Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/39e3bc56-1be2-3125-aeda-0eb7ed234067.roa
File:                     39e3bc56-1be2-3125-aeda-0eb7ed234067.roa (raw, json)
Hash identifier:          r2B9cT6+Bbg29Q13kRfd1lNWyQiOGRBU0QZAEBLfbvo=
Subject key identifier:   7C:2C:D1:C0:C5:6C:18:97:D2:C9:FB:6B:A0:70:F9:2D:C1:4A:EC:2B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D24E10B00F32FEE840F09AE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/39e3bc56-1be2-3125-aeda-0eb7ed234067.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     58061
IP address blocks:        166.1.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0b:00:f3:2f:ee:84:0f:09:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=18475f16-b0f3-4045-b3ef-280d8cf9ba95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:c6:f8:84:fa:23:04:fe:14:27:3a:c8:a8:
                    af:32:a7:f3:0c:d6:6b:b9:81:e4:b8:55:ca:30:74:
                    90:23:bf:05:9f:7e:d8:5a:03:e2:58:c3:ee:99:03:
                    38:fb:56:c3:d7:df:14:c1:bb:6f:e2:31:1a:dc:e7:
                    72:93:03:e4:3b:22:67:26:d9:16:06:d1:c3:59:15:
                    8d:94:1a:e6:56:0e:2a:17:1b:78:8a:f2:d1:04:9a:
                    55:c4:04:3d:c1:53:33:06:63:bb:3f:83:d8:3e:8a:
                    24:ed:8c:2b:66:b3:9c:10:55:46:98:26:b5:2b:7e:
                    45:07:66:71:ce:83:ee:e9:96:d8:27:26:ba:d4:b6:
                    c7:9b:aa:fd:dc:0d:f9:26:eb:7b:3e:3e:e0:43:b5:
                    d4:d0:44:55:e8:42:c6:00:70:55:b3:e9:1d:9a:8a:
                    e6:40:62:58:98:ce:49:7a:76:b7:27:db:8b:71:27:
                    04:0c:e6:0e:9e:93:38:72:9f:24:0b:9b:de:cc:bf:
                    ab:7c:5e:5c:69:e4:94:9d:4e:85:5a:e9:01:5f:cd:
                    7c:a1:85:00:2c:ea:3f:65:a0:c5:d5:b3:cc:8c:1e:
                    1c:23:56:48:bb:9d:13:95:44:dc:15:62:76:8d:51:
                    58:f2:ba:db:97:a3:1d:1c:9b:e7:79:5a:05:89:8d:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:D1:C0:C5:6C:18:97:D2:C9:FB:6B:A0:70:F9:2D:C1:4A:EC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/39e3bc56-1be2-3125-aeda-0eb7ed234067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:fe:fb:72:58:18:cd:9c:44:58:77:e3:78:55:8e:c8:b2:
         5a:c1:5c:74:b2:6a:28:4e:c6:d5:78:06:97:6f:b4:8b:35:40:
         c1:05:59:ff:ef:fb:ee:b0:d6:d7:82:d8:88:6a:b6:93:9a:0a:
         34:94:61:ac:49:aa:0a:b6:da:b4:eb:49:e1:04:57:0f:e6:5b:
         d4:2d:f5:bb:3c:28:51:17:4b:a7:0d:01:ef:ae:44:e2:51:4f:
         c4:28:97:a5:a0:2d:21:fc:7f:0d:f1:68:84:35:0e:5b:13:04:
         48:60:23:c1:43:a1:4b:b0:c5:44:98:51:3f:81:65:ed:91:bc:
         44:85:bc:6f:00:0e:2e:2f:46:8c:e6:cf:64:88:fe:16:64:52:
         4e:6a:c9:d5:5e:5e:cf:b2:8e:37:59:8c:b7:c0:ca:1c:c5:5a:
         6f:25:da:38:02:8f:9c:23:40:da:70:41:88:11:30:24:c5:5e:
         7f:0c:3c:b1:03:ea:70:6b:58:d2:a5:35:53:cc:de:a5:2d:12:
         4c:36:65:a8:f1:15:1e:c1:9a:45:86:cb:3d:11:4a:f3:9d:bc:
         7d:c6:eb:90:78:e8:0e:77:30:17:94:de:96:95:29:71:c9:fd:
         ac:b1:7b:7e:f7:15:6f:28:07:ea:24:1b:3e:fe:79:47:5f:45:
         17:0b:32:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QsA8y/uhA8JrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MTg0NzVmMTYtYjBmMy00MDQ1LWIzZWYtMjgwZDhjZjliYTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RzG+IT6IwT+FCc6yKivMqfzDNZruYHkuFXK
MHSQI78Fn37YWgPiWMPumQM4+1bD198Uwbtv4jEa3OdykwPkOyJnJtkWBtHDWRWN
lBrmVg4qFxt4ivLRBJpVxAQ9wVMzBmO7P4PYPook7YwrZrOcEFVGmCa1K35FB2Zx
zoPu6ZbYJya61LbHm6r93A35Jut7Pj7gQ7XU0ERV6ELGAHBVs+kdmormQGJYmM5J
ena3J9uLcScEDOYOnpM4cp8kC5vezL+rfF5caeSUnU6FWukBX818oYUALOo/ZaDF
1bPMjB4cI1ZIu50TlUTcFWJ2jVFY8rrbl6MdHJvneVoFiY1qXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHws0cDFbBiX0sn7a6Bw+S3BSuwrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzllM2JjNTYtMWJlMi0z
MTI1LWFlZGEtMGViN2VkMjM0MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqt/vtyWBjNnERYd+N4VY7IslrBXHSyaihOxtV4BpdvtIs1QMEFWf/v
++6w1teC2IhqtpOaCjSUYaxJqgq22rTrSeEEVw/mW9Qt9bs8KFEXS6cNAe+uROJR
T8Qol6WgLSH8fw3xaIQ1DlsTBEhgI8FDoUuwxUSYUT+BZe2RvESFvG8ADi4vRozm
z2SI/hZkUk5qydVeXs+yjjdZjLfAyhzFWm8l2jgCj5wjQNpwQYgRMCTFXn8MPLED
6nBrWNKlNVPM3qUtEkw2ZajxFR7BmkWGyz0RSvOdvH3G65B46A53MBeU3paVKXHJ
/ayxe373FW8oB+okGz7+eUdfRRcLMhk=
-----END CERTIFICATE-----
Generated at Tue Mar 17 00:42:22 2026 by rpki-client