Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b374a5-7d05-314c-a7cf-b3036d4545a2.roa
File:                     d9b374a5-7d05-314c-a7cf-b3036d4545a2.roa (raw, json)
Hash identifier:          rEKPmbi8KnTWMsFNKbDHO88Lc2xOOva9/Q1Akk352VE=
Subject key identifier:   6B:74:A0:13:2C:C0:0E:1F:8C:08:6F:3C:B0:3C:80:53:CC:9A:6B:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E6ECEDDC5580B185C2AA97740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b374a5-7d05-314c-a7cf-b3036d4545a2.roa
Signing time:             Wed 08 Jul 2026 17:24:14 +0000
ROA not before:           Wed 08 Jul 2026 17:24:14 +0000
ROA not after:            Tue 06 Oct 2026 17:24:14 +0000
asID:                     401152
IP address blocks:        166.1.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:dd:c5:58:0b:18:5c:2a:a9:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  8 17:24:14 2026 GMT
            Not After : Oct  6 17:24:14 2026 GMT
        Subject: CN=20eba67d-c059-45b4-a6cb-88ff80872f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:2c:e7:e4:99:7c:fb:53:84:c7:d1:ba:6e:
                    86:c7:d8:04:23:35:05:5c:bd:02:5d:2d:2e:9c:42:
                    36:73:fd:db:0e:c6:80:2f:0b:c4:5d:8b:ef:fc:a7:
                    8c:ec:d6:8d:8b:ac:e7:3e:4b:5e:d2:23:4a:74:3e:
                    04:6a:f8:aa:5f:e9:04:13:74:94:26:2c:05:61:2e:
                    5e:ae:fb:26:8b:ad:65:d4:18:99:cc:c1:9d:6c:ed:
                    b8:4f:29:ed:4c:da:86:da:ce:b5:a9:53:e7:2c:81:
                    27:0a:d4:81:44:5b:bf:7e:e7:3e:96:91:99:e8:dc:
                    77:6e:eb:60:5d:2b:3b:ca:b2:38:c0:f6:e2:63:24:
                    ea:97:45:2b:24:4c:71:ba:ed:06:58:71:e9:79:86:
                    2f:38:78:01:cf:5e:3c:f6:b1:60:44:49:0c:04:e9:
                    ab:ed:b0:dc:61:e6:2c:5e:84:8c:bb:68:d3:52:07:
                    01:b4:df:43:6c:d8:02:36:1a:ee:c1:96:8d:54:24:
                    8f:72:43:0a:69:57:fa:ed:89:8b:b9:ab:b9:03:f5:
                    ae:89:09:77:ee:57:fd:7b:3f:ab:48:85:f1:18:8e:
                    13:08:84:3b:c4:ef:16:ff:aa:61:18:47:03:b7:6b:
                    c1:42:9b:4f:66:dc:33:04:b0:9a:36:ab:76:0c:0d:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:A0:13:2C:C0:0E:1F:8C:08:6F:3C:B0:3C:80:53:CC:9A:6B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9b374a5-7d05-314c-a7cf-b3036d4545a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:72:cb:3a:1e:04:c2:5c:c6:5e:0c:b6:5e:57:a0:f5:ec:
         88:d7:4f:6e:78:4c:e4:25:ed:e8:c8:df:96:9b:a2:85:9f:9f:
         6e:98:c9:e6:43:fb:4a:22:ae:53:4d:47:84:3c:4b:a0:d2:c7:
         3a:ea:92:53:20:ea:dc:4e:2f:24:ce:9a:86:a6:dd:ac:0d:07:
         dc:20:32:a6:ae:0f:27:03:c8:f1:18:27:cc:5b:9d:91:24:31:
         12:00:35:af:b2:db:0f:21:c7:2b:23:42:ac:43:f7:ec:91:95:
         f7:3d:c7:b6:30:e2:16:7b:03:c4:67:17:7d:a4:32:b7:e9:9d:
         ba:7d:67:20:0a:9f:69:83:4b:94:26:ad:d1:02:b3:8a:fd:44:
         48:66:54:5f:66:8a:93:60:fb:29:f0:8e:a1:0b:4e:77:6c:4d:
         a3:52:61:a2:b2:4f:67:0b:51:cb:ed:35:83:67:0d:43:b5:30:
         00:f2:6f:ca:e7:4e:dd:3d:2f:51:da:83:a2:d7:1b:6f:0a:d7:
         4b:9b:8a:a7:65:d5:45:d3:6d:fa:b5:a9:58:65:61:36:19:48:
         30:cd:de:66:bc:87:81:df:b2:39:a1:2e:a4:88:3e:33:b1:40:
         9b:13:a1:e7:6c:df:8f:42:fe:17:5d:87:2f:be:e4:91:9a:ff:
         9d:6e:c4:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5uzt3FWAsYXCqpd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcwODE3MjQxNFoXDTI2MTAwNjE3MjQxNFowLzEtMCsGA1UEAxMk
MjBlYmE2N2QtYzA1OS00NWI0LWE2Y2ItODhmZjgwODcyZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf0s5+SZfPtThMfRum6Gx9gEIzUFXL0CXS0u
nEI2c/3bDsaALwvEXYvv/KeM7NaNi6znPkte0iNKdD4EaviqX+kEE3SUJiwFYS5e
rvsmi61l1BiZzMGdbO24TyntTNqG2s61qVPnLIEnCtSBRFu/fuc+lpGZ6Nx3butg
XSs7yrI4wPbiYyTql0UrJExxuu0GWHHpeYYvOHgBz1489rFgREkMBOmr7bDcYeYs
XoSMu2jTUgcBtN9DbNgCNhruwZaNVCSPckMKaVf67YmLuau5A/WuiQl37lf9ez+r
SIXxGI4TCIQ7xO8W/6phGEcDt2vBQptPZtwzBLCaNqt2DA3eYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGt0oBMswA4fjAhvPLA8gFPMmmsHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDliMzc0YTUtN2QwNS0z
MTRjLWE3Y2YtYjMwMzZkNDU0NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKMcss6HgTCXMZeDLZeV6D17IjXT254TOQl7ejI35abooWfn26YyeZD
+0oirlNNR4Q8S6DSxzrqklMg6txOLyTOmoam3awNB9wgMqauDycDyPEYJ8xbnZEk
MRIANa+y2w8hxysjQqxD9+yRlfc9x7Yw4hZ7A8RnF32kMrfpnbp9ZyAKn2mDS5Qm
rdECs4r9REhmVF9mipNg+ynwjqELTndsTaNSYaKyT2cLUcvtNYNnDUO1MADyb8rn
Tt09L1Hag6LXG28K10ubiqdl1UXTbfq1qVhlYTYZSDDN3ma8h4HfsjmhLqSIPjOx
QJsToeds349C/hddhy++5JGa/51uxDA=
-----END CERTIFICATE-----
Generated at Thu Jul 9 08:54:56 2026 by rpki-client