Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22101f04-a1c9-37e1-867c-d13aa3ec016b.roa
File:                     22101f04-a1c9-37e1-867c-d13aa3ec016b.roa (raw, json)
Hash identifier:          5GbxlYLe7PhNGhby5kzg8f+CMbd37Y6M7zE1wKiIfRM=
Subject key identifier:   FC:D6:7F:F8:79:F9:63:AA:CC:3C:69:36:89:80:F6:D1:37:35:62:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ED431F5CB90A15558D26F5240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22101f04-a1c9-37e1-867c-d13aa3ec016b.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     58061
IP address blocks:        166.0.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f5:cb:90:a1:55:58:d2:6f:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=714916f3-14e6-4360-93bb-8b2e0ffb894a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:9b:e2:54:7c:1a:c6:72:e9:60:ca:74:3e:
                    62:b1:d2:03:b9:5e:2d:98:c0:f6:40:25:ea:d5:fc:
                    ba:2f:30:33:37:06:bf:37:44:1f:51:65:0d:15:cb:
                    b8:2d:9b:95:5b:98:d1:3b:33:3e:21:5b:33:37:df:
                    a0:2f:0e:ed:5d:19:30:85:69:5d:16:d7:f5:aa:1b:
                    78:6c:86:b8:46:e0:aa:90:5b:02:ad:e8:ad:f4:a6:
                    fd:7f:02:82:b8:a1:be:81:20:0e:79:f2:ea:9f:d2:
                    85:c7:34:cb:ed:b9:95:89:f6:a4:cd:18:13:37:23:
                    63:8f:90:a4:88:ba:48:61:8f:59:b6:ab:ff:2f:2a:
                    5b:6e:26:d3:7b:2c:7c:0a:eb:85:94:3a:14:83:7c:
                    f9:25:61:f9:b7:44:30:6c:b7:ac:a3:22:47:57:7d:
                    f3:0e:f8:e3:0f:a7:c5:67:63:01:43:bb:de:b1:26:
                    a4:84:ee:35:6c:df:18:cf:51:5b:73:46:e0:62:f0:
                    06:6c:47:90:0d:71:6f:ad:94:46:a2:ee:6b:42:c9:
                    d2:41:c9:fd:3d:45:da:ce:33:00:49:41:d3:14:a7:
                    e3:f8:00:0e:09:26:27:20:02:1f:97:e9:45:56:65:
                    af:d9:06:e3:47:34:20:06:e0:6a:6d:62:23:04:fc:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D6:7F:F8:79:F9:63:AA:CC:3C:69:36:89:80:F6:D1:37:35:62:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22101f04-a1c9-37e1-867c-d13aa3ec016b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:20:41:dc:1b:5d:f5:a5:ae:ad:44:a5:9f:5d:52:32:e8:21:
         42:ea:93:ef:4d:f8:c5:81:60:4f:23:11:34:13:2c:45:8b:92:
         dc:52:0c:69:96:f4:0b:e2:2d:d9:e7:67:99:28:3e:5a:95:89:
         a9:da:b3:13:9f:b0:71:b3:67:6f:7b:38:f5:01:12:b3:f6:1b:
         81:49:1d:f1:b9:15:86:8f:07:f5:8b:70:55:9b:d3:55:1e:ee:
         55:85:36:73:df:65:63:f4:b9:c6:48:67:32:da:de:36:04:5c:
         c9:39:13:5a:5c:b2:84:03:c1:7d:da:45:ec:33:eb:69:7c:d7:
         13:f1:58:93:8f:1c:3e:45:dd:d0:ac:5f:1a:8c:a8:83:a9:33:
         50:4e:03:27:52:71:85:3f:42:d9:34:91:f8:34:de:69:3c:71:
         54:8b:a4:d7:be:84:af:12:f1:7e:f7:f6:60:c9:8b:af:e0:21:
         eb:95:93:f3:1e:da:e7:e8:d5:33:f4:1e:d6:96:8f:ce:c7:20:
         26:c4:4f:30:1b:10:d7:5e:4f:2b:3c:ba:af:bf:78:fd:f0:6c:
         51:b3:56:51:28:e3:80:74:49:1d:45:54:ca:74:5a:9a:82:8d:
         ab:64:28:7f:ff:6f:fc:92:23:81:9a:8b:95:d6:1b:18:dd:57:
         46:c9:3e:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMfXLkKFVWNJvUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
NzE0OTE2ZjMtMTRlNi00MzYwLTkzYmItOGIyZTBmZmI4OTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOb4lR8GsZy6WDKdD5isdIDuV4tmMD2QCXq
1fy6LzAzNwa/N0QfUWUNFcu4LZuVW5jROzM+IVszN9+gLw7tXRkwhWldFtf1qht4
bIa4RuCqkFsCreit9Kb9fwKCuKG+gSAOefLqn9KFxzTL7bmVifakzRgTNyNjj5Ck
iLpIYY9Ztqv/LypbbibTeyx8CuuFlDoUg3z5JWH5t0QwbLesoyJHV33zDvjjD6fF
Z2MBQ7vesSakhO41bN8Yz1Fbc0bgYvAGbEeQDXFvrZRGou5rQsnSQcn9PUXazjMA
SUHTFKfj+AAOCSYnIAIfl+lFVmWv2QbjRzQgBuBqbWIjBPyzswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzWf/h5+WOqzDxpNomA9tE3NWLrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjIxMDFmMDQtYTFjOS0z
N2UxLTg2N2MtZDEzYWEzZWMwMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIgQdwbXfWlrq1EpZ9dUjLoIULqk+9N+MWBYE8jETQTLEWLktxSDGmW
9AviLdnnZ5koPlqVianasxOfsHGzZ297OPUBErP2G4FJHfG5FYaPB/WLcFWb01Ue
7lWFNnPfZWP0ucZIZzLa3jYEXMk5E1pcsoQDwX3aRewz62l81xPxWJOPHD5F3dCs
XxqMqIOpM1BOAydScYU/Qtk0kfg03mk8cVSLpNe+hK8S8X739mDJi6/gIeuVk/Me
2ufo1TP0HtaWj87HICbETzAbENdeTys8uq+/eP3wbFGzVlEo44B0SR1FVMp0WpqC
jatkKH//b/ySI4Gai5XWGxjdV0bJPp4=
-----END CERTIFICATE-----
Generated at Wed Sep 16 14:08:44 2026 by rpki-client