:37:28:2e:27:2f:89:3d:24:fe:1e:ad:1e:fd:89:
                    30:71:f4:f9:19:a2:8c:35:0b:a7:f9:76:9d:5b:6c:
                    73:7d:59:f9:41:94:07:a5:26:0b:75:6b:33:25:23:
                    49:bc:cf:23:4f:2e:07:3b:d5:2c:e9:6c:07:ab:6f:
                    0d:cc:c2:37:d0:1f:9d:c6:12:37:c4:50:c0:78:55:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:83:D6:A4:CA:86:69:D1:36:6F:4C:CF:44:1E:E2:87:F9:36:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e5d3f29-6504-303a-b177-586a90a28954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:40:db:25:3e:09:34:3d:11:40:d9:bd:f2:07:01:61:30:
         2d:c2:e0:93:28:a0:f4:e4:81:29:98:de:de:fb:43:2b:1d:2c:
         16:c1:cd:21:b2:3a:21:09:51:da:cc:e1:a3:0b:be:ba:f2:37:
         63:35:86:35:d7:e5:d0:d6:3b:2a:81:00:05:49:69:97:85:c0:
         78:5e:2e:5e:99:a9:9a:0f:56:da:99:3c:fc:f9:cf:fb:02:10:
         4d:83:36:4e:67:4b:68:35:2e:41:e9:13:d8:d1:dd:eb:96:58:
         9d:03:02:54:56:a1:d0:3f:29:95:5e:00:2c:b5:9c:97:64:84:
         fc:b3:57:c6:7e:74:ca:b1:49:e3:d8:e0:02:b2:5c:44:93:f8:
         1e:bd:7a:07:46:68:de:72:f8:be:ea:7b:1c:a9:fa:d5:88:0f:
         24:aa:f3:58:66:47:8f:90:b9:5b:91:69:f3:62:43:d4:38:2e:
         77:7e:b3:59:d6:3e:4a:7a:d8:0a:62:ff:ee:80:74:ed:49:a3:
         51:a2:29:74:81:e8:cc:cb:e7:e9:44:ed:be:e9:ba:74:12:2a:
         1c:02:c4:eb:8f:0a:1d:86:25:88:c8:73:56:80:72:e5:41:f6:
         34:b1:25:e9:0c:b6:fa:8c:b7:7c:a6:40:c3:5c:bf:6c:8a:fa:
         67:59:08:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZVsNPuQrkIwSY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcyMzIzMjI0MloXDTI1MTAyMTIzMjI0MlowLzEtMCsGA1UEAxMk
NzQ2MDRmZDgtM2JlZS00NTQ5LTlmNDMtMzg2OThlM2ExMGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeu4WiYTXMg4LVNUv8s9/yk26IeFb1LeauCa
pOmFs9+MsnEBDp9RSvUalvFj4Nsie0GLI/+LYl0uljq6gppO13xWMjh/HH4Ok4Hp
O5PytftYA1Az3wg54atm6AKfZSWzMTxYgdCECGi720GyVPDAlLh4uA2/Yl7f9wCn
pols0Z3ynvYW6zvYcSrEV3tz4I1u9YWL5Tuqe2Dayyiih0I3B75BvjLGLxj3Ek8L
Y/Z+d6Ed5JkfNyguJy+JPST+Hq0e/YkwcfT5GaKMNQun+XadW2xzfVn5QZQHpSYL
dWszJSNJvM8jTy4HO9Us6WwHq28NzMI30B+dxhI3xFDAeFU+lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8Ug9akyoZp0TZvTM9EHuKH+TYCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWU1ZDNmMjktNjUwNC0z
MDNhLWIxNzctNTg2YTkwYTI4OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpgBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGzQNslPgk0PRFA2b3yBwFhMC3C4JMooPTkgSmY3t77QysdLBbBzSGy
OiEJUdrM4aMLvrryN2M1hjXX5dDWOyqBAAVJaZeFwHheLl6ZqZoPVtqZPPz5z/sC
EE2DNk5nS2g1LkHpE9jR3euWWJ0DAlRWodA/KZVeACy1nJdkhPyzV8Z+dMqxSePY
4AKyXEST+B69egdGaN5y+L7qexyp+tWIDySq81hmR4+QuVuRafNiQ9Q4Lnd+s1nW
Pkp62Api/+6AdO1Jo1GiKXSB6MzL5+lE7b7punQSKhwCxOuPCh2GJYjIc1aAcuVB
9jSxJekMtvqMt3ymQMNcv2yK+mdZCMA=
-----END CERTIFICATE-----
Generated at Sat Jul 26 13:15:14 2025 by rpki-client