Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fb78731-56ec-3e38-840b-dc6a411d7ca4.roa
File:                     9fb78731-56ec-3e38-840b-dc6a411d7ca4.roa (raw, json)
Hash identifier:          AoYQTMlu0DeEWOSMDroi9Nu7XEArAOSYnrGj+jv8eMc=
Subject key identifier:   60:20:47:3C:D4:39:2D:DC:10:E5:AD:11:4C:5D:C0:80:BB:95:C5:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EE4F1F6831B8551D1C8C0F700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fb78731-56ec-3e38-840b-dc6a411d7ca4.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     3320
IP address blocks:        166.0.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f6:83:1b:85:51:d1:c8:c0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=2e249bfc-9805-4e4d-bc21-b91b2f697d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:af:41:e6:f5:01:4d:d7:a3:ed:36:25:3e:
                    43:0f:ad:f8:cc:5f:56:84:7c:2e:f7:2f:d1:fb:09:
                    19:2f:dc:84:02:2f:d2:86:a6:36:1f:fc:c1:41:cc:
                    0a:91:d3:e3:ba:49:31:c3:c3:2a:21:8f:36:dd:bc:
                    4b:8b:db:2f:cf:7d:69:74:69:db:da:fe:ef:1f:30:
                    dd:5f:18:24:af:0c:93:73:5e:4a:e1:cb:c7:12:bf:
                    43:7c:b9:b8:d5:0c:69:13:2c:6d:10:41:79:a3:e7:
                    04:ea:c0:db:84:25:33:4a:66:48:d0:a4:eb:eb:e0:
                    33:6c:25:07:e8:fe:21:44:ca:84:32:15:9e:59:ea:
                    eb:a0:5a:bd:d5:05:d2:4b:ba:9c:70:52:cf:94:17:
                    56:22:b9:71:ad:49:a4:9c:9c:3f:c2:a5:e3:93:e7:
                    df:4e:fc:2a:82:39:85:7a:f5:be:5c:06:90:1f:bb:
                    94:ec:2a:12:12:69:2b:8e:21:80:5b:d1:1a:54:ae:
                    74:62:49:3f:aa:43:67:26:92:d4:2b:83:36:0d:c1:
                    10:e1:6a:2b:c7:78:e5:77:dc:28:3b:f6:69:59:73:
                    e8:60:3a:08:cc:f9:a5:a6:cd:d8:32:04:ef:20:ed:
                    28:46:f8:02:b2:8e:8f:89:77:07:d1:5d:b4:13:d3:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:47:3C:D4:39:2D:DC:10:E5:AD:11:4C:5D:C0:80:BB:95:C5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fb78731-56ec-3e38-840b-dc6a411d7ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:89:55:46:f1:5b:06:ba:fd:43:3b:68:61:3c:5f:7c:83:d0:
         d9:77:e4:2d:6f:8b:c2:cf:b2:bf:76:4b:d7:5a:5a:36:fb:1a:
         c5:90:ca:19:be:dc:2d:46:b5:7e:e0:53:80:e2:f1:60:54:44:
         15:b4:50:69:47:d5:b0:65:aa:4a:a0:a2:53:d4:aa:6b:68:89:
         37:13:e3:35:24:56:a4:90:ab:87:21:14:a6:c7:93:7e:c2:15:
         44:b5:8b:56:e6:dd:55:b7:4d:22:05:1c:d1:af:ed:ef:3b:62:
         d5:21:f3:0c:70:d8:cf:ba:4d:9e:a9:15:15:b2:c4:f1:0b:5a:
         0c:97:9f:34:5d:92:ff:64:3e:77:14:59:3a:24:b5:9f:67:05:
         46:cc:e1:7f:0f:4c:f3:ca:f9:60:ed:35:94:45:8c:06:a9:d3:
         e5:d5:80:ad:1e:15:a5:96:b1:e4:ad:60:79:22:d5:94:9d:1e:
         58:a5:98:f2:f6:00:51:ab:36:90:07:74:42:77:cc:d4:0a:ea:
         68:30:de:59:97:a7:13:9e:4e:75:09:0f:36:f9:c1:1d:e6:cf:
         51:55:06:93:04:ac:52:d6:18:f2:1b:d1:df:ff:16:08:fc:1b:
         b4:fd:7d:aa:ca:52:c2:0e:39:99:08:20:09:e7:9d:14:f9:66:
         9d:27:a5:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8faDG4VR0cjA9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
MmUyNDliZmMtOTgwNS00ZTRkLWJjMjEtYjkxYjJmNjk3ZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdGvQeb1AU3Xo+02JT5DD634zF9WhHwu9y/R
+wkZL9yEAi/ShqY2H/zBQcwKkdPjukkxw8MqIY823bxLi9svz31pdGnb2v7vHzDd
XxgkrwyTc15K4cvHEr9DfLm41QxpEyxtEEF5o+cE6sDbhCUzSmZI0KTr6+AzbCUH
6P4hRMqEMhWeWerroFq91QXSS7qccFLPlBdWIrlxrUmknJw/wqXjk+ffTvwqgjmF
evW+XAaQH7uU7CoSEmkrjiGAW9EaVK50Ykk/qkNnJpLUK4M2DcEQ4Worx3jld9wo
O/ZpWXPoYDoIzPmlps3YMgTvIO0oRvgCso6PiXcH0V20E9PEaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAgRzzUOS3cEOWtEUxdwIC7lcW+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWZiNzg3MzEtNTZlYy0z
ZTM4LTg0MGItZGM2YTQxMWQ3Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeJVUbxWwa6/UM7aGE8X3yD0Nl35C1vi8LPsr92S9daWjb7GsWQyhm+
3C1GtX7gU4Di8WBURBW0UGlH1bBlqkqgolPUqmtoiTcT4zUkVqSQq4chFKbHk37C
FUS1i1bm3VW3TSIFHNGv7e87YtUh8wxw2M+6TZ6pFRWyxPELWgyXnzRdkv9kPncU
WToktZ9nBUbM4X8PTPPK+WDtNZRFjAap0+XVgK0eFaWWseStYHki1ZSdHlilmPL2
AFGrNpAHdEJ3zNQK6mgw3lmXpxOeTnUJDzb5wR3mz1FVBpMErFLWGPIb0d//Fgj8
G7T9farKUsIOOZkIIAnnnRT5Zp0npZY=
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:53:28 2026 by rpki-client