Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d9e212c-d1f4-36b5-9395-9c741afb7987.roa
File:                     7d9e212c-d1f4-36b5-9395-9c741afb7987.roa (raw, json)
Hash identifier:          4A2VHQhA0Nln7cPfOCLy2p1h3O+i1Jwjn7qyO06UV8Y=
Subject key identifier:   A9:1E:6A:62:80:81:E5:23:C3:9E:06:3E:8E:46:D3:55:F6:D9:DF:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE5FB6374ACB670B4062C6750
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d9e212c-d1f4-36b5-9395-9c741afb7987.roa
Signing time:             Wed 20 May 2026 17:08:12 +0000
ROA not before:           Wed 20 May 2026 17:08:12 +0000
ROA not after:            Tue 18 Aug 2026 17:08:12 +0000
asID:                     834
IP address blocks:        166.1.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:fb:63:74:ac:b6:70:b4:06:2c:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 17:08:12 2026 GMT
            Not After : Aug 18 17:08:12 2026 GMT
        Subject: CN=7c329254-920d-4629-a0cb-38ec0ecc5dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:49:9e:71:3d:20:96:a0:02:0e:2e:b3:2e:
                    5f:a8:0b:fe:ba:dc:8a:64:8c:c4:1d:d8:50:8b:35:
                    40:24:78:52:37:fa:87:02:3d:9c:28:dc:f4:a7:62:
                    05:c4:9a:aa:15:06:41:28:03:dc:b3:41:fa:fa:70:
                    c7:cd:4b:4c:00:e7:a5:b5:38:f6:4a:94:23:88:8d:
                    60:e8:83:09:7d:a3:54:45:9b:79:ff:12:f0:83:c3:
                    9d:eb:75:3d:6a:e5:b5:76:6d:f4:45:33:4b:04:30:
                    37:6c:7c:4f:b2:7d:94:25:8a:6f:29:6d:11:a0:fd:
                    42:32:fd:bc:cd:29:ab:ea:0e:9d:9b:06:9d:c5:75:
                    44:b8:44:73:dd:5c:e0:01:30:71:50:7c:e9:6e:3d:
                    83:16:93:1a:26:e5:84:e4:3d:3f:ad:fe:ed:21:28:
                    c8:ad:e0:87:3e:25:92:34:ab:03:ab:d8:02:c0:6a:
                    b2:9b:5d:7e:2a:2a:da:4b:40:b4:c1:6f:f8:67:24:
                    42:97:0c:d4:4f:32:cc:91:1c:4f:15:2f:77:30:e2:
                    23:1b:1f:2c:b7:8a:e1:17:03:87:c9:80:48:af:a4:
                    80:56:f9:52:05:c3:b7:cb:47:0c:e8:dd:bb:49:98:
                    9f:40:09:80:17:13:5d:93:6c:77:79:59:50:60:57:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:6A:62:80:81:E5:23:C3:9E:06:3E:8E:46:D3:55:F6:D9:DF:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d9e212c-d1f4-36b5-9395-9c741afb7987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:f4:c1:2f:a1:68:76:e5:43:1d:bb:bc:98:9d:43:43:58:
         ed:6f:ee:67:54:28:90:9c:6c:9d:9c:df:a6:1b:d9:b0:f6:78:
         0e:0a:7c:46:6d:cb:00:39:89:53:20:44:26:03:fa:71:90:37:
         03:0f:e6:d5:23:52:d0:c0:06:7a:57:18:3e:71:79:bf:df:f0:
         bf:99:9e:2a:3d:19:9f:a9:6d:41:67:5d:bc:59:53:5b:11:ed:
         f6:89:0f:62:ad:81:84:72:1f:5c:4e:cb:02:15:42:3b:81:93:
         0a:87:8b:c3:4b:78:a1:38:35:ba:b1:b0:96:d4:74:4f:09:2a:
         e8:8b:44:f6:bf:04:71:95:49:5c:b5:96:18:13:7e:4d:14:97:
         7e:8d:cd:7b:ac:d4:d7:e9:28:89:22:c6:c8:27:3b:12:e7:3d:
         9a:f6:30:5b:8a:9c:1f:c4:44:d6:c9:d6:4c:6f:43:ea:53:38:
         9f:ca:63:a8:db:71:5d:87:ce:48:b5:6a:4a:93:50:1d:30:bd:
         81:6e:c1:c2:73:3d:31:83:9c:af:45:74:6e:e2:4f:4d:7a:ae:
         c4:9d:e2:47:94:e6:37:57:74:93:ef:c9:a6:17:b0:07:79:49:
         3c:fb:91:3a:72:6b:48:f7:ae:ae:cf:f6:55:80:b0:bf:bf:90:
         a3:ec:81:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3l+2N0rLZwtAYsZ1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyMDE3MDgxMloXDTI2MDgxODE3MDgxMlowLzEtMCsGA1UEAxMk
N2MzMjkyNTQtOTIwZC00NjI5LWEwY2ItMzhlYzBlY2M1ZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWRJnnE9IJagAg4usy5fqAv+utyKZIzEHdhQ
izVAJHhSN/qHAj2cKNz0p2IFxJqqFQZBKAPcs0H6+nDHzUtMAOeltTj2SpQjiI1g
6IMJfaNURZt5/xLwg8Od63U9auW1dm30RTNLBDA3bHxPsn2UJYpvKW0RoP1CMv28
zSmr6g6dmwadxXVEuERz3VzgATBxUHzpbj2DFpMaJuWE5D0/rf7tISjIreCHPiWS
NKsDq9gCwGqym11+KiraS0C0wW/4ZyRClwzUTzLMkRxPFS93MOIjGx8st4rhFwOH
yYBIr6SAVvlSBcO3y0cM6N27SZifQAmAFxNdk2x3eVlQYFdvYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkeamKAgeUjw54GPo5G01X22d8HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2Q5ZTIxMmMtZDFmNC0z
NmI1LTkzOTUtOWM3NDFhZmI3OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDw9MEvoWh25UMdu7yYnUNDWO1v7mdUKJCcbJ2c36Yb2bD2eA4KfEZt
ywA5iVMgRCYD+nGQNwMP5tUjUtDABnpXGD5xeb/f8L+Znio9GZ+pbUFnXbxZU1sR
7faJD2KtgYRyH1xOywIVQjuBkwqHi8NLeKE4NbqxsJbUdE8JKuiLRPa/BHGVSVy1
lhgTfk0Ul36NzXus1NfpKIkixsgnOxLnPZr2MFuKnB/ERNbJ1kxvQ+pTOJ/KY6jb
cV2Hzki1akqTUB0wvYFuwcJzPTGDnK9FdG7iT016rsSd4keU5jdXdJPvyaYXsAd5
STz7kTpya0j3rq7P9lWAsL+/kKPsgb0=
-----END CERTIFICATE-----
Generated at Wed May 20 19:50:28 2026 by rpki-client