Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/422e653b-2db0-342b-9bc3-6b82effd0286.roa
File:                     422e653b-2db0-342b-9bc3-6b82effd0286.roa (raw, json)
Hash identifier:          ye3DNK1Q5OL219DuSR4Z3boUFGCivNUG3OhThjtMj1c=
Subject key identifier:   D7:CE:07:CE:A2:8A:45:46:15:78:F7:7C:5E:64:93:01:A0:3C:1D:B1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE84B5D1A1AF10885C1A9D280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/422e653b-2db0-342b-9bc3-6b82effd0286.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     200017
IP address blocks:        166.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5d:1a:1a:f1:08:85:c1:a9:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=15f11cf7-7974-43a0-a1ce-399f236774fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:9e:37:3e:a6:8f:dd:07:bf:63:af:a9:66:
                    04:09:20:62:98:f5:4b:1d:0a:80:e3:d6:67:e4:4a:
                    9b:02:6a:40:46:1d:6f:91:19:1e:42:6f:79:1a:66:
                    34:83:de:b4:89:34:a9:4d:23:36:6a:1f:39:53:57:
                    e1:be:c0:dd:6f:68:f8:11:69:ea:da:ea:d6:df:96:
                    99:1b:eb:3d:57:e5:db:73:78:f5:15:57:21:ac:c3:
                    62:f9:e6:d4:6d:b9:e9:fd:b8:91:58:27:ba:1b:84:
                    ff:92:cd:52:ea:cf:64:60:74:16:5d:96:e4:ec:4b:
                    bf:1a:ae:be:c5:97:74:b1:13:f0:1f:b5:ee:54:d1:
                    7d:f7:f2:1f:44:54:fa:48:12:b0:c5:9b:65:f3:23:
                    6a:49:ea:6d:d0:58:e7:29:4b:9f:71:70:66:22:87:
                    9e:f0:23:9f:f6:01:bd:a9:22:e5:12:5e:0e:12:ec:
                    29:7b:3f:c4:72:ce:68:6a:0b:0a:f6:2e:52:1f:65:
                    28:14:c8:aa:e2:7c:67:2a:59:cb:cd:f9:8e:44:d4:
                    50:1a:69:33:f7:21:82:b7:9a:c0:58:4c:45:e1:fb:
                    de:a8:f4:9d:19:f2:2c:3b:29:78:20:d2:c3:64:2b:
                    92:3d:b7:2d:4a:f6:52:db:99:bf:01:c7:07:31:48:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:07:CE:A2:8A:45:46:15:78:F7:7C:5E:64:93:01:A0:3C:1D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/422e653b-2db0-342b-9bc3-6b82effd0286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:f6:62:9d:ec:a8:5b:5d:88:7c:55:b9:00:c7:4d:40:0f:
         bd:e9:09:75:8f:02:3e:5a:b5:05:59:ff:ba:6a:94:67:c0:e1:
         d8:a1:ca:77:0c:ac:d5:13:37:f5:b6:2d:6b:6f:8d:0c:15:90:
         66:20:3d:1d:c1:ee:a8:3e:a1:bd:02:dd:21:05:6f:1f:7a:a8:
         cf:b6:de:69:3f:35:ed:00:64:62:a5:aa:9a:98:e1:1d:d8:1f:
         50:7a:a9:1e:7d:11:ab:15:14:aa:5a:1e:de:07:0d:03:4d:4b:
         a3:50:48:62:94:7c:36:c1:04:d3:e2:a4:5a:d2:7e:df:e8:6c:
         62:c4:69:11:35:de:9f:c3:cf:a2:ac:68:7d:01:38:5b:c7:5c:
         82:69:cf:d7:8e:29:0f:b4:89:a1:b6:7f:49:ed:09:a0:48:9a:
         ef:10:4f:ee:4d:0a:c2:00:04:3b:0c:ec:69:af:c7:2d:f4:47:
         f2:26:2c:1c:d0:48:c2:d6:19:c7:df:a2:55:b3:57:4b:78:f8:
         0e:03:09:43:17:09:41:a3:5d:de:77:e6:14:dc:fe:2e:dc:53:
         5b:1f:4a:66:dc:aa:38:94:98:66:dd:0c:e4:86:45:69:26:a6:
         d6:60:6d:4b:1b:1a:5c:ee:24:41:1e:46:dd:d9:98:32:28:15:
         4c:1c:99:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS10aGvEIhcGp0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
MTVmMTFjZjctNzk3NC00M2EwLWExY2UtMzk5ZjIzNjc3NGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkyeNz6mj90Hv2OvqWYECSBimPVLHQqA49Zn
5EqbAmpARh1vkRkeQm95GmY0g960iTSpTSM2ah85U1fhvsDdb2j4EWnq2urW35aZ
G+s9V+Xbc3j1FVchrMNi+ebUbbnp/biRWCe6G4T/ks1S6s9kYHQWXZbk7Eu/Gq6+
xZd0sRPwH7XuVNF99/IfRFT6SBKwxZtl8yNqSept0FjnKUufcXBmIoee8COf9gG9
qSLlEl4OEuwpez/Ecs5oagsK9i5SH2UoFMiq4nxnKlnLzfmORNRQGmkz9yGCt5rA
WExF4fveqPSdGfIsOyl4INLDZCuSPbctSvZS25m/AccHMUjofwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfOB86iikVGFXj3fF5kkwGgPB2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDIyZTY1M2ItMmRiMC0z
NDJiLTliYzMtNmI4MmVmZmQwMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTn9mKd7KhbXYh8VbkAx01AD73pCXWPAj5atQVZ/7pqlGfA4dihyncM
rNUTN/W2LWtvjQwVkGYgPR3B7qg+ob0C3SEFbx96qM+23mk/Ne0AZGKlqpqY4R3Y
H1B6qR59EasVFKpaHt4HDQNNS6NQSGKUfDbBBNPipFrSft/obGLEaRE13p/Dz6Ks
aH0BOFvHXIJpz9eOKQ+0iaG2f0ntCaBImu8QT+5NCsIABDsM7Gmvxy30R/ImLBzQ
SMLWGcffolWzV0t4+A4DCUMXCUGjXd535hTc/i7cU1sfSmbcqjiUmGbdDOSGRWkm
ptZgbUsbGlzuJEEeRt3ZmDIoFUwcmUw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:59:50 2026 by rpki-client