Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5a169ca-aa10-39f1-96c2-fe46f77dc31c.roa
File:                     a5a169ca-aa10-39f1-96c2-fe46f77dc31c.roa (raw, json)
Hash identifier:          8LLshjhyTpg5IMskS05qmoeWteUCgS9YR+sHorGUIJw=
Subject key identifier:   98:39:CD:92:C2:0D:6D:71:96:19:EF:7A:94:99:58:00:CB:88:20:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F166FCF582E97C7324B481800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5a169ca-aa10-39f1-96c2-fe46f77dc31c.roa
Signing time:             Sun 06 Sep 2026 18:28:31 +0000
ROA not before:           Sun 06 Sep 2026 18:28:31 +0000
ROA not after:            Sat 05 Dec 2026 19:28:31 +0000
asID:                     401152
IP address blocks:        166.1.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:16:6f:cf:58:2e:97:c7:32:4b:48:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 18:28:31 2026 GMT
            Not After : Dec  5 19:28:31 2026 GMT
        Subject: CN=3684eb47-a4e2-49c0-ad25-7a94288ae6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:a3:e9:19:22:92:ca:b7:e3:0a:ce:b7:d9:
                    09:42:23:8f:cd:d6:db:ed:60:91:e2:7d:e0:cd:ce:
                    3e:2d:f4:d5:f1:0c:93:2a:24:96:d8:03:45:73:35:
                    0f:26:4b:99:fe:f1:b8:34:ea:78:88:82:78:f3:4b:
                    d9:af:00:16:45:9a:29:b5:ce:2a:e3:28:49:41:8a:
                    c6:f0:05:f8:9e:ad:93:85:b6:5c:cc:e0:14:7b:b1:
                    5d:0b:61:82:2a:a7:cc:b2:49:1e:2e:46:2f:9c:2b:
                    b7:68:81:6d:c5:79:0c:30:69:bd:b0:05:2e:38:5e:
                    c0:5c:8d:59:97:da:87:76:d2:70:1f:02:7f:cd:6a:
                    c4:16:49:36:69:06:eb:f7:80:1e:41:36:60:dc:b6:
                    ca:34:77:ed:1b:5c:c9:c9:5b:a9:22:88:82:c6:8e:
                    37:10:ed:80:35:0b:53:f8:9d:0d:15:bb:9c:df:de:
                    58:1c:1a:d7:b7:e9:18:11:a0:60:b8:62:aa:c3:7f:
                    f2:b2:61:f5:4a:7c:bf:4a:1e:e1:f0:d5:23:19:5e:
                    a2:a7:cd:fc:5d:44:0e:7c:99:72:55:79:bc:65:1f:
                    6e:81:45:90:44:3b:a9:ea:9f:31:9b:9a:cf:d1:3d:
                    00:8c:60:c2:53:a0:86:90:3f:ef:98:ba:d9:cb:df:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:CD:92:C2:0D:6D:71:96:19:EF:7A:94:99:58:00:CB:88:20:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5a169ca-aa10-39f1-96c2-fe46f77dc31c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:e6:85:63:aa:be:a3:eb:55:4a:47:bb:d3:6d:51:55:68:
         66:5d:61:5b:a5:14:74:83:6f:f3:75:28:52:c2:3d:a8:d4:3b:
         81:f7:ea:9d:a5:81:bb:9d:a4:27:c6:91:88:a2:77:26:53:fb:
         47:e3:34:91:33:57:de:19:f3:9f:96:de:6e:e0:48:46:be:6b:
         fd:b2:56:ed:52:ff:bb:ea:f0:5c:82:ff:ba:f2:ff:36:77:91:
         b6:c6:98:2e:fa:09:1c:10:4b:10:77:ea:8a:8c:7e:a1:31:4b:
         48:02:d0:fe:3f:63:7b:34:7b:32:3b:6a:64:9a:7d:68:86:3d:
         85:7a:ac:f2:a5:58:6a:7e:5b:a3:d7:26:75:5e:df:5c:8b:8d:
         d9:e8:ff:b4:94:64:2f:bb:0d:a5:53:7d:1f:eb:12:db:e5:c8:
         d6:40:d8:08:e9:7c:e5:e2:70:35:3d:a6:3e:2e:c1:c0:6b:c7:
         9a:bf:51:a7:95:ff:38:78:06:90:95:2e:19:5e:01:c3:d4:2a:
         33:04:e2:40:ad:b7:f1:4b:6a:1a:9c:e2:27:d7:d0:39:29:1a:
         a8:25:38:c6:f3:c1:53:41:85:03:ea:36:ad:3f:73:c5:ea:d4:
         82:c3:03:5d:b3:64:35:6c:5d:af:e2:bd:28:8b:91:9a:83:a2:
         22:22:73:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Wb89YLpfHMktIGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkwNjE4MjgzMVoXDTI2MTIwNTE5MjgzMVowLzEtMCsGA1UEAxMk
MzY4NGViNDctYTRlMi00OWMwLWFkMjUtN2E5NDI4OGFlNmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0+j6Rkiksq34wrOt9kJQiOPzdbb7WCR4n3g
zc4+LfTV8QyTKiSW2ANFczUPJkuZ/vG4NOp4iIJ480vZrwAWRZoptc4q4yhJQYrG
8AX4nq2ThbZczOAUe7FdC2GCKqfMskkeLkYvnCu3aIFtxXkMMGm9sAUuOF7AXI1Z
l9qHdtJwHwJ/zWrEFkk2aQbr94AeQTZg3LbKNHftG1zJyVupIoiCxo43EO2ANQtT
+J0NFbuc395YHBrXt+kYEaBguGKqw3/ysmH1Sny/Sh7h8NUjGV6ip838XUQOfJly
VXm8ZR9ugUWQRDup6p8xm5rP0T0AjGDCU6CGkD/vmLrZy98jsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJg5zZLCDW1xlhnvepSZWADLiCCqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTVhMTY5Y2EtYWExMC0z
OWYxLTk2YzItZmU0NmY3N2RjMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRe5oVjqr6j61VKR7vTbVFVaGZdYVulFHSDb/N1KFLCPajUO4H36p2l
gbudpCfGkYiidyZT+0fjNJEzV94Z85+W3m7gSEa+a/2yVu1S/7vq8FyC/7ry/zZ3
kbbGmC76CRwQSxB36oqMfqExS0gC0P4/Y3s0ezI7amSafWiGPYV6rPKlWGp+W6PX
JnVe31yLjdno/7SUZC+7DaVTfR/rEtvlyNZA2AjpfOXicDU9pj4uwcBrx5q/UaeV
/zh4BpCVLhleAcPUKjME4kCtt/FLahqc4ifX0DkpGqglOMbzwVNBhQPqNq0/c8Xq
1ILDA12zZDVsXa/ivSiLkZqDoiIic7I=
-----END CERTIFICATE-----
Generated at Mon Sep 7 03:55:42 2026 by rpki-client