Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad8785d1-5269-3be1-b3fb-a6ccdd64fa75.roa
File:                     ad8785d1-5269-3be1-b3fb-a6ccdd64fa75.roa (raw, json)
Hash identifier:          I2xKtiv5lYPvK01/UW+Cehxsz8g/jGMC1PQ018iltUI=
Subject key identifier:   92:0A:3B:A4:5F:5B:98:30:1A:18:0D:5C:A1:69:3C:12:33:03:EC:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA7920A3ED6344A7E0804B000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad8785d1-5269-3be1-b3fb-a6ccdd64fa75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395839
IP address blocks:        166.1.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:0a:3e:d6:34:4a:7e:08:04:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7defee2f-2ace-487a-8607-11e1db76c5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a3:a1:ea:52:ea:5a:7c:7b:7f:64:26:df:92:
                    a1:29:cf:86:5d:33:56:cf:90:a5:bb:42:63:bc:b2:
                    d5:20:84:84:3e:68:69:58:01:f5:c4:04:74:f5:31:
                    4b:a3:05:c4:e0:06:a5:8c:8b:fa:45:b2:24:26:94:
                    c5:52:24:a3:f5:4b:ed:25:fd:5e:88:3a:e4:ef:c1:
                    ef:e8:96:6e:c5:8c:7a:12:9e:65:1b:97:d1:53:38:
                    86:80:3b:92:69:9a:f3:e1:04:eb:1d:52:7b:78:c3:
                    6f:49:79:e3:18:c2:b1:94:6b:98:55:ad:45:a3:c9:
                    26:6c:ef:a5:73:f8:f8:2e:f2:76:e8:2e:31:7b:9a:
                    d9:0f:88:5c:a5:62:33:0e:a7:1f:98:4d:70:27:31:
                    7a:5b:3b:81:6c:6b:d0:84:28:19:92:ae:ef:35:cc:
                    d1:01:ce:be:6b:88:55:9c:fa:6e:91:e7:5f:7a:5c:
                    8c:f7:03:6c:32:7a:aa:cd:00:0b:30:4b:4a:3c:1f:
                    b7:75:7d:13:45:2c:9a:4a:6f:dc:bd:9e:67:3c:64:
                    38:c5:e6:7f:72:c2:92:65:d8:89:b1:05:4d:7e:ec:
                    77:d0:a5:92:90:49:68:31:c7:70:df:63:b2:73:c6:
                    ea:5e:bd:e4:9c:be:9f:2d:c7:d5:a7:0e:7c:fe:22:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:3B:A4:5F:5B:98:30:1A:18:0D:5C:A1:69:3C:12:33:03:EC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad8785d1-5269-3be1-b3fb-a6ccdd64fa75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:b9:8f:56:ed:e5:b8:87:cd:16:c5:49:28:7d:4c:61:68:
         ac:de:90:74:a4:33:73:b1:ad:18:95:58:de:3e:31:fe:dc:ec:
         7e:f0:54:af:46:3c:84:28:27:40:74:dc:9d:69:87:40:3d:00:
         c6:d3:fa:b7:6d:b4:54:d8:9e:2d:3e:87:a9:16:1b:7c:a3:b6:
         07:d3:7c:76:03:ce:14:dc:05:2e:50:76:70:9f:c8:b5:77:4c:
         3d:e3:e8:b2:8b:c6:1f:88:9a:08:c0:3d:48:60:0d:fa:2a:13:
         6d:65:46:14:ca:ad:95:5a:ad:da:69:dd:80:84:47:fa:74:90:
         d1:5d:bf:e2:67:0c:38:e2:fd:f2:d9:71:31:0e:64:42:36:ce:
         8e:68:8e:43:07:3c:1a:09:d4:04:7c:e8:fb:33:0f:68:8b:01:
         5e:d0:2a:a3:a8:3a:cb:45:84:11:fe:52:bc:96:60:ad:45:32:
         8b:e7:93:e6:a5:3b:c1:8a:ef:e5:2e:82:6e:77:66:c1:3b:ea:
         b3:e8:1e:f1:6e:9e:60:e9:28:59:35:9b:0d:93:78:ee:c1:bc:
         1e:ca:69:04:bf:b6:2d:98:2e:01:4c:a4:c5:91:99:64:79:14:
         50:fb:32:57:db:10:f0:9d:dd:d5:cd:c3:51:6a:7e:be:93:5f:
         07:14:c2:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkgo+1jRKfggEsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2RlZmVlMmYtMmFjZS00ODdhLTg2MDctMTFlMWRiNzZjNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaOh6lLqWnx7f2Qm35KhKc+GXTNWz5Clu0Jj
vLLVIISEPmhpWAH1xAR09TFLowXE4AaljIv6RbIkJpTFUiSj9UvtJf1eiDrk78Hv
6JZuxYx6Ep5lG5fRUziGgDuSaZrz4QTrHVJ7eMNvSXnjGMKxlGuYVa1Fo8kmbO+l
c/j4LvJ26C4xe5rZD4hcpWIzDqcfmE1wJzF6WzuBbGvQhCgZkq7vNczRAc6+a4hV
nPpukedfelyM9wNsMnqqzQALMEtKPB+3dX0TRSyaSm/cvZ5nPGQ4xeZ/csKSZdiJ
sQVNfux30KWSkEloMcdw32Oyc8bqXr3knL6fLcfVpw58/iIpawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIKO6RfW5gwGhgNXKFpPBIzA+waMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWQ4Nzg1ZDEtNTI2OS0z
YmUxLWIzZmItYTZjY2RkNjRmYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBOuY9W7eW4h80WxUkofUxhaKzekHSkM3OxrRiVWN4+Mf7c7H7wVK9G
PIQoJ0B03J1ph0A9AMbT+rdttFTYni0+h6kWG3yjtgfTfHYDzhTcBS5QdnCfyLV3
TD3j6LKLxh+ImgjAPUhgDfoqE21lRhTKrZVardpp3YCER/p0kNFdv+JnDDji/fLZ
cTEOZEI2zo5ojkMHPBoJ1AR86PszD2iLAV7QKqOoOstFhBH+UryWYK1FMovnk+al
O8GK7+Uugm53ZsE76rPoHvFunmDpKFk1mw2TeO7BvB7KaQS/ti2YLgFMpMWRmWR5
FFD7MlfbEPCd3dXNw1Fqfr6TXwcUwqw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:01 2026 by rpki-client