Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa
File:                     2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa (raw, json)
Hash identifier:          2LNdEylGun4JW9M+Zbar3rI9SAMf1Pbh2GrL4XrEzYA=
Subject key identifier:   D7:43:E6:82:5A:93:E0:10:8B:7A:D9:9B:77:8A:3D:19:80:B3:CB:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ACF71098653A82D7B6DC94980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     202656
IP address blocks:        166.1.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:09:86:53:a8:2d:7b:6d:c9:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=7bed606c-bb43-41eb-a1ea-0949c83b0c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:f3:5f:64:78:b3:84:77:23:63:f3:5c:5c:
                    1b:9d:ed:02:96:6d:67:22:ff:3f:74:3e:96:4f:2a:
                    75:b1:f9:5a:cc:56:89:17:67:06:a2:12:c7:9e:a2:
                    f9:db:8f:b7:a7:b9:b0:5f:23:5e:8c:c0:12:66:76:
                    f3:8f:3c:50:27:da:5e:ea:55:67:bc:72:3c:f1:74:
                    41:82:10:2e:87:99:ae:c4:52:a7:f8:2c:01:84:52:
                    3a:e0:7d:91:ac:9e:8a:c5:1e:fd:58:87:c7:bc:d2:
                    27:11:bd:51:63:ad:1d:d9:ec:4e:36:a8:f8:3b:ae:
                    c4:78:d0:3c:81:a1:56:bc:77:ec:26:6d:95:74:76:
                    20:17:bf:29:5b:3d:f6:31:3a:15:9c:9c:9e:a8:ad:
                    30:71:37:23:19:fc:8c:db:c2:01:1f:ff:e5:e5:44:
                    79:bf:26:f4:12:a9:51:49:09:18:fb:b1:10:62:6e:
                    7f:30:5b:bd:ad:93:d2:79:f6:ce:d1:b7:9d:61:f2:
                    40:f9:d4:52:96:d7:a2:cf:63:ae:29:98:5a:98:82:
                    d3:4d:17:70:88:5f:f5:57:35:6b:71:21:4c:39:06:
                    fd:dd:42:9a:3e:ee:fd:e3:24:3c:03:a7:e0:5b:c3:
                    44:53:b9:bd:d1:23:df:17:30:34:25:d1:ef:b8:9a:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:43:E6:82:5A:93:E0:10:8B:7A:D9:9B:77:8A:3D:19:80:B3:CB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ebf9ebe-5748-3ec5-ba70-06bcf0d7884c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:93:41:dc:ed:d8:d9:9b:ae:7c:a4:34:fb:f4:4c:85:02:
         e8:87:38:40:88:a5:6a:4a:86:6a:15:43:13:5f:ae:c2:69:3a:
         c3:f6:53:03:8d:77:bb:02:be:cf:72:dd:1a:2e:60:0d:1e:6a:
         e8:74:1c:c3:22:13:91:50:bd:ea:b1:06:b7:0c:cb:42:3e:c8:
         e5:f3:bd:49:69:bd:1e:19:d4:6c:f9:78:f0:7f:e1:e7:a4:7d:
         90:bf:cb:2b:03:a1:f2:24:56:28:c9:e3:56:fd:12:02:47:23:
         b0:a7:79:5b:f4:5b:38:07:46:56:78:6c:fe:1d:63:49:0b:17:
         c7:6c:d6:38:3e:b4:cf:36:ac:8e:54:c9:af:8e:a5:98:2e:6d:
         53:98:8d:50:b7:b5:38:7a:f1:99:9f:fe:57:4d:81:40:22:b8:
         82:91:59:f9:d6:dd:21:b3:ca:4b:3f:51:6d:b3:0b:19:32:f9:
         f2:bd:ca:4a:40:52:94:80:81:12:32:7b:ff:58:f6:da:e5:a6:
         30:92:af:1c:df:a6:c9:b6:a4:1a:16:ff:08:54:63:33:09:9d:
         10:c8:2e:86:0b:a1:61:54:b8:18:16:b4:ab:7c:d6:93:f9:29:
         f6:b7:e7:bc:0c:fe:ef:f5:54:f3:41:8d:64:59:02:e2:81:f6:
         b5:b8:bc:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQmGU6gte23JSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
N2JlZDYwNmMtYmI0My00MWViLWExZWEtMDk0OWM4M2IwYzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7TzX2R4s4R3I2PzXFwbne0Clm1nIv8/dD6W
Typ1sflazFaJF2cGohLHnqL524+3p7mwXyNejMASZnbzjzxQJ9pe6lVnvHI88XRB
ghAuh5muxFKn+CwBhFI64H2RrJ6KxR79WIfHvNInEb1RY60d2exONqj4O67EeNA8
gaFWvHfsJm2VdHYgF78pWz32MToVnJyeqK0wcTcjGfyM28IBH//l5UR5vyb0EqlR
SQkY+7EQYm5/MFu9rZPSefbO0bedYfJA+dRSlteiz2OuKZhamILTTRdwiF/1VzVr
cSFMOQb93UKaPu794yQ8A6fgW8NEU7m90SPfFzA0JdHvuJq4fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdD5oJak+AQi3rZm3eKPRmAs8t8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmViZjllYmUtNTc0OC0z
ZWM1LWJhNzAtMDZiY2YwZDc4ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9/k0Hc7djZm658pDT79EyFAuiHOECIpWpKhmoVQxNfrsJpOsP2UwON
d7sCvs9y3RouYA0eauh0HMMiE5FQveqxBrcMy0I+yOXzvUlpvR4Z1Gz5ePB/4eek
fZC/yysDofIkVijJ41b9EgJHI7CneVv0WzgHRlZ4bP4dY0kLF8ds1jg+tM82rI5U
ya+OpZgubVOYjVC3tTh68Zmf/ldNgUAiuIKRWfnW3SGzyks/UW2zCxky+fK9ykpA
UpSAgRIye/9Y9trlpjCSrxzfpsm2pBoW/whUYzMJnRDILoYLoWFUuBgWtKt81pP5
Kfa357wM/u/1VPNBjWRZAuKB9rW4vMA=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:39 2025 by rpki-client