Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a68d9eb-a0b9-3d7f-8738-bc975952220b.roa
File:                     2a68d9eb-a0b9-3d7f-8738-bc975952220b.roa (raw, json)
Hash identifier:          BUN5tQOpOedGZ6oVGEucEIO/f7SAPW+k/uj0WGG8OyU=
Subject key identifier:   16:F4:D9:4B:C8:73:A4:54:BE:08:7D:0B:01:E6:CD:22:26:DB:DE:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D70AD97D276BBDE4DF426C5A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a68d9eb-a0b9-3d7f-8738-bc975952220b.roa
Signing time:             Wed 08 Apr 2026 16:41:53 +0000
ROA not before:           Wed 08 Apr 2026 16:41:53 +0000
ROA not after:            Tue 07 Jul 2026 16:41:53 +0000
asID:                     63199
IP address blocks:        166.1.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:ad:97:d2:76:bb:de:4d:f4:26:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  8 16:41:53 2026 GMT
            Not After : Jul  7 16:41:53 2026 GMT
        Subject: CN=a484879b-8ebc-4964-9718-2dbf508ca96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:13:47:e0:0b:f9:e7:90:cf:3b:58:85:9d:
                    cb:f7:3c:85:71:55:ce:0b:45:72:9f:fc:14:bd:8c:
                    51:4d:e8:53:2b:6f:85:d4:52:54:49:b0:44:77:3a:
                    e7:f2:78:ac:95:70:44:de:b9:14:06:88:27:68:f4:
                    98:c8:6f:4a:7b:d4:92:11:d4:37:a1:e5:09:94:21:
                    cc:86:c3:8f:a5:3e:92:93:fb:d7:49:08:c8:67:8a:
                    d4:06:cc:e3:70:d8:d7:34:b5:b3:9b:40:fb:8d:c6:
                    22:0e:23:2c:67:04:87:c5:93:44:d7:9b:57:5f:87:
                    bb:87:23:f6:d5:e0:88:e3:32:2e:b8:73:47:74:f6:
                    d1:20:91:b3:48:b3:d6:55:55:b2:78:f9:a2:41:29:
                    2e:8a:4d:1d:af:55:c2:1c:a8:ff:c1:98:0e:97:93:
                    b1:8a:9e:cc:61:cc:67:b0:22:32:ba:0d:d9:aa:7b:
                    5b:9d:d0:5f:2a:10:3a:88:1d:d8:d8:ec:0f:b0:29:
                    16:ac:83:b0:d7:69:30:03:27:10:9a:0e:cb:de:ab:
                    50:11:33:fa:4e:0d:9e:8d:a0:27:56:36:3d:a4:c1:
                    56:39:83:41:7e:54:1e:df:41:90:3e:ff:f0:6e:b8:
                    d5:0d:47:6e:f7:6a:16:d3:77:d4:49:a8:11:4c:db:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:D9:4B:C8:73:A4:54:BE:08:7D:0B:01:E6:CD:22:26:DB:DE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a68d9eb-a0b9-3d7f-8738-bc975952220b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:8b:31:50:63:a0:5c:da:b0:a2:eb:18:77:f9:12:99:47:
         49:91:a4:ea:06:51:4e:52:e3:71:74:b7:43:6d:be:e3:68:70:
         27:bb:46:32:2a:3b:97:ae:47:6d:25:df:1e:bc:25:2d:ff:91:
         fc:d3:db:2e:de:64:9e:e9:62:a5:c1:38:41:6f:7c:02:88:1f:
         68:72:58:df:18:8c:2c:93:3b:12:95:c0:de:10:8c:c2:06:3a:
         ca:a1:78:4c:20:ed:48:dd:fe:1d:75:5f:a4:86:ea:39:ce:fe:
         f6:d3:3f:23:3e:0c:7e:2e:96:8e:b2:be:a2:7a:5e:1e:95:5f:
         e7:b7:8b:cf:cf:de:1b:b7:01:c9:53:d5:e1:d8:9c:81:d6:a9:
         2a:49:9c:96:85:14:a1:35:44:57:d7:7a:a6:a0:99:17:04:c0:
         e2:34:cd:a0:4b:12:84:28:35:1f:56:c4:23:f1:46:80:f2:e7:
         77:26:6f:77:62:7d:5b:40:ec:1f:bd:87:90:d2:e6:ac:da:8e:
         fa:a4:2e:ea:4c:58:0b:90:22:ae:b3:5e:81:1c:30:72:d5:4d:
         e4:c1:62:08:63:9b:a0:11:72:d7:c8:7d:60:32:38:5c:ed:e4:
         da:fe:20:65:7e:af:75:1d:9e:28:47:4a:f5:c0:6e:be:0a:b1:
         93:08:64:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wrZfSdrveTfQmxaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwODE2NDE1M1oXDTI2MDcwNzE2NDE1M1owLzEtMCsGA1UEAxMk
YTQ4NDg3OWItOGViYy00OTY0LTk3MTgtMmRiZjUwOGNhOTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbATR+AL+eeQzztYhZ3L9zyFcVXOC0Vyn/wU
vYxRTehTK2+F1FJUSbBEdzrn8nislXBE3rkUBognaPSYyG9Ke9SSEdQ3oeUJlCHM
hsOPpT6Sk/vXSQjIZ4rUBszjcNjXNLWzm0D7jcYiDiMsZwSHxZNE15tXX4e7hyP2
1eCI4zIuuHNHdPbRIJGzSLPWVVWyePmiQSkuik0dr1XCHKj/wZgOl5Oxip7MYcxn
sCIyug3ZqntbndBfKhA6iB3Y2OwPsCkWrIOw12kwAycQmg7L3qtQETP6Tg2ejaAn
VjY9pMFWOYNBflQe30GQPv/wbrjVDUdu92oW03fUSagRTNtw8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBb02UvIc6RUvgh9CwHmzSIm297UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmE2OGQ5ZWItYTBiOS0z
ZDdmLTg3MzgtYmM5NzU5NTIyMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzGizFQY6Bc2rCi6xh3+RKZR0mRpOoGUU5S43F0t0NtvuNocCe7RjIq
O5euR20l3x68JS3/kfzT2y7eZJ7pYqXBOEFvfAKIH2hyWN8YjCyTOxKVwN4QjMIG
OsqheEwg7Ujd/h11X6SG6jnO/vbTPyM+DH4ulo6yvqJ6Xh6VX+e3i8/P3hu3AclT
1eHYnIHWqSpJnJaFFKE1RFfXeqagmRcEwOI0zaBLEoQoNR9WxCPxRoDy53cmb3di
fVtA7B+9h5DS5qzajvqkLupMWAuQIq6zXoEcMHLVTeTBYghjm6ARctfIfWAyOFzt
5Nr+IGV+r3UdnihHSvXAbr4KsZMIZJI=
-----END CERTIFICATE-----
Generated at Sat Apr 11 15:09:55 2026 by rpki-client