Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64e2b04c-6bb9-3807-872f-69413f643a5e.roa
File:                     64e2b04c-6bb9-3807-872f-69413f643a5e.roa (raw, json)
Hash identifier:          WRur2tH/L1VCVdDJ4vD2KUv8AtKHak7DF5CHLRsCUhg=
Subject key identifier:   84:C9:8D:98:CA:8E:5B:87:66:FF:AC:26:8D:8B:00:3F:4B:68:F7:C1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F5C3295573B66F06F7580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64e2b04c-6bb9-3807-872f-69413f643a5e.roa
Signing time:             Wed 18 Mar 2026 19:59:36 +0000
ROA not before:           Wed 18 Mar 2026 19:59:36 +0000
ROA not after:            Tue 16 Jun 2026 19:59:36 +0000
asID:                     401152
IP address blocks:        166.0.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:5c:32:95:57:3b:66:f0:6f:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:36 2026 GMT
            Not After : Jun 16 19:59:36 2026 GMT
        Subject: CN=03cfce2d-8e5a-4f74-a576-9111a2c0625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:fe:cb:96:61:3f:4c:77:de:6c:c5:a4:cb:
                    d3:92:20:0c:80:b6:b5:30:ea:24:54:c2:b9:64:71:
                    53:b4:d7:2c:4c:7f:9a:e1:30:98:70:f1:51:30:87:
                    3a:75:b0:17:c6:f1:1a:ba:3f:96:44:a0:ee:20:24:
                    03:b8:84:a4:29:90:49:17:c3:09:23:9e:75:65:7d:
                    4b:da:f8:bc:33:bf:78:8c:71:c5:ea:2d:ce:4f:8c:
                    c9:a7:69:a1:27:ad:c3:e7:17:16:55:9f:3c:f6:38:
                    02:0c:6b:7d:5d:26:73:b1:db:9e:89:fa:24:07:50:
                    2e:ba:a5:ec:93:c4:6c:be:3a:3b:2a:99:19:e3:4f:
                    a5:1a:c4:b2:f1:1e:4b:76:c8:74:11:8d:c0:43:13:
                    d7:e4:51:8f:1b:2b:75:65:f6:ea:f5:c8:71:70:9e:
                    a6:23:0f:4f:4e:ab:44:cb:e8:4f:02:a6:80:dd:1c:
                    78:f7:52:19:88:a3:e7:fc:3e:f9:5d:52:c0:b7:be:
                    61:be:76:6a:87:ef:c2:e7:ec:bd:11:fd:5a:b5:c3:
                    11:34:7e:31:e3:a6:07:e0:1d:dd:21:0a:b6:26:b6:
                    77:98:92:36:b8:74:7d:f6:a6:c6:68:e9:7f:ae:1f:
                    3b:65:a2:2c:3e:7e:f5:90:30:38:1e:47:9b:7c:ab:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C9:8D:98:CA:8E:5B:87:66:FF:AC:26:8D:8B:00:3F:4B:68:F7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64e2b04c-6bb9-3807-872f-69413f643a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:05:d9:eb:88:1e:41:50:28:6c:b3:d3:cc:a2:f0:01:eb:82:
         07:17:18:56:ad:0c:a6:4a:37:13:df:8d:55:aa:ca:da:7d:08:
         e9:b4:ff:07:db:66:3d:c9:8a:aa:5d:10:5a:7b:e5:b2:c7:25:
         4d:6f:0a:3a:a7:ae:1b:b5:89:57:f2:b7:9f:d9:a9:da:6d:2c:
         39:ac:fc:f2:90:d7:6e:33:0b:0a:01:c4:c7:05:d4:6b:93:07:
         83:f6:33:35:14:63:41:63:21:62:48:1d:f0:0e:d3:0e:72:29:
         7c:32:93:e6:0d:e1:86:9b:55:bb:3f:19:09:61:af:32:94:21:
         2d:de:22:8e:5c:90:af:5c:c8:48:11:9b:d9:6d:04:a8:29:20:
         11:c5:42:d0:b6:01:3c:43:54:ca:2d:5b:e4:1d:c9:fa:ae:9e:
         e6:a5:48:9a:7c:b9:83:7e:d5:e0:89:01:fb:8a:53:9d:f6:f9:
         aa:f2:a7:af:89:2f:40:8e:45:0a:57:1d:06:b4:32:74:bf:44:
         57:8c:db:89:f4:db:55:be:0d:ff:d2:c2:55:a8:de:a5:27:b4:
         ba:d4:ce:4e:2c:65:07:ed:20:47:43:be:52:ed:82:3c:2c:1d:
         50:53:0b:1c:ec:0c:cf:64:ee:6f:31:93:e4:e3:31:e8:86:4e:
         ff:9a:42:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1wylVc7ZvBvdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxODE5NTkzNloXDTI2MDYxNjE5NTkzNlowLzEtMCsGA1UEAxMk
MDNjZmNlMmQtOGU1YS00Zjc0LWE1NzYtOTExMWEyYzA2MjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdT+y5ZhP0x33mzFpMvTkiAMgLa1MOokVMK5
ZHFTtNcsTH+a4TCYcPFRMIc6dbAXxvEauj+WRKDuICQDuISkKZBJF8MJI551ZX1L
2vi8M794jHHF6i3OT4zJp2mhJ63D5xcWVZ889jgCDGt9XSZzsdueifokB1AuuqXs
k8Rsvjo7KpkZ40+lGsSy8R5Ldsh0EY3AQxPX5FGPGyt1Zfbq9chxcJ6mIw9PTqtE
y+hPAqaA3Rx491IZiKPn/D75XVLAt75hvnZqh+/C5+y9Ef1atcMRNH4x46YH4B3d
IQq2JrZ3mJI2uHR99qbGaOl/rh87ZaIsPn71kDA4HkebfKvj5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITJjZjKjluHZv+sJo2LAD9LaPfBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjRlMmIwNGMtNmJiOS0z
ODA3LTg3MmYtNjk0MTNmNjQzYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0F2euIHkFQKGyz08yi8AHrggcXGFatDKZKNxPfjVWqytp9COm0/wfb
Zj3JiqpdEFp75bLHJU1vCjqnrhu1iVfyt5/ZqdptLDms/PKQ124zCwoBxMcF1GuT
B4P2MzUUY0FjIWJIHfAO0w5yKXwyk+YN4YabVbs/GQlhrzKUIS3eIo5ckK9cyEgR
m9ltBKgpIBHFQtC2ATxDVMotW+QdyfqunualSJp8uYN+1eCJAfuKU532+aryp6+J
L0CORQpXHQa0MnS/RFeM24n021W+Df/SwlWo3qUntLrUzk4sZQftIEdDvlLtgjws
HVBTCxzsDM9k7m8xk+TjMeiGTv+aQmU=
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:52:57 2026 by rpki-client