Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1793fc3e-c9e9-3c0c-90bc-8c94d7ef1b50.roa
File:                     1793fc3e-c9e9-3c0c-90bc-8c94d7ef1b50.roa (raw, json)
Hash identifier:          ySAu+o8ef+BvqmgbxeGNJZ9+Dwq3ExeN1hOth7ajs5w=
Subject key identifier:   0C:89:39:A6:80:0B:A1:EA:D4:33:4A:4D:72:50:31:42:A3:E5:71:A6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F331D26536C4404CEE69CDF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1793fc3e-c9e9-3c0c-90bc-8c94d7ef1b50.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     8881
IP address blocks:        166.0.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:26:53:6c:44:04:ce:e6:9c:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=c9fe80dc-e5fd-4aa0-affd-bb93e4a483f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b2:19:e8:47:0a:c9:10:88:56:b4:da:c2:9b:
                    fc:ac:c8:fc:5a:11:08:22:9e:9d:28:fd:bd:70:97:
                    73:a8:f0:dd:3e:e7:27:ac:4f:0e:89:97:2c:19:cd:
                    10:97:c8:86:e8:9a:b1:5f:e5:cf:b0:ce:2b:c5:4d:
                    c9:a2:37:dd:84:ae:f4:3e:fa:b0:b0:c8:48:a7:be:
                    7c:93:e2:e7:5e:53:be:57:3e:1b:14:d8:f6:6a:c2:
                    76:1d:f5:42:96:96:f2:f2:3c:63:ec:60:f6:e8:96:
                    20:c8:91:e7:df:43:0a:3e:88:b5:6c:48:1d:db:6a:
                    d1:9a:30:19:48:3a:a6:af:c1:fc:3a:be:f4:9e:b2:
                    18:ba:e0:7b:a9:de:11:05:3e:0f:8b:ca:81:59:da:
                    b6:48:7b:aa:4f:05:c3:79:68:a0:7e:4e:ef:af:a0:
                    b7:0a:a6:80:ff:fe:f0:fa:28:6a:66:ab:c8:9b:24:
                    1f:b7:7e:33:dc:5c:c2:68:da:68:b8:13:b8:b3:3e:
                    5d:07:d2:71:9f:a4:01:79:4e:0f:a0:f3:39:65:61:
                    0d:79:94:e9:03:d5:d0:a2:2a:7d:82:5f:0f:68:75:
                    43:10:70:92:ca:6d:91:59:74:d4:4f:53:4f:85:d4:
                    0f:b8:12:7f:bc:40:1f:51:41:03:65:04:d3:e4:4f:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:89:39:A6:80:0B:A1:EA:D4:33:4A:4D:72:50:31:42:A3:E5:71:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1793fc3e-c9e9-3c0c-90bc-8c94d7ef1b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:23:c6:4c:a0:99:64:09:9a:76:f3:d2:6f:ec:57:30:2a:75:
         0d:0e:99:98:d4:28:30:6e:94:d4:cd:d9:25:63:3c:cb:76:90:
         bb:99:80:de:fe:35:a5:63:3e:a2:be:49:17:02:89:f0:55:8a:
         eb:36:5a:5c:a1:59:a7:6c:05:ec:65:f0:ba:bb:fd:d6:e0:f3:
         81:3e:52:e9:b2:59:11:27:df:6e:64:3f:a8:3a:89:69:91:ea:
         34:43:5f:78:d5:e4:d6:f5:fa:68:13:fe:17:b1:fc:73:d1:04:
         e1:01:a1:da:7f:0e:96:29:c0:e5:cb:03:5f:c0:2b:59:9a:66:
         63:d3:45:0b:02:f1:12:69:88:28:d1:21:1c:2c:63:61:61:15:
         cd:4f:cb:b2:a5:28:d7:8b:c6:05:31:0d:7b:5b:c2:50:f5:37:
         4e:56:cb:bb:90:eb:6f:7f:29:45:3e:8b:a4:77:29:2e:8a:75:
         8e:36:9d:e4:05:09:94:f5:b2:c3:47:79:4f:9d:19:3d:c1:92:
         09:3d:cf:3d:f0:6d:d9:33:0a:93:38:f8:37:e3:d8:ac:f6:d3:
         a6:34:09:ed:73:56:19:ff:93:6b:8f:99:0e:2b:d2:00:e0:3e:
         5b:74:d1:0b:81:43:72:34:eb:7c:3a:ae:fa:4d:9b:75:2d:9e:
         7c:98:db:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSZTbEQEzuac3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk
YzlmZTgwZGMtZTVmZC00YWEwLWFmZmQtYmI5M2U0YTQ4M2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LIZ6EcKyRCIVrTawpv8rMj8WhEIIp6dKP29
cJdzqPDdPucnrE8OiZcsGc0Ql8iG6JqxX+XPsM4rxU3JojfdhK70PvqwsMhIp758
k+LnXlO+Vz4bFNj2asJ2HfVClpby8jxj7GD26JYgyJHn30MKPoi1bEgd22rRmjAZ
SDqmr8H8Or70nrIYuuB7qd4RBT4Pi8qBWdq2SHuqTwXDeWigfk7vr6C3CqaA//7w
+ihqZqvImyQft34z3FzCaNpouBO4sz5dB9Jxn6QBeU4PoPM5ZWENeZTpA9XQoip9
gl8PaHVDEHCSym2RWXTUT1NPhdQPuBJ/vEAfUUEDZQTT5E/UBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyJOaaAC6Hq1DNKTXJQMUKj5XGmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTc5M2ZjM2UtYzllOS0z
YzBjLTkwYmMtOGM5NGQ3ZWYxYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgA5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQjxkygmWQJmnbz0m/sVzAqdQ0OmZjUKDBulNTN2SVjPMt2kLuZgN7+
NaVjPqK+SRcCifBVius2WlyhWadsBexl8Lq7/dbg84E+UumyWREn325kP6g6iWmR
6jRDX3jV5Nb1+mgT/hex/HPRBOEBodp/DpYpwOXLA1/AK1maZmPTRQsC8RJpiCjR
IRwsY2FhFc1Py7KlKNeLxgUxDXtbwlD1N05Wy7uQ629/KUU+i6R3KS6KdY42neQF
CZT1ssNHeU+dGT3Bkgk9zz3wbdkzCpM4+Dfj2Kz206Y0Ce1zVhn/k2uPmQ4r0gDg
Plt00QuBQ3I063w6rvpNm3UtnnyY2+0=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:43:54 2026 by rpki-client