Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c19411e-01f7-3933-a452-c35c071a89ff.roa
File:                     2c19411e-01f7-3933-a452-c35c071a89ff.roa (raw, json)
Hash identifier:          FfkFTv+54shjHF3dmTlVUP/pJ/rqPjiD22sZRFARJhY=
Subject key identifier:   D7:D8:D0:3B:8E:08:27:B3:37:2C:7C:33:9E:33:37:3E:DF:2C:D9:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FCBDEB299993E78CFB580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c19411e-01f7-3933-a452-c35c071a89ff.roa
Signing time:             Thu 30 Apr 2026 18:33:00 +0000
ROA not before:           Thu 30 Apr 2026 18:33:00 +0000
ROA not after:            Wed 29 Jul 2026 18:33:00 +0000
asID:                     62240
IP address blocks:        166.1.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:cb:de:b2:99:99:3e:78:cf:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:33:00 2026 GMT
            Not After : Jul 29 18:33:00 2026 GMT
        Subject: CN=c14d3769-6bfd-45f2-8f67-9f3ff109a8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:ab:0d:3a:2c:8e:0f:dc:25:de:09:77:51:
                    fb:aa:00:33:da:a7:3a:86:6c:79:e7:a5:d2:96:1e:
                    8a:fb:d6:82:6a:7d:ac:11:d4:65:98:ef:9d:26:c0:
                    ff:6e:e1:bc:d7:85:91:1b:69:76:ff:6e:f1:ed:e6:
                    f6:fd:ea:b3:34:56:cc:45:c2:d6:98:f0:3d:2d:fb:
                    01:d3:21:a9:84:5b:2b:04:9e:9b:2a:04:ee:1c:4f:
                    f8:07:87:2f:41:62:91:94:b5:21:b8:04:95:d8:37:
                    40:40:23:f9:0b:6b:89:b6:87:9c:4a:b1:cc:bb:a4:
                    e9:66:6f:70:95:f4:95:47:75:d1:7e:ca:70:89:53:
                    3c:fa:d6:32:bb:4b:29:17:c3:e7:0b:2c:89:c7:26:
                    63:60:f7:3b:5e:49:05:2c:99:88:18:90:ad:41:8e:
                    c8:fa:48:a7:5c:6c:87:3b:59:d2:c0:9f:10:1d:ef:
                    05:2a:0f:6b:c3:ff:f5:39:0d:9c:06:8d:60:e7:25:
                    2a:6e:3f:8a:59:a6:ee:26:47:49:10:5b:65:d5:13:
                    de:7e:ee:6f:5e:dd:69:b1:61:01:19:6c:4d:c1:a2:
                    2e:2b:e1:01:72:39:ec:e8:43:08:f1:60:55:82:b0:
                    db:62:48:c3:ef:76:6a:22:3a:02:52:4e:f6:da:fb:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:D0:3B:8E:08:27:B3:37:2C:7C:33:9E:33:37:3E:DF:2C:D9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c19411e-01f7-3933-a452-c35c071a89ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:31:47:23:28:a6:a1:8b:96:90:67:87:3e:3c:0e:75:4d:99:
         46:9e:44:29:8f:fb:07:54:14:97:6d:a9:6d:ae:88:27:13:86:
         3d:b7:2f:fe:86:d8:29:8c:07:81:18:7c:a5:9d:c9:f7:cc:14:
         a7:9e:f9:9a:a3:ff:e7:6b:5d:34:29:b9:d9:75:19:8f:ba:e0:
         b6:16:fd:29:b2:c7:5e:57:a7:7a:d4:11:8c:2b:d5:93:3a:a1:
         db:7f:8f:09:78:50:83:2a:f5:0b:10:40:51:c4:49:81:df:0c:
         e9:1a:70:5e:6b:ed:1a:0d:60:69:76:78:75:6d:7e:1b:c2:71:
         b9:7f:c7:f8:c2:48:22:a4:8b:d3:c7:36:c1:62:3a:f4:2d:bb:
         39:82:e6:8e:c4:65:d6:2c:30:8f:74:21:c5:6c:0f:c4:98:1b:
         45:4f:da:80:8b:49:23:a7:df:c8:fd:91:82:16:56:f0:5e:77:
         48:a4:db:34:f2:b4:c5:a6:86:7c:0a:bc:b9:32:b8:44:88:d9:
         54:ad:48:97:cc:d0:33:29:b3:02:32:91:06:ff:dd:81:60:56:
         16:dc:b2:8e:02:6c:a9:79:72:c3:d3:73:db:4f:30:7b:36:f6:
         a4:57:37:fe:ae:e4:dc:5a:40:89:ec:d9:13:8f:4f:64:ad:89:
         77:54:d0:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8vespmZPnjPtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQzMDE4MzMwMFoXDTI2MDcyOTE4MzMwMFowLzEtMCsGA1UEAxMk
YzE0ZDM3NjktNmJmZC00NWYyLThmNjctOWYzZmYxMDlhOGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6rDTosjg/cJd4Jd1H7qgAz2qc6hmx556XS
lh6K+9aCan2sEdRlmO+dJsD/buG814WRG2l2/27x7eb2/eqzNFbMRcLWmPA9LfsB
0yGphFsrBJ6bKgTuHE/4B4cvQWKRlLUhuASV2DdAQCP5C2uJtoecSrHMu6TpZm9w
lfSVR3XRfspwiVM8+tYyu0spF8PnCyyJxyZjYPc7XkkFLJmIGJCtQY7I+kinXGyH
O1nSwJ8QHe8FKg9rw//1OQ2cBo1g5yUqbj+KWabuJkdJEFtl1RPefu5vXt1psWEB
GWxNwaIuK+EBcjns6EMI8WBVgrDbYkjD73ZqIjoCUk722vubNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfY0DuOCCezNyx8M54zNz7fLNm6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmMxOTQxMWUtMDFmNy0z
OTMzLWE0NTItYzM1YzA3MWE4OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsxRyMopqGLlpBnhz48DnVNmUaeRCmP+wdUFJdtqW2uiCcThj23L/6G
2CmMB4EYfKWdyffMFKee+Zqj/+drXTQpudl1GY+64LYW/Smyx15Xp3rUEYwr1ZM6
odt/jwl4UIMq9QsQQFHESYHfDOkacF5r7RoNYGl2eHVtfhvCcbl/x/jCSCKki9PH
NsFiOvQtuzmC5o7EZdYsMI90IcVsD8SYG0VP2oCLSSOn38j9kYIWVvBed0ik2zTy
tMWmhnwKvLkyuESI2VStSJfM0DMpswIykQb/3YFgVhbcso4CbKl5csPTc9tPMHs2
9qRXN/6u5NxaQIns2ROPT2StiXdU0HQ=
-----END CERTIFICATE-----
Generated at Sat May 2 23:09:11 2026 by rpki-client