Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1eda0efb-5516-30bf-b65d-281018ef9845.roa
File:                     1eda0efb-5516-30bf-b65d-281018ef9845.roa (raw, json)
Hash identifier:          gOgHW1V64q9DQTaz6UWjBgliiY0fH9ctaVW6rjXFaRU=
Subject key identifier:   A2:0F:8E:7B:7C:A5:D8:7B:F7:9C:74:25:D3:7C:33:5A:4B:9F:24:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A1895648332D761B99E465100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1eda0efb-5516-30bf-b65d-281018ef9845.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     26383
IP address blocks:        166.1.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:64:83:32:d7:61:b9:9e:46:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=bef18e94-3745-4b6c-b946-e0e25a26ba00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:11:ee:53:b6:34:19:4b:79:c2:36:de:e0:
                    30:f6:b4:38:2e:18:ff:f6:bb:3e:32:bc:7f:8c:98:
                    aa:db:49:22:a2:79:ca:d1:06:a6:08:4b:0d:21:5f:
                    75:12:02:f8:d9:49:b9:00:06:3f:d1:68:ca:80:df:
                    b6:7f:62:eb:ce:59:69:47:83:57:82:04:e5:2b:05:
                    d8:e9:9b:ce:38:de:26:ce:e9:2d:6e:c5:97:fd:13:
                    73:84:b3:29:b2:ab:e8:92:06:a5:41:3e:57:01:8c:
                    25:50:26:a7:02:cc:d4:da:c8:1f:5d:fc:47:63:23:
                    64:e2:e8:3a:a1:35:4f:61:9c:32:a2:a1:47:f6:db:
                    dc:0d:dc:fa:da:5c:00:e0:7c:b5:18:78:9b:f4:95:
                    b8:13:5e:f3:4b:94:04:50:b6:c9:dc:1c:49:8c:b3:
                    eb:a7:c3:0d:1d:6b:bc:a7:4b:7c:c9:0c:ad:18:75:
                    df:56:bd:36:7d:6e:43:3e:63:2d:2f:cb:17:7c:5d:
                    1d:36:bd:1e:41:9b:66:e4:78:7f:5f:65:b1:37:5b:
                    1f:46:b6:91:6f:a2:f7:fe:38:58:17:61:57:2f:e8:
                    46:86:3e:00:dd:bc:7f:36:3c:84:ec:12:ca:58:95:
                    27:ac:18:ef:ce:25:ce:ed:81:07:ce:9a:aa:12:41:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0F:8E:7B:7C:A5:D8:7B:F7:9C:74:25:D3:7C:33:5A:4B:9F:24:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1eda0efb-5516-30bf-b65d-281018ef9845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:dd:41:9f:d6:59:0d:a2:99:fc:0b:88:48:40:8e:db:16:
         07:43:1b:72:68:c1:11:79:99:9e:42:19:a9:39:89:2b:e4:77:
         27:a5:fe:d8:62:a1:0f:60:4d:30:70:29:c5:fc:e2:b0:73:97:
         ba:a7:38:22:53:52:3b:30:bd:e0:ae:c4:6c:15:c9:8e:4d:42:
         55:b5:a9:24:99:44:d1:56:32:6a:55:17:70:d2:46:64:38:bb:
         fb:91:0c:e1:86:c2:6f:7b:41:c1:c4:8d:5f:c5:ad:3e:04:1d:
         46:f2:50:a8:e6:34:ef:a4:43:d8:7f:49:e3:b9:2e:9d:15:4f:
         b8:26:fe:fd:b7:cf:9d:d7:c5:9c:31:b2:c3:26:35:6d:95:0b:
         83:8c:42:1d:c1:b4:18:c3:bf:a2:d4:74:e6:5c:8d:4b:5d:a5:
         9a:be:38:cc:ba:dc:c3:7c:13:d3:0d:d0:44:47:d2:aa:b0:70:
         65:b6:c0:bd:3a:79:e5:84:35:d7:c6:ea:f3:8c:b3:14:b6:42:
         94:b5:3d:53:ac:31:a0:9a:da:49:65:fa:50:0d:a4:77:9e:07:
         b3:a4:78:d7:fb:8f:a8:de:18:21:28:a5:6b:b3:cc:e5:87:0d:
         06:51:76:13:f7:0a:4f:23:5b:b5:0d:f7:9c:1d:51:2f:b8:f9:
         97:f4:f8:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlWSDMtdhuZ5GUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
YmVmMThlOTQtMzc0NS00YjZjLWI5NDYtZTBlMjVhMjZiYTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJUR7lO2NBlLecI23uAw9rQ4Lhj/9rs+Mrx/
jJiq20kionnK0QamCEsNIV91EgL42Um5AAY/0WjKgN+2f2LrzllpR4NXggTlKwXY
6ZvOON4mzuktbsWX/RNzhLMpsqvokgalQT5XAYwlUCanAszU2sgfXfxHYyNk4ug6
oTVPYZwyoqFH9tvcDdz62lwA4Hy1GHib9JW4E17zS5QEULbJ3BxJjLPrp8MNHWu8
p0t8yQytGHXfVr02fW5DPmMtL8sXfF0dNr0eQZtm5Hh/X2WxN1sfRraRb6L3/jhY
F2FXL+hGhj4A3bx/NjyE7BLKWJUnrBjvziXO7YEHzpqqEkF9iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIPjnt8pdh795x0JdN8M1pLnyRPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWVkYTBlZmItNTUxNi0z
MGJmLWI2NWQtMjgxMDE4ZWY5ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6L3UGf1lkNopn8C4hIQI7bFgdDG3JowRF5mZ5CGak5iSvkdyel/thi
oQ9gTTBwKcX84rBzl7qnOCJTUjswveCuxGwVyY5NQlW1qSSZRNFWMmpVF3DSRmQ4
u/uRDOGGwm97QcHEjV/FrT4EHUbyUKjmNO+kQ9h/SeO5Lp0VT7gm/v23z53XxZwx
ssMmNW2VC4OMQh3BtBjDv6LUdOZcjUtdpZq+OMy63MN8E9MN0ERH0qqwcGW2wL06
eeWENdfG6vOMsxS2QpS1PVOsMaCa2kll+lANpHeeB7OkeNf7j6jeGCEopWuzzOWH
DQZRdhP3Ck8jW7UN95wdUS+4+Zf0+I0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:05:49 2025 by rpki-client