Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa
File:                     088b1098-9f13-3b9c-9ed2-1c879f079fea.roa (raw, json)
Hash identifier:          6yr7gWMsAWMubTWqtDcGjdh4z6fKxosCh8LQTXW0Rkc=
Subject key identifier:   BB:58:97:28:07:56:F9:1E:BB:F5:A2:E7:9B:26:BF:A5:55:4F:48:C7
Certificate issuer:       /CN=cadf002a-d081-4e51-89c4-f7121259516d
Certificate serial:       010D0C9F4328584B6BC75ACE30BDB9466840C200
Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     398813
IP address blocks:        166.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5a:ce:30:bd:b9:46:68:40:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=ef645b92-c9f1-483a-b05c-9f4d28c53860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:50:ef:5e:1d:d1:f3:54:ee:9b:6c:45:3c:
                    67:fe:06:29:0d:af:61:28:59:90:c1:10:0b:e2:a5:
                    9c:15:7b:e3:10:ae:ac:85:c8:1a:1e:dc:34:56:25:
                    0b:dc:77:c1:1e:0e:59:78:13:3b:0a:d6:98:9d:0f:
                    ac:e2:c7:2a:01:87:a2:1f:df:12:07:10:d4:40:35:
                    ed:fc:77:45:b5:ad:3f:5f:1c:f5:01:18:65:14:07:
                    3d:84:28:aa:90:a9:5f:b6:38:0a:fc:f6:18:0b:95:
                    c7:57:4c:09:2e:28:26:38:8e:33:d6:6e:57:6e:86:
                    c3:82:c5:f6:0a:78:a8:ef:ef:61:6c:d5:46:c1:33:
                    dc:f8:8d:5f:eb:d2:5b:39:c2:20:ac:4e:76:87:a3:
                    d6:db:fc:61:24:15:7b:86:e0:a3:bc:59:8e:94:7f:
                    e9:b8:f8:26:8a:0f:04:52:f0:ca:da:f2:0f:78:80:
                    6a:c1:20:da:b7:35:52:16:ca:bb:b3:b5:ca:f8:7f:
                    5d:e8:c4:29:93:a6:3b:61:15:a8:f5:11:20:4a:0f:
                    05:36:7c:9e:e7:8a:9c:fa:3f:5b:06:7e:c1:4e:65:
                    01:79:a6:0e:55:d7:59:fa:f3:f1:e3:58:59:68:ec:
                    28:c7:2f:cc:25:56:b4:61:c8:cb:6b:3b:5a:27:17:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:97:28:07:56:F9:1E:BB:F5:A2:E7:9B:26:BF:A5:55:4F:48:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/088b1098-9f13-3b9c-9ed2-1c879f079fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl

            X509v3 Authority Key Identifier:
                keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:43:db:89:ce:d1:5b:97:2f:d7:6e:85:35:82:3e:df:47:
         bc:ba:bc:e6:e7:f1:71:f6:46:68:04:ac:e3:f3:c1:84:23:ab:
         80:b4:31:26:c8:4d:17:ca:a4:ac:2f:e5:2d:9b:26:55:aa:ad:
         c8:e7:38:44:51:c4:6b:f5:a7:f2:67:6b:80:a6:a5:3b:41:4e:
         69:d8:3a:98:3f:05:8c:52:29:5c:9f:65:29:28:8f:f0:b9:74:
         14:1b:33:47:2c:ee:ca:4f:b6:c3:49:c0:03:98:b2:64:28:a9:
         b5:71:3a:bb:dc:10:f4:8f:81:72:35:68:d6:80:89:6c:35:2c:
         fd:dc:b2:39:f7:0f:45:64:c1:03:00:e8:5e:14:48:e6:bc:c9:
         57:ec:e7:8f:22:71:91:82:37:cc:52:08:d2:81:9b:19:f9:e3:
         b1:34:fa:d8:a9:f1:32:76:5f:8e:8d:40:7e:c2:7c:aa:e3:c9:
         ad:a9:fe:34:d2:cf:03:46:49:62:b6:3c:55:30:2a:ce:94:4b:
         a0:86:43:f8:39:d1:23:fd:7c:01:a0:2f:92:e1:c7:04:3b:d4:
         53:3d:76:1e:cf:2a:fb:83:60:9e:15:ca:1f:8f:ad:da:e7:52:
         92:fa:e9:85:fe:dc:49:28:dd:0f:21:bb:fe:c4:13:91:14:fe:
         a0:b6:32:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtrx1rOML25RmhAwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1
MTZkMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk
ZWY2NDViOTItYzlmMS00ODNhLWIwNWMtOWY0ZDI4YzUzODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldQ714d0fNU7ptsRTxn/gYpDa9hKFmQwRAL
4qWcFXvjEK6shcgaHtw0ViUL3HfBHg5ZeBM7CtaYnQ+s4scqAYeiH98SBxDUQDXt
/HdFta0/Xxz1ARhlFAc9hCiqkKlftjgK/PYYC5XHV0wJLigmOI4z1m5XbobDgsX2
Cnio7+9hbNVGwTPc+I1f69JbOcIgrE52h6PW2/xhJBV7huCjvFmOlH/puPgmig8E
UvDK2vIPeIBqwSDatzVSFsq7s7XK+H9d6MQpk6Y7YRWo9REgSg8FNnye54qc+j9b
Bn7BTmUBeaYOVddZ+vPx41hZaOwoxy/MJVa0YcjLaztaJxfQ9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLtYlygHVvkeu/Wi55smv6VVT0jHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm
MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvMDg4YjEwOTgtOWYxMy0z
YjljLTllZDItMWM4NzlmMDc5ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5
YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5
NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy
MTI1OTUxNmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApkIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATHlD24nO0VuXL9duhTWCPt9HvLq85ufxcfZGaASs4/PBhCOrgLQxJshN
F8qkrC/lLZsmVaqtyOc4RFHEa/Wn8mdrgKalO0FOadg6mD8FjFIpXJ9lKSiP8Ll0
FBszRyzuyk+2w0nAA5iyZCiptXE6u9wQ9I+BcjVo1oCJbDUs/dyyOfcPRWTBAwDo
XhRI5rzJV+znjyJxkYI3zFII0oGbGfnjsTT62KnxMnZfjo1AfsJ8quPJran+NNLP
A0ZJYrY8VTAqzpRLoIZD+DnRI/18AaAvkuHHBDvUUz12Hs8q+4NgnhXKH4+t2udS
kvrphf7cSSjdDyG7/sQTkRT+oLYyPw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 21:37:39 2025 by rpki-client