Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/061f46be-acda-3b6f-be2f-264b904d15ab.roa
File:                     061f46be-acda-3b6f-be2f-264b904d15ab.roa (raw, json)
Hash identifier:          Egkg2O3nBVGQe2ENbB7B0sgGtmlIj4Jg3QN+Gzjq20s=
Subject key identifier:   61:2E:27:D5:B3:6C:3B:2B:43:62:28:36:45:68:87:E2:08:BD:9B:20
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DF437AA5612C90124DA906EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/061f46be-acda-3b6f-be2f-264b904d15ab.roa
Signing time:             Mon 25 May 2026 19:30:58 +0000
ROA not before:           Mon 25 May 2026 19:30:58 +0000
ROA not after:            Sun 23 Aug 2026 19:30:58 +0000
asID:                     401152
IP address blocks:        166.1.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:37:aa:56:12:c9:01:24:da:90:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 25 19:30:58 2026 GMT
            Not After : Aug 23 19:30:58 2026 GMT
        Subject: CN=504f8101-be6c-4317-bc31-2e99f8f6392f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:16:09:d4:ac:b7:7e:f2:6a:1e:6d:27:e7:
                    ca:a6:a4:00:a1:f9:23:ed:10:22:58:b1:b0:97:f4:
                    9b:39:91:3a:84:a7:7f:34:7d:be:70:12:43:da:b5:
                    16:52:53:5e:b4:94:a2:52:69:f1:ad:85:ed:a9:61:
                    51:c8:c4:98:75:c9:22:cf:e0:c6:b3:bf:51:c6:49:
                    9b:8f:5d:40:bf:99:a7:ca:7b:51:37:1c:ec:e4:c9:
                    bb:84:ad:09:43:46:c1:5f:4d:12:f7:ee:3f:d6:be:
                    ca:d6:86:8e:6d:b7:da:ba:c7:67:bd:29:ff:a0:0a:
                    2f:f3:0a:89:49:16:81:33:f8:43:91:a8:62:e8:de:
                    75:78:71:f2:cb:34:a0:4b:fa:c3:18:ae:d6:eb:21:
                    76:a1:6e:9c:da:0f:bc:98:9c:98:18:2c:26:14:47:
                    1f:ea:8e:26:cd:35:35:a6:ce:b5:0a:e8:1a:f0:b9:
                    b8:7b:5e:82:47:6f:2e:06:38:f5:69:ca:66:f2:ac:
                    8a:e2:37:15:1a:f7:90:48:20:cd:d6:4e:33:7e:0d:
                    4e:72:d3:9b:94:3e:29:14:7b:5a:7e:8d:d9:43:93:
                    75:ea:23:d3:a6:99:3e:76:27:55:6c:b6:5a:73:a7:
                    eb:fb:ed:a7:40:4a:de:db:01:e1:c1:8d:ec:40:4d:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2E:27:D5:B3:6C:3B:2B:43:62:28:36:45:68:87:E2:08:BD:9B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/061f46be-acda-3b6f-be2f-264b904d15ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:65:e6:2b:81:a3:0d:86:36:ab:71:4e:de:6f:bb:60:b0:
         c7:6c:e5:f4:f7:e8:9b:b7:9a:c8:f4:c9:ce:7a:a1:1c:49:70:
         4e:43:77:a2:72:6e:9d:3c:b1:0e:ac:e1:fe:53:da:af:4d:b0:
         71:e7:19:c7:20:cc:c1:98:6d:d8:be:74:07:a0:6b:8f:75:1f:
         2d:3d:a1:53:4e:98:43:02:3d:d7:a8:9f:20:29:33:ac:36:2c:
         fd:dc:f7:be:11:37:f2:0d:c2:b1:cf:89:b8:2e:e4:a3:13:41:
         74:d7:4a:91:ab:43:c1:6e:53:7e:0e:c6:f1:4e:51:f7:12:29:
         33:0c:a1:41:ab:90:ad:8a:65:ba:89:ce:1e:5d:45:4f:b7:07:
         35:fd:56:01:33:53:4f:c5:92:14:02:cf:59:14:5e:8b:aa:00:
         ff:df:51:8d:0b:f6:d7:25:48:49:c1:1a:e6:0a:48:6d:87:f5:
         ee:59:5b:99:6f:8b:57:34:59:a0:03:bc:c5:07:e8:9b:e9:67:
         c1:de:b8:9b:7c:ab:f4:af:40:85:a3:2b:b9:06:47:75:f5:2d:
         19:d1:4f:6d:36:ab:6b:44:db:aa:b9:36:a7:5e:f6:86:7a:91:
         4b:0c:e6:dd:e2:11:24:a2:03:db:1d:fd:cf:61:f6:df:18:21:
         0a:f6:8b:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30N6pWEskBJNqQbsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyNTE5MzA1OFoXDTI2MDgyMzE5MzA1OFowLzEtMCsGA1UEAxMk
NTA0ZjgxMDEtYmU2Yy00MzE3LWJjMzEtMmU5OWY4ZjYzOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0YWCdSst37yah5tJ+fKpqQAofkj7RAiWLGw
l/SbOZE6hKd/NH2+cBJD2rUWUlNetJSiUmnxrYXtqWFRyMSYdckiz+DGs79Rxkmb
j11Av5mnyntRNxzs5Mm7hK0JQ0bBX00S9+4/1r7K1oaObbfausdnvSn/oAov8wqJ
SRaBM/hDkahi6N51eHHyyzSgS/rDGK7W6yF2oW6c2g+8mJyYGCwmFEcf6o4mzTU1
ps61Cuga8Lm4e16CR28uBjj1acpm8qyK4jcVGveQSCDN1k4zfg1OctOblD4pFHta
fo3ZQ5N16iPTppk+didVbLZac6fr++2nQEre2wHhwY3sQE1eIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEuJ9WzbDsrQ2IoNkVoh+IIvZsgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDYxZjQ2YmUtYWNkYS0z
YjZmLWJlMmYtMjY0YjkwNGQxNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXHZeYrgaMNhjarcU7eb7tgsMds5fT36Ju3msj0yc56oRxJcE5Dd6Jy
bp08sQ6s4f5T2q9NsHHnGccgzMGYbdi+dAega491Hy09oVNOmEMCPdeonyApM6w2
LP3c974RN/INwrHPibgu5KMTQXTXSpGrQ8FuU34OxvFOUfcSKTMMoUGrkK2KZbqJ
zh5dRU+3BzX9VgEzU0/FkhQCz1kUXouqAP/fUY0L9tclSEnBGuYKSG2H9e5ZW5lv
i1c0WaADvMUH6JvpZ8HeuJt8q/SvQIWjK7kGR3X1LRnRT202q2tE26q5Nqde9oZ6
kUsM5t3iESSiA9sd/c9h9t8YIQr2izg=
-----END CERTIFICATE-----
Generated at Tue May 26 00:30:08 2026 by rpki-client