Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8c48d6c-b962-3608-880d-0358dd701bd8.roa
File:                     e8c48d6c-b962-3608-880d-0358dd701bd8.roa (raw, json)
Hash identifier:          cXUn9lTEBSb89BzunG0gN1jmK8O9vQ4xGaPZPKJd4hs=
Subject key identifier:   02:AE:28:A0:7C:8F:85:37:33:71:36:C9:0C:D4:CB:8B:FF:E6:23:70
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB84711FA88CCC8FDA51D6310
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8c48d6c-b962-3608-880d-0358dd701bd8.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        166.0.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:11:fa:88:cc:c8:fd:a5:1d:63:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=a812624d-0e4b-43dc-b702-75c8286f4608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:91:4b:48:15:f5:7c:a7:e8:22:7d:9b:84:
                    17:25:81:42:15:b6:1f:7a:c1:2b:c2:86:02:92:5f:
                    5a:5d:e1:86:51:cb:1a:4f:75:7e:a9:ec:91:47:b7:
                    13:2f:98:11:12:04:55:70:06:d1:94:89:d5:15:ec:
                    ac:a5:5a:d2:52:8a:2e:98:2a:72:3f:5d:79:42:19:
                    86:59:ea:62:ee:2e:48:8e:eb:2e:c9:27:9c:5b:9c:
                    7f:d8:22:ba:82:33:1c:88:ff:0c:8f:13:ef:46:10:
                    d7:57:7f:ed:5e:d0:28:65:c5:dc:f3:27:ce:42:91:
                    39:a8:5f:35:e7:07:3e:8b:3e:8b:64:0a:c6:4b:5f:
                    89:13:40:bb:44:e4:91:f9:de:84:3e:08:c1:dd:7b:
                    15:b6:42:80:1a:b6:c4:5d:b6:cd:e7:a4:de:58:cb:
                    65:f6:82:ec:1c:27:df:7f:4b:f4:5c:d3:6d:1f:83:
                    9a:27:a4:97:4d:31:e8:17:e7:92:28:e9:11:bd:67:
                    0a:8f:24:46:1f:fa:56:e4:d4:1e:ff:97:58:0a:7d:
                    64:3f:0a:50:0c:d4:bf:9c:3a:8e:12:d9:ee:57:e5:
                    eb:e4:81:66:64:87:49:2b:f9:30:88:1b:07:a7:f4:
                    f4:e8:d7:8a:f9:eb:38:7b:c7:73:cd:4e:49:8d:02:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:28:A0:7C:8F:85:37:33:71:36:C9:0C:D4:CB:8B:FF:E6:23:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8c48d6c-b962-3608-880d-0358dd701bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:0a:c8:db:df:3f:bd:2c:b5:39:91:1e:3d:3d:ef:db:86:
         7e:71:0e:43:8f:3b:37:5f:70:11:8a:69:8f:73:fa:33:80:5e:
         7b:75:d4:d4:68:5e:30:22:af:85:b9:b0:fb:11:55:3c:b5:3b:
         0c:bf:f4:76:27:44:41:fc:52:66:3c:8f:ed:9b:d9:db:e5:01:
         1e:50:8f:a0:88:73:9f:12:f4:92:98:8c:27:16:41:ce:7d:49:
         89:4e:3d:c6:df:dc:71:7a:8e:86:44:ea:1b:a3:06:90:51:6a:
         d4:9f:7e:24:2b:14:64:9d:73:9a:d0:cb:06:38:3a:d3:de:a7:
         de:56:5b:69:ee:26:4d:b7:f9:11:ae:99:08:cb:47:0b:a2:0b:
         08:55:fa:6b:40:f6:06:ab:8e:dc:74:40:6a:05:98:24:73:6d:
         36:9b:25:d8:a0:0b:cc:44:c0:fe:57:0d:4a:ee:0b:67:35:63:
         31:ad:80:00:f6:da:76:fd:e0:33:ae:ea:90:41:5f:4a:48:45:
         f5:20:22:6f:55:fa:c1:28:b8:72:a5:3a:c4:15:d9:56:3b:eb:
         63:72:43:e5:70:cf:0a:ad:41:94:5c:c1:56:3d:ee:46:a0:90:
         42:76:95:12:72:9e:9b:5d:40:8b:4a:78:6e:01:89:dc:83:66:
         5d:ef:22:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RxH6iMzI/aUdYxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
YTgxMjYyNGQtMGU0Yi00M2RjLWI3MDItNzVjODI4NmY0NjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnyRS0gV9Xyn6CJ9m4QXJYFCFbYfesErwoYC
kl9aXeGGUcsaT3V+qeyRR7cTL5gREgRVcAbRlInVFeyspVrSUooumCpyP115QhmG
Wepi7i5IjusuySecW5x/2CK6gjMciP8MjxPvRhDXV3/tXtAoZcXc8yfOQpE5qF81
5wc+iz6LZArGS1+JE0C7ROSR+d6EPgjB3XsVtkKAGrbEXbbN56TeWMtl9oLsHCff
f0v0XNNtH4OaJ6SXTTHoF+eSKOkRvWcKjyRGH/pW5NQe/5dYCn1kPwpQDNS/nDqO
EtnuV+Xr5IFmZIdJK/kwiBsHp/T06NeK+es4e8dzzU5JjQJ8LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKuKKB8j4U3M3E2yQzUy4v/5iNwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZThjNDhkNmMtYjk2Mi0z
NjA4LTg4MGQtMDM1OGRkNzAxYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJObCsjb3z+9LLU5kR49Pe/bhn5xDkOPOzdfcBGKaY9z+jOAXnt11NRo
XjAir4W5sPsRVTy1Owy/9HYnREH8UmY8j+2b2dvlAR5Qj6CIc58S9JKYjCcWQc59
SYlOPcbf3HF6joZE6hujBpBRatSffiQrFGSdc5rQywY4OtPep95WW2nuJk23+RGu
mQjLRwuiCwhV+mtA9garjtx0QGoFmCRzbTabJdigC8xEwP5XDUruC2c1YzGtgAD2
2nb94DOu6pBBX0pIRfUgIm9V+sEouHKlOsQV2VY762NyQ+VwzwqtQZRcwVY97kag
kEJ2lRJynptdQItKeG4BidyDZl3vIo0=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:55:38 2026 by rpki-client