Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68bc40b9-c729-30e9-bcd5-8778fa76e889.roa
File:                     68bc40b9-c729-30e9-bcd5-8778fa76e889.roa (raw, json)
Hash identifier:          PK7igRB1X2QWRMUz0x2VcjDG2KZ176pYoM455hT0FjI=
Subject key identifier:   57:67:E7:CB:C0:AC:21:3E:CB:CA:83:54:42:6E:72:D6:71:15:EE:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC7A1E7D771E1527398E8F700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68bc40b9-c729-30e9-bcd5-8778fa76e889.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     26643
IP address blocks:        166.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e7:d7:71:e1:52:73:98:e8:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=227b4974-9de3-46c6-a207-92ee15e6e335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:a4:0a:34:56:69:cf:a7:1a:b8:3b:74:f1:
                    6b:1b:3c:2f:38:11:80:f7:c1:9e:74:53:f7:ee:47:
                    1c:0f:69:0f:37:bb:81:53:d3:28:03:ff:3b:e4:46:
                    88:df:de:01:f3:f5:a1:74:8c:f7:d2:b5:73:ad:fd:
                    0b:bd:63:36:93:db:9e:11:86:69:d6:d0:1f:82:20:
                    d8:88:b9:e1:f5:dd:7e:51:d7:3f:f6:0d:73:fc:a5:
                    60:a1:f2:7d:f6:bf:92:43:de:8a:66:f1:cb:ed:34:
                    e0:c6:89:41:89:e6:b0:d4:d7:c9:f3:44:d1:65:80:
                    9d:35:6c:05:07:33:69:84:b0:46:88:0c:d7:31:fb:
                    6d:a4:fb:57:cc:34:00:ed:51:4f:95:84:23:bb:d9:
                    25:80:5f:50:43:11:2b:34:20:db:16:bb:36:3a:15:
                    42:2f:22:9c:f4:d2:53:46:b1:4b:d0:18:58:49:02:
                    30:dd:de:76:c9:e1:31:89:12:ec:96:8d:07:f5:b3:
                    38:ac:0f:7f:db:f0:73:96:09:ca:9b:ea:17:7e:f4:
                    d5:cc:2b:be:0a:62:74:55:7a:88:47:43:6e:9c:2d:
                    d8:43:6b:ea:b3:d0:68:ed:28:de:09:b5:42:46:9c:
                    96:7c:05:f3:28:ea:23:d6:ca:ca:71:d6:ad:d5:62:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:67:E7:CB:C0:AC:21:3E:CB:CA:83:54:42:6E:72:D6:71:15:EE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68bc40b9-c729-30e9-bcd5-8778fa76e889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:51:82:72:e4:b1:ab:e2:9e:d2:e3:bf:ad:a8:44:38:f1:
         ca:ea:4f:33:88:c5:c3:d4:bd:8c:6a:9a:94:4a:68:ed:25:d9:
         cb:14:1e:7e:d3:e2:07:fe:32:48:dc:ae:5c:5d:29:55:00:36:
         ce:9b:27:a6:cd:e7:08:98:b2:69:0e:f2:d0:ff:e5:8c:66:64:
         dc:79:9d:13:db:e8:8f:a4:55:83:9b:11:5b:fa:24:d7:b7:0b:
         cd:b8:62:89:61:3f:fc:b3:b8:15:0a:ef:a5:7c:69:30:d7:a9:
         1d:81:ff:d5:f9:b3:e1:15:bd:d9:a9:fc:ed:23:fc:08:15:d1:
         d0:70:27:64:d9:31:1b:a7:ab:d5:41:9e:9f:7e:00:dc:9f:38:
         f1:1f:11:10:51:ff:18:c5:29:12:b3:80:2c:fb:ad:9f:3a:a7:
         64:f1:78:2f:77:2e:e6:68:4f:eb:93:8f:a9:40:1a:f9:3f:0e:
         8f:b6:24:25:a3:24:e6:45:e6:dc:e7:36:b4:4f:ed:a2:20:9a:
         a3:94:93:75:95:96:b0:a0:e2:56:ea:41:40:3c:69:a8:e3:47:
         a0:aa:3a:47:58:1a:33:21:37:1a:68:ac:05:cf:68:44:f7:e5:
         7d:d5:98:da:2d:4b:5e:bf:ab:ec:69:37:dd:79:87:d9:5f:0a:
         1b:f4:26:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoefXceFSc5jo9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
MjI3YjQ5NzQtOWRlMy00NmM2LWEyMDctOTJlZTE1ZTZlMzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SGkCjRWac+nGrg7dPFrGzwvOBGA98GedFP3
7kccD2kPN7uBU9MoA/875EaI394B8/WhdIz30rVzrf0LvWM2k9ueEYZp1tAfgiDY
iLnh9d1+Udc/9g1z/KVgofJ99r+SQ96KZvHL7TTgxolBieaw1NfJ80TRZYCdNWwF
BzNphLBGiAzXMfttpPtXzDQA7VFPlYQju9klgF9QQxErNCDbFrs2OhVCLyKc9NJT
RrFL0BhYSQIw3d52yeExiRLslo0H9bM4rA9/2/BzlgnKm+oXfvTVzCu+CmJ0VXqI
R0NunC3YQ2vqs9Bo7SjeCbVCRpyWfAXzKOoj1srKcdat1WINRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdn58vArCE+y8qDVEJuctZxFe6NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjhiYzQwYjktYzcyOS0z
MGU5LWJjZDUtODc3OGZhNzZlODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHGUYJy5LGr4p7S47+tqEQ48crqTzOIxcPUvYxqmpRKaO0l2csUHn7T
4gf+MkjcrlxdKVUANs6bJ6bN5wiYsmkO8tD/5YxmZNx5nRPb6I+kVYObEVv6JNe3
C824YolhP/yzuBUK76V8aTDXqR2B/9X5s+EVvdmp/O0j/AgV0dBwJ2TZMRunq9VB
np9+ANyfOPEfERBR/xjFKRKzgCz7rZ86p2TxeC93LuZoT+uTj6lAGvk/Do+2JCWj
JOZF5tznNrRP7aIgmqOUk3WVlrCg4lbqQUA8aajjR6CqOkdYGjMhNxporAXPaET3
5X3VmNotS16/q+xpN915h9lfChv0JnU=
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:40:12 2026 by rpki-client