Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70676c8a-3fb7-332e-9c6a-b3585418813a.roa
File:                     70676c8a-3fb7-332e-9c6a-b3585418813a.roa (raw, json)
Hash identifier:          NRI9oiTuKesOfkYXqCOxm8fygNT068wgAS+CXUZLRZw=
Subject key identifier:   FD:67:49:E3:6A:BE:88:53:4E:BE:C1:1D:AA:B6:58:0F:44:49:4E:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DF4DB8BFF2DEB79CB803E6980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70676c8a-3fb7-332e-9c6a-b3585418813a.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     5511
IP address blocks:        166.0.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:8b:ff:2d:eb:79:cb:80:3e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=e7ed821e-9d6b-42d2-9b0d-5c471be40a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:09:74:4c:c4:80:b9:d5:bb:3e:9d:76:97:
                    79:9a:2b:95:e4:8a:e1:e2:c9:56:c6:2c:52:c9:01:
                    d8:aa:0f:e3:b4:9a:3d:7f:d2:d5:7c:f8:b3:44:1c:
                    2b:ce:66:92:e2:96:23:1c:52:e4:ca:5b:fa:66:99:
                    91:c4:f7:5c:3c:01:9c:e8:4a:55:e0:80:df:da:cb:
                    ee:5f:5a:69:2f:8c:ea:38:35:9f:c8:1e:e7:98:90:
                    05:cd:b1:f2:1b:77:c6:53:47:48:46:2f:49:4c:d0:
                    d4:44:3c:35:74:de:46:ea:88:7a:92:bb:d7:c4:aa:
                    d4:d7:e0:2e:61:db:70:e2:60:3a:6d:b9:34:8e:54:
                    df:6d:40:96:9b:48:22:4c:df:b3:31:e7:48:82:4d:
                    64:a9:65:d7:3e:a5:ce:0c:52:b0:8d:df:cd:95:36:
                    97:15:98:2a:33:a2:6e:0d:76:0b:2e:c6:a2:72:77:
                    1c:aa:5a:3c:85:83:3c:69:60:3e:08:e3:15:7e:80:
                    63:98:70:47:67:49:df:3b:b3:44:a3:6b:9e:3a:b2:
                    48:24:16:f2:f6:e4:5c:73:7a:4f:7f:a9:16:2a:27:
                    87:f9:65:b8:49:ad:5a:63:1e:09:d5:bf:28:a9:fc:
                    1d:10:4f:e3:18:72:94:e0:ab:a5:f0:d5:3d:9c:78:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:67:49:E3:6A:BE:88:53:4E:BE:C1:1D:AA:B6:58:0F:44:49:4E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70676c8a-3fb7-332e-9c6a-b3585418813a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:95:a5:87:26:b3:36:ff:bd:fe:66:7a:41:c3:e2:30:1c:ad:
         64:de:2e:69:99:8c:65:f3:83:86:b8:09:fe:38:ee:00:64:ac:
         8f:f8:ec:31:e7:7f:a6:80:13:d0:ef:7f:94:34:d3:c3:65:d3:
         25:ce:97:ec:99:42:f4:4b:81:02:4c:a7:74:8e:09:10:5c:a5:
         23:82:1d:b5:03:cc:cf:ff:41:91:10:e4:3d:c5:8d:16:61:cf:
         00:c3:40:b9:c0:a6:99:f9:20:94:e3:ad:cc:b3:ab:28:c9:48:
         59:18:7d:f8:f2:2a:ff:ad:98:a5:83:26:ae:17:76:ea:91:f0:
         5c:a8:aa:b1:9e:ce:92:1f:fa:ef:b4:bb:74:06:e7:6d:a6:b8:
         30:66:e3:93:d1:37:c8:cd:48:36:92:d6:49:48:7b:1d:69:66:
         47:45:bc:0e:b0:3d:78:ea:46:b4:65:a9:76:f1:82:28:39:54:
         ba:b6:a6:04:2c:ba:01:7f:68:55:ab:97:49:2f:9d:0b:b8:9e:
         8f:eb:8b:72:8a:e5:31:1e:e4:b5:5a:a3:6f:e4:f1:f1:f6:a4:
         3d:5f:3d:0d:90:5a:77:f4:85:d5:3f:41:d1:7e:18:5e:ab:1e:
         4d:db:a3:7a:47:46:8c:b1:a4:36:08:33:1c:3a:79:c0:e2:90:
         5c:7f:51:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024v/Let5y4A+aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZTdlZDgyMWUtOWQ2Yi00MmQyLTliMGQtNWM0NzFiZTQwYTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIwJdEzEgLnVuz6ddpd5miuV5Irh4slWxixS
yQHYqg/jtJo9f9LVfPizRBwrzmaS4pYjHFLkylv6ZpmRxPdcPAGc6EpV4IDf2svu
X1ppL4zqODWfyB7nmJAFzbHyG3fGU0dIRi9JTNDURDw1dN5G6oh6krvXxKrU1+Au
Ydtw4mA6bbk0jlTfbUCWm0giTN+zMedIgk1kqWXXPqXODFKwjd/NlTaXFZgqM6Ju
DXYLLsaicnccqlo8hYM8aWA+COMVfoBjmHBHZ0nfO7NEo2ueOrJIJBby9uRcc3pP
f6kWKieH+WW4Sa1aYx4J1b8oqfwdEE/jGHKU4Kul8NU9nHjRAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1nSeNqvohTTr7BHaq2WA9ESU44MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzA2NzZjOGEtM2ZiNy0z
MzJlLTljNmEtYjM1ODU0MTg4MTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqVpYcmszb/vf5mekHD4jAcrWTeLmmZjGXzg4a4Cf447gBkrI/47DHn
f6aAE9Dvf5Q008Nl0yXOl+yZQvRLgQJMp3SOCRBcpSOCHbUDzM//QZEQ5D3FjRZh
zwDDQLnAppn5IJTjrcyzqyjJSFkYffjyKv+tmKWDJq4XduqR8FyoqrGezpIf+u+0
u3QG522muDBm45PRN8jNSDaS1klIex1pZkdFvA6wPXjqRrRlqXbxgig5VLq2pgQs
ugF/aFWrl0kvnQu4no/ri3KK5TEe5LVao2/k8fH2pD1fPQ2QWnf0hdU/QdF+GF6r
Hk3bo3pHRoyxpDYIMxw6ecDikFx/UTc=
-----END CERTIFICATE-----
Generated at Thu Jun 11 12:14:15 2026 by rpki-client