Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa
File:                     00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa (raw, json)
Hash identifier:          I0i3RhZ5ia3r/s8Fn7SUOmyfq/62/56Z3uztw8sxKo0=
Subject key identifier:   65:E8:2C:B4:3F:6B:AA:2C:E3:76:E7:C9:AC:B6:14:F7:CF:96:FB:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CDB023725D64CF403ED8D6AA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     57043
IP address blocks:        166.1.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:37:25:d6:4c:f4:03:ed:8d:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=d24f0ced-bdf0-4bfa-8233-568bce20b566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:c2:40:5a:93:d8:a5:77:6e:9c:1a:bc:ed:
                    8e:a8:7e:ac:11:6c:7d:46:2b:9b:b5:68:05:a2:bb:
                    19:39:45:2c:2d:fb:60:3d:45:52:81:7e:c5:3a:47:
                    b0:07:ff:c9:bd:2c:83:0f:f8:8d:ee:93:45:d9:9c:
                    78:33:a0:0a:b0:58:38:b0:22:0f:30:e5:ea:58:11:
                    62:f6:67:bf:54:b3:ff:ce:50:d4:1b:2d:25:74:d0:
                    2c:1c:d3:b1:50:78:01:7e:fb:c7:5c:5c:b5:c0:54:
                    af:de:56:61:de:e7:cb:ad:e9:81:97:76:16:0f:47:
                    a5:16:99:06:bc:e9:fd:5c:8d:8f:2e:02:4a:33:ef:
                    cc:3f:8d:b8:d8:e6:5f:14:40:03:fb:c7:ec:9d:3b:
                    38:92:1b:ca:04:1b:01:0e:62:88:41:72:39:a1:2f:
                    89:0b:3e:fa:20:1f:c0:6d:f0:7d:a0:8b:a1:bc:54:
                    90:ae:e6:71:02:21:3c:96:91:c5:0d:6b:2c:be:8d:
                    7f:96:17:5c:36:d8:20:42:2a:0f:f8:06:7b:84:34:
                    8e:d9:dd:35:d9:b1:d1:0a:d7:e6:4d:95:36:05:d9:
                    75:68:a0:10:2d:5b:87:81:19:95:4d:9b:02:72:2b:
                    62:7b:ff:42:17:b5:2e:15:24:85:c0:e2:84:46:26:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E8:2C:B4:3F:6B:AA:2C:E3:76:E7:C9:AC:B6:14:F7:CF:96:FB:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a89a33-7bd3-3985-bfd7-7eac9fa760f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:65:1e:81:14:d6:88:a9:d0:68:e7:b9:0a:e7:44:d4:0b:
         a5:40:78:e7:06:1d:39:8a:1e:9c:ea:87:2e:e1:8f:ba:ce:5e:
         63:37:e0:a4:f4:b2:85:18:d3:05:32:fe:c9:5b:ea:b2:de:1b:
         bc:b8:e1:03:b4:84:ee:28:c2:42:2d:0c:10:4a:2d:69:9b:17:
         c1:0f:ba:66:fa:94:1e:8b:02:35:26:97:d1:7a:70:0b:40:35:
         ac:7d:0f:09:c2:f1:72:7f:df:30:08:a6:fd:2d:ea:b2:9f:2c:
         20:88:53:b8:55:65:37:45:d1:2e:93:86:e8:5d:55:a0:7b:47:
         09:c9:eb:cf:cf:21:6d:7e:9e:22:14:af:4e:ec:28:70:d1:f9:
         f3:22:f6:d4:46:d4:3b:23:99:1b:5f:0b:66:8a:0d:9c:d5:6d:
         4d:28:86:a3:fc:10:b2:ef:62:dd:1f:14:4e:a8:e9:03:79:d2:
         4b:29:40:be:84:e9:92:56:c3:ec:57:9f:2f:5b:6c:a7:67:22:
         1f:0d:65:34:cd:92:4e:66:aa:4d:57:83:ce:a8:5a:6f:5f:81:
         d0:d6:f0:d3:27:9b:e9:be:93:b3:c8:44:85:97:cf:6c:09:20:
         3f:d3:e8:ac:91:d6:ee:49:67:5b:54:76:5c:1d:04:fa:e9:a1:
         13:aa:1a:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAjcl1kz0A+2NaqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
ZDI0ZjBjZWQtYmRmMC00YmZhLTgyMzMtNTY4YmNlMjBiNTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuarCQFqT2KV3bpwavO2OqH6sEWx9RiubtWgF
orsZOUUsLftgPUVSgX7FOkewB//JvSyDD/iN7pNF2Zx4M6AKsFg4sCIPMOXqWBFi
9me/VLP/zlDUGy0ldNAsHNOxUHgBfvvHXFy1wFSv3lZh3ufLremBl3YWD0elFpkG
vOn9XI2PLgJKM+/MP4242OZfFEAD+8fsnTs4khvKBBsBDmKIQXI5oS+JCz76IB/A
bfB9oIuhvFSQruZxAiE8lpHFDWssvo1/lhdcNtggQioP+AZ7hDSO2d012bHRCtfm
TZU2Bdl1aKAQLVuHgRmVTZsCcitie/9CF7UuFSSFwOKERiad7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXoLLQ/a6os43bnyay2FPfPlvvCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDBhODlhMzMtN2JkMy0z
OTg1LWJmZDctN2VhYzlmYTc2MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfmZR6BFNaIqdBo57kK50TUC6VAeOcGHTmKHpzqhy7hj7rOXmM34KT0
soUY0wUy/slb6rLeG7y44QO0hO4owkItDBBKLWmbF8EPumb6lB6LAjUml9F6cAtA
Nax9DwnC8XJ/3zAIpv0t6rKfLCCIU7hVZTdF0S6ThuhdVaB7RwnJ68/PIW1+niIU
r07sKHDR+fMi9tRG1DsjmRtfC2aKDZzVbU0ohqP8ELLvYt0fFE6o6QN50kspQL6E
6ZJWw+xXny9bbKdnIh8NZTTNkk5mqk1Xg86oWm9fgdDW8NMnm+m+k7PIRIWXz2wJ
ID/T6KyR1u5JZ1tUdlwdBPrpoROqGiM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:39 2026 by rpki-client