Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37b99eb3-d791-33bb-9d2c-95262842fe26.roa
File:                     37b99eb3-d791-33bb-9d2c-95262842fe26.roa (raw, json)
Hash identifier:          bczWY0KFnbacnfMsxJ+5X57ham0fIxFAEKRkyzH+lKQ=
Subject key identifier:   34:F6:2C:BD:02:84:3B:CC:AE:48:D9:31:97:6F:96:05:47:F2:CD:C4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CFE66D39F02DB2C38D27209E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37b99eb3-d791-33bb-9d2c-95262842fe26.roa
Signing time:             Thu 26 Feb 2026 18:17:08 +0000
ROA not before:           Thu 26 Feb 2026 18:17:08 +0000
ROA not after:            Wed 27 May 2026 17:17:08 +0000
asID:                     401152
IP address blocks:        166.0.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:66:d3:9f:02:db:2c:38:d2:72:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 26 18:17:08 2026 GMT
            Not After : May 27 17:17:08 2026 GMT
        Subject: CN=8762058b-d2bf-49aa-bf81-cec545da9ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:5e:d7:38:ee:50:8d:68:f4:02:35:5c:7a:
                    10:ce:ac:3a:63:f6:e7:68:59:4a:49:04:e0:86:4d:
                    33:2b:20:9c:f8:2f:89:63:fb:ad:f3:15:91:46:e1:
                    f2:54:63:1e:8e:b2:03:d3:c3:94:92:6b:16:c2:3a:
                    2f:09:04:ae:18:f2:89:f1:85:48:0c:7b:8c:4e:f2:
                    10:bb:8d:2d:2e:46:9e:ac:3f:1f:78:ff:8b:49:eb:
                    f9:51:29:e9:b7:2c:8e:5d:ae:2c:31:6c:c6:f9:b9:
                    1b:6a:67:32:2c:80:49:56:10:0a:ba:20:d1:5d:45:
                    78:27:86:68:e8:86:a8:ea:93:d7:d8:d3:39:74:cf:
                    eb:45:bd:e3:dc:79:b9:47:a5:68:ab:a1:50:4d:ca:
                    01:16:50:9c:49:89:9b:72:2c:1b:2d:bd:50:91:54:
                    e1:08:89:42:c3:39:52:cf:7b:d9:45:98:fc:5d:d1:
                    44:23:61:e0:c7:3b:6c:ff:a9:d6:27:e8:7d:7e:32:
                    e0:e5:22:1a:f0:c6:44:9c:5a:5e:0d:de:ff:84:06:
                    fa:e7:fd:b9:5a:41:8f:25:41:4d:b7:f8:7e:08:8c:
                    da:06:35:06:83:a9:5d:c0:30:d9:0c:c7:66:db:f0:
                    03:06:ed:e2:72:38:e0:47:81:58:dd:46:57:32:e7:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:2C:BD:02:84:3B:CC:AE:48:D9:31:97:6F:96:05:47:F2:CD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/37b99eb3-d791-33bb-9d2c-95262842fe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:51:68:e9:d0:4e:fc:9c:95:6b:99:d6:68:b1:a9:3a:fd:
         e3:eb:bd:4f:4a:09:32:d5:ad:17:e9:9f:d9:5b:d5:ae:f7:4b:
         64:32:91:31:f5:14:26:87:6c:6c:1f:56:14:50:16:d8:37:9e:
         50:7e:ea:bb:0a:c7:cd:cc:83:ee:df:88:19:8a:43:75:b8:46:
         a9:e2:c3:ac:bb:f2:4e:80:c0:01:17:38:3e:3e:8a:31:34:19:
         26:3d:3c:7d:66:e6:14:7e:64:c3:32:61:4e:55:bb:80:2b:75:
         7b:2c:4f:10:a1:58:0e:c6:c2:7b:01:eb:36:df:3a:b0:8c:2e:
         d5:b7:83:4d:b9:b0:2e:71:9d:a5:20:11:fc:fb:f9:0d:49:ef:
         23:55:68:8a:b5:90:24:e7:b4:56:a0:41:60:7a:f6:02:9a:b1:
         44:51:4f:7e:e2:fb:33:bd:39:9b:eb:27:cc:94:44:10:ae:92:
         ae:d1:9c:82:5b:04:3e:eb:dd:79:08:41:86:84:66:29:27:d8:
         1e:bd:bc:9c:7f:de:87:b9:15:d1:09:6a:d8:99:a7:ba:7f:53:
         50:98:0d:94:01:d0:52:9d:72:1e:b0:0e:04:8b:82:3e:ea:2e:
         df:8e:d8:f8:4b:3d:cd:52:c7:d0:05:70:89:36:7c:dc:f3:81:
         c4:79:63:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz+ZtOfAtssONJyCeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDIyNjE4MTcwOFoXDTI2MDUyNzE3MTcwOFowLzEtMCsGA1UEAxMk
ODc2MjA1OGItZDJiZi00OWFhLWJmODEtY2VjNTQ1ZGE5Y2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisFe1zjuUI1o9AI1XHoQzqw6Y/bnaFlKSQTg
hk0zKyCc+C+JY/ut8xWRRuHyVGMejrID08OUkmsWwjovCQSuGPKJ8YVIDHuMTvIQ
u40tLkaerD8feP+LSev5USnptyyOXa4sMWzG+bkbamcyLIBJVhAKuiDRXUV4J4Zo
6Iao6pPX2NM5dM/rRb3j3Hm5R6Voq6FQTcoBFlCcSYmbciwbLb1QkVThCIlCwzlS
z3vZRZj8XdFEI2Hgxzts/6nWJ+h9fjLg5SIa8MZEnFpeDd7/hAb65/25WkGPJUFN
t/h+CIzaBjUGg6ldwDDZDMdm2/ADBu3icjjgR4FY3UZXMudivwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDT2LL0ChDvMrkjZMZdvlgVH8s3EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzdiOTllYjMtZDc5MS0z
M2JiLTlkMmMtOTUyNjI4NDJmZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+wUWjp0E78nJVrmdZosak6/ePrvU9KCTLVrRfpn9lb1a73S2QykTH1
FCaHbGwfVhRQFtg3nlB+6rsKx83Mg+7fiBmKQ3W4Rqniw6y78k6AwAEXOD4+ijE0
GSY9PH1m5hR+ZMMyYU5Vu4ArdXssTxChWA7GwnsB6zbfOrCMLtW3g025sC5xnaUg
Efz7+Q1J7yNVaIq1kCTntFagQWB69gKasURRT37i+zO9OZvrJ8yURBCukq7RnIJb
BD7r3XkIQYaEZikn2B69vJx/3oe5FdEJatiZp7p/U1CYDZQB0FKdch6wDgSLgj7q
Lt+O2PhLPc1Sx9AFcIk2fNzzgcR5Y4Y=
-----END CERTIFICATE-----
Generated at Fri Feb 27 08:12:34 2026 by rpki-client