Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bedca4a0-b379-37c2-88b0-56f532994c80.roa
File:                     bedca4a0-b379-37c2-88b0-56f532994c80.roa (raw, json)
Hash identifier:          BWwaROffrZtMCx2lgiCKR4PYhBYBqAcdWB4mFEUcrSE=
Subject key identifier:   0A:47:36:1F:8D:34:2B:4C:52:72:EF:9A:1D:19:EB:B8:B9:21:97:86
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F5A3329A9B40C83C657E4FDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bedca4a0-b379-37c2-88b0-56f532994c80.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        166.0.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:29:a9:b4:0c:83:c6:57:e4:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=5fee1521-366e-425f-9c03-039343464021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:1a:fd:d6:d4:ed:da:f1:92:e3:22:48:34:
                    5d:a0:bf:f2:16:d8:62:95:b9:81:a7:c1:e2:5d:30:
                    7b:03:03:49:c7:b5:6d:2a:2b:00:d1:d9:d8:57:1b:
                    cf:ab:1b:9d:d6:eb:91:09:b4:d8:b5:32:da:87:f8:
                    0d:33:08:1e:eb:72:8f:a8:07:63:08:f3:46:bf:fb:
                    c7:ed:e5:01:c6:38:0c:1c:50:27:6c:c0:6e:1c:2a:
                    ee:e6:98:52:1e:68:c8:20:32:b4:b1:a4:17:c7:55:
                    66:86:56:5b:9d:b9:08:db:3b:d1:f0:eb:d5:37:51:
                    db:45:72:e0:3c:40:6b:2b:4c:bf:ca:67:b6:09:b3:
                    63:86:d4:8c:c5:94:b4:5e:e4:ed:ee:3f:e0:cf:45:
                    9d:f7:ee:39:27:b0:8d:a6:7c:86:de:bf:a5:4b:46:
                    9a:90:fa:16:05:a2:fc:c3:f5:ad:1a:1d:7a:6d:14:
                    7b:5c:11:b5:13:80:22:81:5e:7d:3b:e1:ca:f0:a2:
                    fe:a1:ab:db:29:09:fb:59:52:c8:a1:a1:77:88:39:
                    74:e9:ea:2e:aa:7d:e0:da:9d:04:bf:a8:b7:a4:cf:
                    75:a5:4c:e0:7b:ce:c9:d8:27:e2:a4:60:01:f5:63:
                    7d:10:54:6b:13:b5:f7:e1:f4:bc:1c:e9:3f:56:34:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:47:36:1F:8D:34:2B:4C:52:72:EF:9A:1D:19:EB:B8:B9:21:97:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bedca4a0-b379-37c2-88b0-56f532994c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ef:23:eb:67:b8:05:ab:fb:2b:5f:10:a5:97:4f:a6:77:d2:
         7d:9a:d5:bc:96:23:05:fc:72:0d:ad:4d:e8:ca:3a:46:dc:17:
         f2:5b:a9:52:ab:8a:fa:81:3b:3c:07:67:c8:61:1f:39:c2:76:
         4c:bd:01:b8:04:e3:ec:fe:d4:6b:5c:9d:2e:e5:bc:bd:3e:b1:
         74:1a:24:42:e9:4e:f9:3d:e9:25:6b:76:af:79:0f:3d:b2:32:
         f9:55:11:16:c5:f7:a3:b5:2b:2f:76:4c:4f:4b:fe:ef:87:1d:
         8d:7e:b4:45:47:bd:30:0c:04:cb:36:15:0d:73:b7:c0:58:09:
         73:02:a7:b0:f8:54:20:6c:b9:e8:f1:51:e3:90:3c:f7:93:1b:
         14:d6:ff:ba:64:93:48:d7:32:7d:d9:f8:af:c7:c9:6b:b4:c7:
         28:e1:38:ca:16:e9:84:ff:8a:ba:c9:e7:cc:a6:d0:ee:d7:aa:
         85:6c:22:14:b9:99:20:f7:5f:7e:35:ef:5f:c0:1a:a7:c4:26:
         d3:d1:95:a8:52:f0:ee:8e:6d:74:32:ac:b3:1c:ed:0d:11:b4:
         f2:62:56:dc:26:fa:13:52:e2:a9:0e:5e:09:4b:1b:c3:67:9c:
         38:dc:be:ee:d2:ae:be:9a:bc:c3:07:39:3b:0c:e5:d6:bc:22:
         b9:a1:83:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMymptAyDxlfk/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NWZlZTE1MjEtMzY2ZS00MjVmLTljMDMtMDM5MzQzNDY0MDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjIa/dbU7drxkuMiSDRdoL/yFthilbmBp8Hi
XTB7AwNJx7VtKisA0dnYVxvPqxud1uuRCbTYtTLah/gNMwge63KPqAdjCPNGv/vH
7eUBxjgMHFAnbMBuHCru5phSHmjIIDK0saQXx1VmhlZbnbkI2zvR8OvVN1HbRXLg
PEBrK0y/yme2CbNjhtSMxZS0XuTt7j/gz0Wd9+45J7CNpnyG3r+lS0aakPoWBaL8
w/WtGh16bRR7XBG1E4AigV59O+HK8KL+oavbKQn7WVLIoaF3iDl06eouqn3g2p0E
v6i3pM91pUzge87J2CfipGAB9WN9EFRrE7X34fS8HOk/VjROhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApHNh+NNCtMUnLvmh0Z67i5IZeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmVkY2E0YTAtYjM3OS0z
N2MyLTg4YjAtNTZmNTMyOTk0YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7vI+tnuAWr+ytfEKWXT6Z30n2a1byWIwX8cg2tTejKOkbcF/JbqVKr
ivqBOzwHZ8hhHznCdky9AbgE4+z+1GtcnS7lvL0+sXQaJELpTvk96SVrdq95Dz2y
MvlVERbF96O1Ky92TE9L/u+HHY1+tEVHvTAMBMs2FQ1zt8BYCXMCp7D4VCBsuejx
UeOQPPeTGxTW/7pkk0jXMn3Z+K/HyWu0xyjhOMoW6YT/irrJ58ym0O7XqoVsIhS5
mSD3X34171/AGqfEJtPRlahS8O6ObXQyrLMc7Q0RtPJiVtwm+hNS4qkOXglLG8Nn
nDjcvu7Srr6avMMHOTsM5da8Irmhg1k=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:13:00 2026 by rpki-client