Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
File:                     31f5762a-425a-31dc-b407-6d24f4dc9737.roa (raw, json)
Hash identifier:          6pc3S0oKiafRZFxc6MR0gp5pLPGS7J8jsNmpUFO5B2c=
Subject key identifier:   61:F0:A9:7C:7C:47:D1:23:12:B8:C9:B3:F3:78:B0:56:4C:67:68:76
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B99D792C8E018A29FABB74BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     26383
IP address blocks:        166.1.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:92:c8:e0:18:a2:9f:ab:b7:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=d4cedaf9-c15e-47a5-bd77-ec91ec480d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:35:9e:4f:91:b6:15:6e:5b:30:20:79:0a:
                    3b:39:02:7b:37:98:25:95:ee:6a:fc:8b:fa:42:16:
                    46:20:b6:84:a0:af:0b:70:f2:7c:94:0f:ef:2b:ef:
                    4a:6a:62:a2:10:91:1b:3a:6c:6b:4f:40:76:45:86:
                    1b:86:f8:b7:f1:6e:04:f5:43:3f:d8:08:b1:4a:82:
                    ca:86:76:b6:61:30:dd:73:66:94:40:4e:7e:49:e3:
                    b2:90:26:d4:b2:a6:2a:5e:8e:d5:3d:5d:18:ca:09:
                    ef:f9:2e:a6:b4:b7:d0:c9:19:03:21:7c:ef:0e:8a:
                    36:19:1d:7b:b5:a6:42:90:fe:b4:9b:88:90:08:9c:
                    2f:48:ff:77:47:dc:97:5a:b1:17:c7:4a:05:3a:03:
                    62:2a:62:46:26:85:b6:f8:83:02:17:52:92:a6:b7:
                    15:91:ff:57:ad:b6:43:21:89:10:d3:d9:db:3f:28:
                    52:7e:c1:de:b2:8a:ed:be:7e:40:8b:54:c1:bd:84:
                    0a:bc:d5:ae:6d:3f:fa:11:4e:1d:69:1a:9d:9e:bb:
                    29:ab:a5:54:9a:fc:73:e8:de:2e:07:23:61:a5:92:
                    d4:dc:90:a5:96:9a:6d:93:74:af:28:b3:b5:b1:d9:
                    cf:cf:23:e2:1a:74:95:6b:b2:8b:48:f9:9e:24:a3:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:A9:7C:7C:47:D1:23:12:B8:C9:B3:F3:78:B0:56:4C:67:68:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:4d:60:ea:3d:54:02:46:67:83:54:58:de:72:86:61:cd:
         c5:b2:70:53:39:fc:9c:96:54:0e:e6:58:39:72:66:c5:f9:e9:
         19:ec:d3:35:80:69:e0:36:73:d0:8a:6d:35:52:f2:9a:6c:64:
         fd:cc:28:b5:14:de:eb:d2:6c:bc:90:ef:04:ea:6f:2e:77:1a:
         b1:09:2c:56:4c:5d:51:6f:29:32:98:95:72:07:04:47:91:f2:
         4b:f5:2f:b2:b5:db:6f:9b:c4:c9:a3:80:86:0e:01:e1:da:fc:
         33:22:40:c9:d1:14:5d:1f:b5:83:af:1b:bd:0a:a0:5d:ab:a1:
         4d:c6:14:c5:a4:1e:b7:45:fa:e5:6b:fa:e7:76:d0:55:b8:2e:
         b4:5f:63:61:5f:09:98:17:98:1d:79:8e:05:ca:50:a8:a0:71:
         10:d0:cf:ab:6d:99:aa:3e:2d:bf:9a:f8:2b:28:eb:ac:4e:90:
         6f:d3:a1:69:35:c2:a8:7d:b6:20:8b:7b:6f:08:bb:c4:0b:ee:
         1f:cd:8d:5a:95:86:30:39:c7:3c:cc:e4:7e:00:a2:2d:6b:dc:
         f7:db:36:17:09:05:dc:eb:04:f7:5d:ae:60:11:14:6f:6d:65:
         9f:b2:7d:63:f0:d1:8a:67:73:eb:95:d1:34:3d:d3:6f:5e:c2:
         71:25:e9:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15LI4Biin6u3S6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZDRjZWRhZjktYzE1ZS00N2E1LWJkNzctZWM5MWVjNDgwZDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKg1nk+RthVuWzAgeQo7OQJ7N5glle5q/Iv6
QhZGILaEoK8LcPJ8lA/vK+9KamKiEJEbOmxrT0B2RYYbhvi38W4E9UM/2AixSoLK
hna2YTDdc2aUQE5+SeOykCbUsqYqXo7VPV0Yygnv+S6mtLfQyRkDIXzvDoo2GR17
taZCkP60m4iQCJwvSP93R9yXWrEXx0oFOgNiKmJGJoW2+IMCF1KSprcVkf9XrbZD
IYkQ09nbPyhSfsHesortvn5Ai1TBvYQKvNWubT/6EU4daRqdnrspq6VUmvxz6N4u
ByNhpZLU3JCllpptk3SvKLO1sdnPzyPiGnSVa7KLSPmeJKNJcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHwqXx8R9EjErjJs/N4sFZMZ2h2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzFmNTc2MmEtNDI1YS0z
MWRjLWI0MDctNmQyNGY0ZGM5NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUNTWDqPVQCRmeDVFjecoZhzcWycFM5/JyWVA7mWDlyZsX56Rns0zWA
aeA2c9CKbTVS8ppsZP3MKLUU3uvSbLyQ7wTqby53GrEJLFZMXVFvKTKYlXIHBEeR
8kv1L7K122+bxMmjgIYOAeHa/DMiQMnRFF0ftYOvG70KoF2roU3GFMWkHrdF+uVr
+ud20FW4LrRfY2FfCZgXmB15jgXKUKigcRDQz6ttmao+Lb+a+Cso66xOkG/ToWk1
wqh9tiCLe28Iu8QL7h/NjVqVhjA5xzzM5H4Aoi1r3PfbNhcJBdzrBPddrmARFG9t
ZZ+yfWPw0Ypnc+uV0TQ9029ewnEl6VU=
-----END CERTIFICATE-----
Generated at Sun Nov 2 16:47:34 2025 by rpki-client