Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cdb978c2-61b1-3316-b14d-a2543585908e.roa
File:                     cdb978c2-61b1-3316-b14d-a2543585908e.roa (raw, json)
Hash identifier:          uo9OSj6Pb5Gy+qRTXAQBiPEiR8ZZykDg4f/RBOXjKyE=
Subject key identifier:   FC:41:20:EF:82:6D:1C:5C:56:59:3C:7C:77:A0:EE:7F:A2:7C:70:1F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E422C407A5C0195FEA1BB8C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cdb978c2-61b1-3316-b14d-a2543585908e.roa
Signing time:             Mon 22 Jun 2026 17:41:02 +0000
ROA not before:           Mon 22 Jun 2026 17:41:02 +0000
ROA not after:            Sun 20 Sep 2026 17:41:02 +0000
asID:                     57043
IP address blocks:        166.0.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:2c:40:7a:5c:01:95:fe:a1:bb:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 22 17:41:02 2026 GMT
            Not After : Sep 20 17:41:02 2026 GMT
        Subject: CN=c418f3ce-a330-4024-a0c8-52cf7cea0200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:0a:93:fc:be:be:72:5f:58:16:3c:7a:5d:
                    c3:b7:d5:a2:e9:07:26:b2:c2:de:33:5d:1f:24:70:
                    86:72:1d:3e:4c:72:8c:e7:4f:dc:41:45:24:d2:fb:
                    fe:57:61:92:21:28:20:78:74:40:a5:5b:44:34:43:
                    72:b3:1c:3e:1d:b7:ea:ee:db:bf:06:60:81:25:30:
                    00:b0:b4:ca:a5:bc:6a:63:15:ee:11:09:05:31:95:
                    ef:27:26:2c:6e:a7:0a:7c:24:7d:75:d7:45:87:84:
                    8e:48:31:68:3e:85:e7:67:36:5b:20:1f:db:e2:2a:
                    54:37:51:08:7e:02:a9:ff:1f:1f:39:7c:95:b6:c2:
                    f3:eb:57:87:f6:27:e9:a0:cd:69:04:be:b8:85:b2:
                    ad:d6:f2:a5:d8:7d:69:06:57:d5:d7:86:fd:8b:0f:
                    1f:fc:fb:85:66:29:0d:5f:0a:4f:dd:57:76:31:78:
                    4a:9c:2f:07:b2:76:47:9d:2c:bf:90:5d:f2:2b:ea:
                    09:59:1d:12:6c:ef:b1:cf:fb:2b:4f:30:46:15:dc:
                    cc:f9:18:6b:9c:57:15:36:62:05:85:37:6c:e8:65:
                    67:ce:d1:03:9d:ed:3d:c3:1f:1a:9d:bf:a0:1d:62:
                    0e:c1:09:6f:09:c1:90:cf:5c:f1:de:66:66:2e:0d:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:41:20:EF:82:6D:1C:5C:56:59:3C:7C:77:A0:EE:7F:A2:7C:70:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cdb978c2-61b1-3316-b14d-a2543585908e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:20:c6:3b:34:f2:fb:1b:4b:74:9e:7f:fc:24:8a:7c:ff:43:
         f0:f4:e1:10:3c:d2:fb:db:8d:19:0d:2d:be:31:1a:1b:a0:19:
         55:1d:12:44:b3:cb:cd:82:96:ed:c4:3d:72:e0:2f:37:ce:82:
         52:16:0b:27:81:a4:60:6e:11:37:ba:8d:e5:52:11:83:75:e6:
         10:8e:b0:9f:49:88:89:58:82:44:85:a9:22:ac:75:45:8e:19:
         44:bc:17:36:e5:2d:8d:84:a5:a6:ac:89:3d:b3:a4:e4:18:60:
         6c:8a:90:23:61:a2:72:b3:02:f2:e7:8d:ad:46:2f:e1:43:33:
         60:7d:33:60:b2:f9:6c:b6:3f:fd:f9:19:b7:5b:d5:6d:04:ca:
         77:b1:f8:ac:ae:97:d6:35:95:15:79:2e:99:56:83:24:56:33:
         c2:28:74:01:db:5f:64:7c:47:10:58:94:ef:d4:cb:f2:8b:2b:
         80:d8:e6:7e:a2:b0:3d:7f:53:24:a1:6c:fb:f2:b8:78:61:96:
         fd:66:16:63:1c:30:09:f7:27:63:5b:d7:ea:17:2d:39:26:a8:
         43:9d:1c:c5:c1:90:49:e0:a4:ea:97:86:06:f1:88:6b:c3:2c:
         80:52:a8:88:80:62:14:f1:ac:4d:00:fd:01:36:be:c7:d8:07:
         d9:7c:2d:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5CLEB6XAGV/qG7jAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYyMjE3NDEwMloXDTI2MDkyMDE3NDEwMlowLzEtMCsGA1UEAxMk
YzQxOGYzY2UtYTMzMC00MDI0LWEwYzgtNTJjZjdjZWEwMjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml4Kk/y+vnJfWBY8el3Dt9Wi6QcmssLeM10f
JHCGch0+THKM50/cQUUk0vv+V2GSISggeHRApVtENENysxw+Hbfq7tu/BmCBJTAA
sLTKpbxqYxXuEQkFMZXvJyYsbqcKfCR9dddFh4SOSDFoPoXnZzZbIB/b4ipUN1EI
fgKp/x8fOXyVtsLz61eH9ifpoM1pBL64hbKt1vKl2H1pBlfV14b9iw8f/PuFZikN
XwpP3Vd2MXhKnC8HsnZHnSy/kF3yK+oJWR0SbO+xz/srTzBGFdzM+RhrnFcVNmIF
hTds6GVnztEDne09wx8anb+gHWIOwQlvCcGQz1zx3mZmLg3LoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxBIO+CbRxcVlk8fHeg7n+ifHAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2RiOTc4YzItNjFiMS0z
MzE2LWIxNGQtYTI1NDM1ODU5MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAgxjs08vsbS3Sef/wkinz/Q/D04RA80vvbjRkNLb4xGhugGVUdEkSz
y82Clu3EPXLgLzfOglIWCyeBpGBuETe6jeVSEYN15hCOsJ9JiIlYgkSFqSKsdUWO
GUS8FzblLY2EpaasiT2zpOQYYGyKkCNhonKzAvLnja1GL+FDM2B9M2Cy+Wy2P/35
Gbdb1W0Eynex+Kyul9Y1lRV5LplWgyRWM8IodAHbX2R8RxBYlO/Uy/KLK4DY5n6i
sD1/UyShbPvyuHhhlv1mFmMcMAn3J2Nb1+oXLTkmqEOdHMXBkEngpOqXhgbxiGvD
LIBSqIiAYhTxrE0A/QE2vsfYB9l8LYw=
-----END CERTIFICATE-----
Generated at Tue Jun 23 18:10:11 2026 by rpki-client