Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa
File:                     81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa (raw, json)
Hash identifier:          ORftKlTUqBrVEm3ArRIqP2RTvdgCq74m9cuQSpae1i8=
Subject key identifier:   25:E4:1F:F4:59:B4:6A:81:22:00:2E:82:BC:16:7A:74:0F:EB:61:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BB45D418D975781F486DC519A
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     49770
IP address blocks:        166.0.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:41:8d:97:57:81:f4:86:dc:51:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=8aa5d081-4598-4724-901f-dc962c8338f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:25:a6:c3:89:a5:ac:a9:b9:fa:4f:c3:03:
                    c0:70:d5:bd:07:74:e4:1f:3d:45:32:8e:20:da:3c:
                    16:c0:85:37:55:7f:35:c3:d1:71:3a:c2:bb:bc:db:
                    b4:96:6d:11:61:df:27:f8:79:94:85:c7:62:cf:11:
                    74:c0:0b:8d:dc:18:91:54:6a:dc:64:1c:91:be:5e:
                    91:dd:05:21:51:fd:ad:34:dd:03:a4:15:c2:80:b3:
                    c8:e7:85:d6:ce:9a:17:6c:67:c0:c3:df:6c:3d:e7:
                    1f:c8:c8:6e:8b:a5:3c:a4:88:52:c4:76:51:29:c5:
                    95:58:4a:3d:14:52:42:7f:c4:90:63:8f:cf:34:88:
                    a7:3d:f8:b3:25:ab:86:d1:f5:04:61:92:b4:08:25:
                    b0:99:d3:6b:ff:e6:2f:11:30:64:ca:29:b8:c5:4b:
                    78:24:ff:11:df:c2:90:db:ff:41:4d:f8:f9:20:b3:
                    fb:f9:ec:ac:ff:4d:8b:c5:24:19:be:35:d6:27:6b:
                    b5:bb:2f:c6:96:72:b4:c5:00:52:03:39:8d:74:4d:
                    2c:1a:7b:3c:29:8a:a9:0b:91:8c:07:d8:66:b1:b8:
                    97:00:ad:6f:1b:53:7a:a5:33:1d:fc:87:9c:ce:7d:
                    55:de:da:9d:ed:0c:9e:45:4d:c6:6c:9a:6c:e5:46:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:1F:F4:59:B4:6A:81:22:00:2E:82:BC:16:7A:74:0F:EB:61:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c21dc4-ce2d-3956-9cd5-ad31c00e32e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:11:f1:60:21:a6:3d:36:07:8a:97:e7:ab:77:74:0a:55:
         45:cb:fe:b8:6d:86:63:e8:6e:9b:d7:35:22:cb:22:92:dd:77:
         a9:b8:6b:ae:33:e6:be:94:3c:be:2e:d6:80:28:bf:b7:99:0f:
         8e:47:cf:2a:75:68:97:ec:45:16:aa:b2:8a:50:95:f5:f0:89:
         e7:c3:b6:66:38:c9:48:82:3b:1a:4d:1c:49:62:00:10:65:98:
         94:9c:f0:7e:4a:79:94:48:91:c7:a0:fe:44:d3:22:de:7a:ed:
         4f:4e:bc:f6:2c:f3:2a:6b:47:1a:6d:a7:86:b5:41:10:cc:9a:
         18:cb:20:9b:39:78:9e:21:7c:11:f2:7b:5f:3c:11:46:00:6d:
         47:8a:c1:2a:8d:62:fd:75:98:51:b9:94:d9:5d:38:00:05:cd:
         15:16:6d:e4:b1:d3:a8:76:ef:29:0a:09:97:2b:e4:12:78:5b:
         9c:80:40:ba:4b:fd:ce:01:c0:29:84:20:90:08:fd:68:ce:d6:
         47:eb:bc:26:64:56:b5:81:d7:3f:fc:b7:d8:38:7d:04:93:e1:
         69:d3:14:7b:21:37:2a:11:99:43:2e:3a:a3:76:a0:04:53:04:
         5d:cd:fb:1a:ab:a6:df:bb:c1:7a:9b:9a:62:48:aa:1d:8e:43:
         15:a0:79:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUGNl1eB9IbcUZowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
OGFhNWQwODEtNDU5OC00NzI0LTkwMWYtZGM5NjJjODMzOGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytwlpsOJpaypufpPwwPAcNW9B3TkHz1FMo4g
2jwWwIU3VX81w9FxOsK7vNu0lm0RYd8n+HmUhcdizxF0wAuN3BiRVGrcZByRvl6R
3QUhUf2tNN0DpBXCgLPI54XWzpoXbGfAw99sPecfyMhui6U8pIhSxHZRKcWVWEo9
FFJCf8SQY4/PNIinPfizJauG0fUEYZK0CCWwmdNr/+YvETBkyim4xUt4JP8R38KQ
2/9BTfj5ILP7+eys/02LxSQZvjXWJ2u1uy/GlnK0xQBSAzmNdE0sGns8KYqpC5GM
B9hmsbiXAK1vG1N6pTMd/Ieczn1V3tqd7QyeRU3GbJps5UYvAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXkH/RZtGqBIgAugrwWenQP62F9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODFjMjFkYzQtY2UyZC0z
OTU2LTljZDUtYWQzMWMwMGUzMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqmEfFgIaY9NgeKl+erd3QKVUXL/rhthmPobpvXNSLLIpLdd6m4a64z
5r6UPL4u1oAov7eZD45Hzyp1aJfsRRaqsopQlfXwiefDtmY4yUiCOxpNHEliABBl
mJSc8H5KeZRIkceg/kTTIt567U9OvPYs8yprRxptp4a1QRDMmhjLIJs5eJ4hfBHy
e188EUYAbUeKwSqNYv11mFG5lNldOAAFzRUWbeSx06h27ykKCZcr5BJ4W5yAQLpL
/c4BwCmEIJAI/WjO1kfrvCZkVrWB1z/8t9g4fQST4WnTFHshNyoRmUMuOqN2oART
BF3N+xqrpt+7wXqbmmJIqh2OQxWgedA=
-----END CERTIFICATE-----
Generated at Sun Nov 2 16:47:34 2025 by rpki-client