Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
File:                     167071d7-0649-3013-aa5e-af1ce1d335da.roa (raw, json)
Hash identifier:          h/LML/K7HA2ZnC5F2OctesocsUIQ/l0mJGeNKULEEkQ=
Subject key identifier:   48:C5:6E:3D:77:2B:50:45:C9:81:62:66:09:10:24:8C:2C:00:EE:34
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584F94D33F2182271E67F993F700
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     174
IP address blocks:        66.187.0.0/23 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:3f:21:82:27:1e:67:f9:93:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=cda10821-d958-442d-9dc1-29def89ced56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:58:99:5c:72:4d:ff:4c:0b:5e:68:ec:9c:
                    c4:32:a9:a7:80:cd:b3:83:3d:e0:2c:a8:8d:96:b8:
                    c3:cf:9b:83:93:22:1e:69:7f:cf:21:46:de:2e:e0:
                    d5:06:6e:e0:a9:d1:da:16:81:32:2b:6d:56:15:97:
                    7f:dc:68:9c:91:12:7c:78:d8:3e:a1:0e:9a:cc:d9:
                    9b:1e:5f:8f:4d:d5:29:52:5c:c8:a4:7f:06:f7:09:
                    78:00:18:6b:df:84:03:47:00:a4:24:73:77:06:56:
                    61:2c:b0:a6:a6:0d:27:4a:6c:4e:60:0f:cd:8c:20:
                    0a:57:5f:c2:f0:fc:76:75:35:f5:32:52:c4:1c:a9:
                    32:11:5d:fb:b7:5b:7a:e0:b6:f9:99:0a:a4:49:a0:
                    06:52:cf:d4:2b:51:e0:40:86:aa:44:55:3f:c7:b6:
                    17:9c:a5:3c:d1:f0:4c:57:82:41:17:52:4a:2e:8d:
                    7f:f7:e0:03:2e:9e:de:f0:32:c0:aa:b5:01:53:2b:
                    8b:8e:1a:e6:99:4e:d2:79:03:98:49:33:0e:83:5d:
                    b1:aa:f7:8b:c6:f8:d1:72:95:1c:7f:bd:0f:7b:ba:
                    4b:ad:23:c9:f1:27:55:2a:bb:1e:21:5c:2e:e1:09:
                    ab:35:75:01:7b:50:03:86:50:ad:70:19:a8:77:a0:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C5:6E:3D:77:2B:50:45:C9:81:62:66:09:10:24:8C:2C:00:EE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:31:d7:58:7e:70:ce:dc:d7:5f:90:d2:9b:94:63:63:04:
         63:01:3f:59:08:ee:ef:83:84:c2:1c:22:2a:f0:5a:88:9e:c6:
         17:93:62:fc:97:47:d8:38:f6:ac:cd:45:7d:8f:fb:ac:30:6e:
         d6:b1:8d:dc:a7:92:04:9f:df:6b:9a:97:94:7a:50:45:8d:7b:
         ec:7b:68:37:bc:94:83:83:53:cc:f7:2f:c7:5b:5b:d6:0e:12:
         ef:35:62:59:81:ab:76:05:f9:4c:f9:48:38:4b:71:1b:4b:7d:
         fe:18:b2:13:85:75:78:3d:25:42:13:be:12:19:26:b2:df:4b:
         48:bc:79:75:c8:66:6e:02:9c:ff:ef:62:a6:28:42:9d:6a:b4:
         88:02:73:79:0e:65:e8:9a:82:e7:d4:29:cc:cf:6e:93:4e:63:
         06:56:7b:7c:94:62:e9:2c:ef:da:3d:34:22:f7:ca:19:f9:17:
         aa:21:a0:d5:ee:aa:d9:52:29:83:6d:fb:5d:97:87:34:93:1c:
         5a:73:3c:75:3e:d5:29:c9:db:53:a0:f1:87:59:67:59:14:88:
         b5:de:45:7b:ef:c7:2a:cd:43:dc:30:3f:af:31:db:e2:1b:5b:
         98:fe:b8:e4:0f:6a:9b:60:95:21:55:18:c5:fa:fb:1e:8b:6e:
         74:da:7c:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0z8hgiceZ/mT9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw
NzY1MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2RhMTA4MjEtZDk1OC00NDJkLTlkYzEtMjlkZWY4OWNlZDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v5YmVxyTf9MC15o7JzEMqmngM2zgz3gLKiN
lrjDz5uDkyIeaX/PIUbeLuDVBm7gqdHaFoEyK21WFZd/3GickRJ8eNg+oQ6azNmb
Hl+PTdUpUlzIpH8G9wl4ABhr34QDRwCkJHN3BlZhLLCmpg0nSmxOYA/NjCAKV1/C
8Px2dTX1MlLEHKkyEV37t1t64Lb5mQqkSaAGUs/UK1HgQIaqRFU/x7YXnKU80fBM
V4JBF1JKLo1/9+ADLp7e8DLAqrUBUyuLjhrmmU7SeQOYSTMOg12xqveLxvjRcpUc
f70Pe7pLrSPJ8SdVKrseIVwu4QmrNXUBe1ADhlCtcBmod6D7AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjFbj13K1BFyYFiZgkQJIwsAO40MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm
NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvMTY3MDcxZDctMDY0OS0z
MDEzLWFhNWUtYWYxY2UxZDMzNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl
NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk
MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0
OTIxZDA3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyzMddYfnDO3NdfkNKblGNjBGMBP1kI7u+DhMIcIirwWoiexheTYvyX
R9g49qzNRX2P+6wwbtaxjdynkgSf32ual5R6UEWNe+x7aDe8lIODU8z3L8dbW9YO
Eu81YlmBq3YF+Uz5SDhLcRtLff4YshOFdXg9JUITvhIZJrLfS0i8eXXIZm4CnP/v
YqYoQp1qtIgCc3kOZeiagufUKczPbpNOYwZWe3yUYuks79o9NCL3yhn5F6ohoNXu
qtlSKYNt+12XhzSTHFpzPHU+1SnJ21Og8YdZZ1kUiLXeRXvvxyrNQ9wwP68x2+Ib
W5j+uOQPaptglSFVGMX6+x6LbnTafMo=
-----END CERTIFICATE-----
Generated at Mon Oct 26 18:08:38 2026 by rpki-client