Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe4d6378-f881-3e38-a412-91069fa4e7de.roa
File:                     fe4d6378-f881-3e38-a412-91069fa4e7de.roa (raw, json)
Hash identifier:          qPOxm2Xao8J0wOMps4DvjTfuwcCqctWMUvbWZgCa6iI=
Subject key identifier:   F4:80:27:2F:8F:AB:1C:E1:70:DC:B2:10:D6:72:18:54:71:8E:4B:76
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3A55492D18AA63B022BAD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe4d6378-f881-3e38-a412-91069fa4e7de.roa
Signing time:             Fri 23 May 2025 19:28:22 +0000
ROA not before:           Fri 23 May 2025 19:28:22 +0000
ROA not after:            Thu 21 Aug 2025 19:28:22 +0000
asID:                     7385
IP address blocks:        166.0.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:a5:54:92:d1:8a:a6:3b:02:2b:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 19:28:22 2025 GMT
            Not After : Aug 21 19:28:22 2025 GMT
        Subject: CN=c62d6ede-f27f-43c1-8719-380732cb3228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:ba:8d:21:67:24:ef:62:39:a2:cf:48:c9:
                    79:db:c6:68:a0:ac:c8:03:19:1b:7f:ce:35:8a:a1:
                    c8:9c:be:85:fc:b8:94:68:21:1e:60:05:1a:f8:d7:
                    83:4b:35:3b:2f:11:ad:6a:1c:5f:04:67:b1:a8:dc:
                    bb:a8:68:1a:d0:e0:e9:f5:20:ce:b5:94:ef:fe:d0:
                    eb:96:be:5d:a3:13:9b:87:d8:b1:3f:1e:8b:e9:f1:
                    13:1d:f7:d6:bf:57:f2:94:7b:e3:d2:fa:34:c0:66:
                    58:29:8b:2b:5e:89:1e:3d:3e:df:19:66:45:b3:6b:
                    37:8b:b5:7b:2f:b9:a1:54:d4:58:83:ef:82:41:93:
                    11:fc:9f:d5:66:ee:19:ca:0a:fc:89:56:e3:a4:95:
                    af:c8:db:ef:6d:b3:32:63:29:b4:44:9e:77:43:4c:
                    9c:b9:a6:95:a9:b3:bc:32:c6:22:3a:6f:18:c0:7a:
                    81:b1:28:3d:9d:35:7f:3a:25:8e:f0:6f:b6:93:2e:
                    56:93:33:86:5e:f7:6e:4b:b1:97:59:eb:b3:d5:b2:
                    c6:2f:f7:3b:cf:d7:c2:3b:11:79:29:fb:84:d1:26:
                    67:f5:de:f2:02:03:14:17:28:74:26:c8:4e:8f:f2:
                    1f:5d:cf:55:b4:8d:c4:46:d6:0c:72:74:d5:15:90:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:27:2F:8F:AB:1C:E1:70:DC:B2:10:D6:72:18:54:71:8E:4B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe4d6378-f881-3e38-a412-91069fa4e7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:95:2a:75:0e:3b:ce:67:99:c2:ab:20:0b:f7:10:1d:3e:c6:
         2f:67:6f:64:b4:49:0f:55:8e:4b:14:8c:78:5c:0a:c4:c7:54:
         d9:bb:2f:21:eb:b4:c9:e8:80:5d:a7:01:18:fe:b9:ac:ff:1d:
         be:29:f3:49:09:a9:f9:8a:c4:88:2e:90:56:08:8d:a4:11:95:
         7f:3b:e9:eb:8f:d2:53:2e:4c:91:6f:a0:d2:3f:74:b6:55:19:
         30:9b:ef:a6:47:ad:4a:03:11:d7:4f:2c:a6:a0:a1:e4:e4:76:
         7d:f6:55:f6:0b:ea:df:3d:7e:8f:94:b7:6c:f0:be:4e:cb:ec:
         0d:66:6d:72:c0:51:8e:10:2e:bd:07:37:c9:f0:27:6b:30:07:
         3d:0c:11:7f:52:6a:ce:7b:2e:1d:4f:a6:30:6f:d3:d6:24:24:
         14:fd:1c:7d:e3:ed:eb:00:f4:e6:39:0e:b8:ac:12:bb:84:ab:
         69:12:8b:db:70:3e:d0:2e:19:80:3d:fd:c4:f2:bf:79:71:6c:
         19:34:c0:f3:d9:84:fd:ba:5c:5c:e1:39:b1:89:ed:66:53:59:
         a2:23:5f:b0:80:66:63:74:44:ae:1f:c0:40:6d:d2:dc:ae:2b:
         1b:42:f9:01:36:6d:31:0b:47:72:94:c2:1c:96:ae:c8:94:a5:
         11:6f:58:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnzpVSS0YqmOwIrrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUyMzE5MjgyMloXDTI1MDgyMTE5MjgyMlowLzEtMCsGA1UEAxMk
YzYyZDZlZGUtZjI3Zi00M2MxLTg3MTktMzgwNzMyY2IzMjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/u6jSFnJO9iOaLPSMl528ZooKzIAxkbf841
iqHInL6F/LiUaCEeYAUa+NeDSzU7LxGtahxfBGexqNy7qGga0ODp9SDOtZTv/tDr
lr5doxObh9ixPx6L6fETHffWv1fylHvj0vo0wGZYKYsrXokePT7fGWZFs2s3i7V7
L7mhVNRYg++CQZMR/J/VZu4Zygr8iVbjpJWvyNvvbbMyYym0RJ53Q0ycuaaVqbO8
MsYiOm8YwHqBsSg9nTV/OiWO8G+2ky5WkzOGXvduS7GXWeuz1bLGL/c7z9fCOxF5
KfuE0SZn9d7yAgMUFyh0JshOj/IfXc9VtI3ERtYMcnTVFZA9KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSAJy+PqxzhcNyyENZyGFRxjkt2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmU0ZDYzNzgtZjg4MS0z
ZTM4LWE0MTItOTEwNjlmYTRlN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCVKnUOO85nmcKrIAv3EB0+xi9nb2S0SQ9VjksUjHhcCsTHVNm7LyHr
tMnogF2nARj+uaz/Hb4p80kJqfmKxIgukFYIjaQRlX876euP0lMuTJFvoNI/dLZV
GTCb76ZHrUoDEddPLKagoeTkdn32VfYL6t89fo+Ut2zwvk7L7A1mbXLAUY4QLr0H
N8nwJ2swBz0MEX9Sas57Lh1PpjBv09YkJBT9HH3j7esA9OY5DrisEruEq2kSi9tw
PtAuGYA9/cTyv3lxbBk0wPPZhP26XFzhObGJ7WZTWaIjX7CAZmN0RK4fwEBt0tyu
KxtC+QE2bTELR3KUwhyWrsiUpRFvWLg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:11 2025 by rpki-client