Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e523311-2811-33ce-8cb8-865b360a678f.roa
File:                     5e523311-2811-33ce-8cb8-865b360a678f.roa (raw, json)
Hash identifier:          /r4cikqT311P2CLuJ7QWAYdib+ThOvA2z919djBWWiU=
Subject key identifier:   E6:4C:6E:55:5C:0F:2D:C5:4A:89:7F:17:4B:82:7B:5F:EE:BB:CC:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461DB346601C7CD3F1A2B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e523311-2811-33ce-8cb8-865b360a678f.roa
Signing time:             Mon 23 Mar 2026 19:53:43 +0000
ROA not before:           Mon 23 Mar 2026 19:53:43 +0000
ROA not after:            Sun 21 Jun 2026 19:53:43 +0000
asID:                     11798
IP address blocks:        166.0.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:db:34:66:01:c7:cd:3f:1a:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:43 2026 GMT
            Not After : Jun 21 19:53:43 2026 GMT
        Subject: CN=bafdd815-68ea-4614-86d8-cbce76299bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f7:19:7f:fd:ac:ee:37:c7:04:82:93:47:60:
                    21:54:2f:91:50:20:50:35:89:36:e6:cd:42:dc:b7:
                    0d:7b:d4:62:b6:c9:4a:3a:24:f1:1a:c8:9a:ee:65:
                    29:90:f8:c0:cc:3e:f1:cb:e9:c5:90:7e:0d:52:eb:
                    fa:55:5f:0f:aa:8a:70:a5:99:49:0d:72:bd:86:e3:
                    3d:00:25:70:8c:43:0f:59:5d:96:2b:96:d2:4a:d7:
                    ac:d5:53:a0:69:1a:c8:26:6d:d4:10:6a:6b:8c:15:
                    9e:dd:53:54:3c:9b:b5:5f:81:79:da:d2:36:cd:60:
                    5b:94:47:55:92:e5:79:3e:7a:b7:83:c6:d1:c1:72:
                    d1:89:89:d0:8b:c6:b9:01:08:c4:bc:92:94:1b:ad:
                    b0:56:03:2f:30:84:48:e3:65:4b:d1:5c:e4:83:e7:
                    62:77:56:24:e2:81:4a:dd:c1:a1:7b:68:55:b9:b7:
                    e3:e1:95:b1:4a:de:19:0e:c1:9a:83:e9:90:9a:47:
                    02:a2:17:f3:77:c5:5c:71:27:f5:c9:75:18:1f:8b:
                    79:be:b1:14:f8:bb:76:df:45:9c:77:45:9b:58:1f:
                    14:69:ff:d5:2e:e7:f1:f1:54:4a:ca:3d:c3:64:05:
                    f1:f7:86:2b:fa:50:cc:39:75:18:3f:12:47:34:b2:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4C:6E:55:5C:0F:2D:C5:4A:89:7F:17:4B:82:7B:5F:EE:BB:CC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e523311-2811-33ce-8cb8-865b360a678f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:85:ad:7f:9e:c1:9b:df:7d:d7:4c:03:68:6b:e7:a8:e0:49:
         c2:18:6d:1d:7a:ee:2f:40:da:f2:12:96:3c:e6:cf:4c:20:a3:
         01:16:12:cc:17:c7:cc:2d:95:c9:f8:34:dc:24:ce:1c:5e:74:
         1e:6a:41:a6:13:55:72:75:50:81:5c:36:dd:7f:89:aa:b2:14:
         de:2f:4c:a7:25:ff:0f:01:c2:2b:24:3a:01:c0:54:b6:4e:77:
         80:dd:53:5e:b8:98:21:f4:9f:a1:b8:be:75:2f:0d:23:4d:c3:
         56:57:83:15:58:f2:dd:15:e9:b3:26:1d:03:13:fb:de:10:93:
         03:45:e8:86:ca:af:83:d4:2a:5e:b3:92:50:80:18:92:c6:d7:
         00:63:59:36:06:f0:10:ad:4b:16:2d:5b:aa:e2:08:2b:d7:13:
         f1:1b:85:49:54:62:2d:83:dd:b1:39:41:2a:b8:a9:d1:9c:63:
         44:48:4c:48:31:fa:9a:41:f9:6e:cd:14:ae:22:a3:f2:f6:71:
         7c:f8:1b:12:a9:42:50:0a:4c:3c:ee:32:d0:be:1f:e3:e6:9f:
         13:50:44:82:c4:b1:fc:24:7d:7c:2c:6e:1d:d2:6f:dc:e4:7a:
         87:1c:9d:94:ef:bf:9d:6d:9d:9d:1f:67:1a:bc:c8:fa:7f:cc:
         2e:44:8b:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYds0ZgHHzT8aK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyMzE5NTM0M1oXDTI2MDYyMTE5NTM0M1owLzEtMCsGA1UEAxMk
YmFmZGQ4MTUtNjhlYS00NjE0LTg2ZDgtY2JjZTc2Mjk5YmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/cZf/2s7jfHBIKTR2AhVC+RUCBQNYk25s1C
3LcNe9RitslKOiTxGsia7mUpkPjAzD7xy+nFkH4NUuv6VV8PqopwpZlJDXK9huM9
ACVwjEMPWV2WK5bSStes1VOgaRrIJm3UEGprjBWe3VNUPJu1X4F52tI2zWBblEdV
kuV5Pnq3g8bRwXLRiYnQi8a5AQjEvJKUG62wVgMvMIRI42VL0Vzkg+did1Yk4oFK
3cGhe2hVubfj4ZWxSt4ZDsGag+mQmkcCohfzd8VccSf1yXUYH4t5vrEU+Lt230Wc
d0WbWB8Uaf/VLufx8VRKyj3DZAXx94Yr+lDMOXUYPxJHNLLBhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZMblVcDy3FSol/F0uCe1/uu8z2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWU1MjMzMTEtMjgxMS0z
M2NlLThjYjgtODY1YjM2MGE2NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABeFrX+ewZvffddMA2hr56jgScIYbR167i9A2vISljzmz0wgowEWEswX
x8wtlcn4NNwkzhxedB5qQaYTVXJ1UIFcNt1/iaqyFN4vTKcl/w8BwiskOgHAVLZO
d4DdU164mCH0n6G4vnUvDSNNw1ZXgxVY8t0V6bMmHQMT+94QkwNF6IbKr4PUKl6z
klCAGJLG1wBjWTYG8BCtSxYtW6riCCvXE/EbhUlUYi2D3bE5QSq4qdGcY0RITEgx
+ppB+W7NFK4io/L2cXz4GxKpQlAKTDzuMtC+H+PmnxNQRILEsfwkfXwsbh3Sb9zk
eoccnZTvv51tnZ0fZxq8yPp/zC5EixM=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:50 2026 by rpki-client