Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a17d17-b810-308c-9a95-12a293fcfced.roa
File:                     a3a17d17-b810-308c-9a95-12a293fcfced.roa (raw, json)
Hash identifier:          SAphijaLD0kneMPRqU7zALJGOK+EEpFEF7bqOdULYNE=
Subject key identifier:   08:B9:05:94:AC:C9:8E:11:A8:05:8A:AB:22:2D:18:C1:47:1A:22:3D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5024EC6024D43D0190CA1180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a17d17-b810-308c-9a95-12a293fcfced.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     62240
IP address blocks:        166.1.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ec:60:24:d4:3d:01:90:ca:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=311b3a3c-4f46-48e0-9344-9ec5bbf119ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:d0:74:4a:e9:20:6b:9c:6c:23:1b:c9:80:
                    3e:ca:de:da:71:dd:23:c1:56:7a:6d:92:5f:3d:d6:
                    96:b0:cc:2d:4e:ee:d0:11:8c:6b:94:4a:0d:d1:2d:
                    d2:42:e8:4c:60:c0:68:67:df:df:59:d7:ab:79:30:
                    e3:05:21:91:50:ca:a7:bb:41:96:6e:d6:5d:da:65:
                    66:38:aa:3e:37:09:7e:4b:ba:89:5c:f8:11:13:54:
                    7a:89:cf:c0:58:ef:71:d2:47:89:c8:af:9b:3e:e1:
                    0a:eb:4b:78:9c:fb:8c:17:76:c9:16:f5:f8:c1:fb:
                    5a:5d:03:01:65:a8:66:63:d9:c2:11:65:70:47:4b:
                    29:74:98:ed:7e:04:e1:cf:68:e3:49:c4:fc:18:7e:
                    47:d5:f7:cf:ad:8e:de:cc:7d:f1:82:d0:d2:ae:c6:
                    70:ed:49:03:b4:86:d4:85:df:10:b7:aa:99:7b:55:
                    8d:35:8c:17:90:e9:b3:b1:cf:2f:89:3f:98:ac:62:
                    e2:b3:da:bd:7d:d5:fb:dc:f2:08:62:33:a2:9b:cc:
                    c7:18:19:b1:dc:77:25:07:f3:a4:06:71:83:b4:95:
                    3d:b4:5d:64:bf:8f:4f:11:c0:99:9a:ca:0b:e5:71:
                    b4:f4:68:ee:1b:2d:d8:67:d7:8d:fe:f9:bc:b7:37:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B9:05:94:AC:C9:8E:11:A8:05:8A:AB:22:2D:18:C1:47:1A:22:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a17d17-b810-308c-9a95-12a293fcfced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:b1:37:1d:bd:cc:15:1d:e6:9c:37:48:82:aa:63:6d:33:
         9b:66:7e:16:94:9e:4a:ae:de:e2:87:cf:19:0f:93:c4:e6:62:
         4b:51:e0:1b:d2:2a:d7:9b:09:70:ee:eb:27:26:46:c0:55:7b:
         67:c1:32:8b:ef:04:db:c3:1a:1c:e9:cf:36:76:2e:f7:45:1c:
         6a:b8:d5:cb:d6:fc:bd:de:c3:ee:2a:21:66:1b:50:c7:e0:e2:
         4f:77:76:e1:57:33:e7:19:ee:c6:09:76:0f:2e:33:9e:5b:ef:
         53:e2:c9:cd:db:4b:6e:81:ac:9c:49:ae:8c:3d:27:e1:7d:69:
         7b:55:bf:02:90:71:96:c6:04:12:23:17:90:23:1f:d8:50:15:
         77:e6:1f:b1:90:e7:4f:98:9b:e2:d0:0c:3b:58:12:da:a0:04:
         96:3c:0a:cd:cc:37:6e:31:94:88:b9:b3:22:63:04:eb:54:14:
         48:e4:e9:49:55:4f:f3:2e:6d:7a:38:7c:de:ad:88:07:8e:04:
         c4:f6:8a:86:99:2f:fc:6b:08:81:4e:cf:c8:80:c1:78:ee:70:
         41:e1:8a:c2:49:2a:59:b7:4b:62:bf:a0:8b:d2:85:4e:00:1c:
         fe:a1:34:a2:d3:a2:80:18:e7:19:b4:fe:c4:ef:59:d8:e4:f5:
         72:3e:88:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJOxgJNQ9AZDKEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk
MzExYjNhM2MtNGY0Ni00OGUwLTkzNDQtOWVjNWJiZjExOWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCbQdErpIGucbCMbyYA+yt7acd0jwVZ6bZJf
PdaWsMwtTu7QEYxrlEoN0S3SQuhMYMBoZ9/fWdereTDjBSGRUMqnu0GWbtZd2mVm
OKo+Nwl+S7qJXPgRE1R6ic/AWO9x0keJyK+bPuEK60t4nPuMF3bJFvX4wftaXQMB
ZahmY9nCEWVwR0spdJjtfgThz2jjScT8GH5H1ffPrY7ezH3xgtDSrsZw7UkDtIbU
hd8Qt6qZe1WNNYwXkOmzsc8viT+YrGLis9q9fdX73PIIYjOim8zHGBmx3HclB/Ok
BnGDtJU9tF1kv49PEcCZmsoL5XG09GjuGy3YZ9eN/vm8tzeqxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAi5BZSsyY4RqAWKqyItGMFHGiI9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTNhMTdkMTctYjgxMC0z
MDhjLTlhOTUtMTJhMjkzZmNmY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0BsTcdvcwVHeacN0iCqmNtM5tmfhaUnkqu3uKHzxkPk8TmYktR4BvS
KtebCXDu6ycmRsBVe2fBMovvBNvDGhzpzzZ2LvdFHGq41cvW/L3ew+4qIWYbUMfg
4k93duFXM+cZ7sYJdg8uM55b71Piyc3bS26BrJxJrow9J+F9aXtVvwKQcZbGBBIj
F5AjH9hQFXfmH7GQ50+Ym+LQDDtYEtqgBJY8Cs3MN24xlIi5syJjBOtUFEjk6UlV
T/MubXo4fN6tiAeOBMT2ioaZL/xrCIFOz8iAwXjucEHhisJJKlm3S2K/oIvShU4A
HP6hNKLTooAY5xm0/sTvWdjk9XI+iJc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:11 2026 by rpki-client