Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb6da716-a025-3e07-9cd7-0d74449349af.roa
File:                     cb6da716-a025-3e07-9cd7-0d74449349af.roa (raw, json)
Hash identifier:          L5Yk41tm3sZ+j/R4YUvi/kqMmCGffBw5Vo3hHdYVSW0=
Subject key identifier:   E5:30:E6:7E:1A:45:B7:DA:D6:4B:06:3A:09:6A:4C:9D:ED:A2:37:40
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB779A925F06376D7A2E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb6da716-a025-3e07-9cd7-0d74449349af.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        166.1.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:77:9a:92:5f:06:37:6d:7a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=aa9f376e-143e-487a-934f-266abbb82160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:30:86:df:1d:bb:4d:bb:90:75:f2:dc:91:
                    a5:3f:0d:0b:85:49:36:6f:c2:de:4e:b0:8a:a7:bd:
                    2b:8c:54:f6:53:55:b3:0c:aa:0c:fb:d3:2f:6b:69:
                    af:b3:a1:0f:71:07:77:d2:49:d8:4b:ad:10:2a:20:
                    a0:84:62:2a:0f:c3:91:be:86:1e:7a:ec:d1:e8:83:
                    28:10:20:43:01:07:9c:16:ec:7a:9a:c1:46:58:97:
                    7a:9a:13:1b:28:d9:6f:10:26:12:71:03:75:93:68:
                    3c:71:b9:c0:b6:f0:b2:75:c5:60:01:a3:d4:cf:43:
                    82:99:18:44:de:1a:a3:ee:05:62:6f:9f:86:3c:3c:
                    14:ba:04:c7:96:55:ae:1c:dd:4d:b1:0c:ef:c3:e6:
                    c3:84:e1:72:70:df:ed:63:27:33:f0:b8:37:0e:2d:
                    26:f7:03:51:1a:8e:12:bd:b5:2f:27:01:ef:b9:e5:
                    39:5f:27:cd:83:c3:cc:89:ec:8e:ba:30:73:69:c7:
                    42:72:8d:a4:9c:b5:ce:19:66:2c:f0:5d:ba:11:d6:
                    47:ee:42:c7:e6:41:9a:b6:80:8b:95:17:b5:3b:55:
                    3a:4f:fa:ee:64:22:74:a8:19:ec:9c:44:51:5e:d7:
                    36:f8:7c:e4:15:b0:d9:3b:bf:f8:26:4b:e8:c6:b7:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:30:E6:7E:1A:45:B7:DA:D6:4B:06:3A:09:6A:4C:9D:ED:A2:37:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb6da716-a025-3e07-9cd7-0d74449349af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:e1:c5:2c:9e:15:14:3d:ff:28:cd:20:4d:45:7e:07:3f:
         98:0e:11:a9:bb:fd:c3:42:56:ae:f5:e9:1d:7e:43:88:96:48:
         63:a1:90:e2:d3:91:8b:76:7a:cc:ac:bc:bf:dd:10:59:40:bc:
         c9:ca:c0:ba:ba:f3:88:34:b1:b9:e7:4d:1a:16:c4:cd:c7:69:
         ad:77:de:66:35:25:c6:11:49:4e:2d:4a:7c:39:b9:37:6f:b9:
         75:ef:e5:9d:89:72:e4:10:86:05:0b:a0:f7:94:91:e4:bd:6b:
         53:ea:34:75:9b:be:ef:85:da:01:00:2a:08:9f:80:42:a4:2c:
         33:03:d9:76:21:13:94:9f:b5:10:27:20:28:93:90:27:20:90:
         2d:31:0b:b3:03:07:20:35:0b:75:31:83:43:6b:f4:d8:d0:f8:
         b6:36:89:ef:66:2f:cb:c9:aa:bb:e1:63:38:eb:46:69:81:02:
         32:ef:eb:a6:82:7f:69:22:ce:d2:21:55:19:c8:1a:e8:1b:2b:
         cd:12:e8:d8:3c:66:a2:e2:91:e2:be:de:53:ce:78:c1:6c:c1:
         03:54:68:98:01:59:43:a1:b4:c7:89:c2:0c:18:ce:24:36:49:
         f8:ed:e7:56:b5:8d:16:91:1a:a4:da:5d:31:d0:41:37:ef:f6:
         d4:49:ee:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwu3eakl8GN216LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDczMDEzMDA0MFoXDTI1MTAyODEzMDA0MFowLzEtMCsGA1UEAxMk
YWE5ZjM3NmUtMTQzZS00ODdhLTkzNGYtMjY2YWJiYjgyMTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ecwht8du027kHXy3JGlPw0LhUk2b8LeTrCK
p70rjFT2U1WzDKoM+9Mva2mvs6EPcQd30knYS60QKiCghGIqD8ORvoYeeuzR6IMo
ECBDAQecFux6msFGWJd6mhMbKNlvECYScQN1k2g8cbnAtvCydcVgAaPUz0OCmRhE
3hqj7gVib5+GPDwUugTHllWuHN1NsQzvw+bDhOFycN/tYycz8Lg3Di0m9wNRGo4S
vbUvJwHvueU5XyfNg8PMieyOujBzacdCco2knLXOGWYs8F26EdZH7kLH5kGatoCL
lRe1O1U6T/ruZCJ0qBnsnERRXtc2+HzkFbDZO7/4JkvoxrdLJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUw5n4aRbfa1ksGOglqTJ3tojdAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2I2ZGE3MTYtYTAyNS0z
ZTA3LTljZDctMGQ3NDQ0OTM0OWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADj44cUsnhUUPf8ozSBNRX4HP5gOEam7/cNCVq716R1+Q4iWSGOhkOLT
kYt2esysvL/dEFlAvMnKwLq684g0sbnnTRoWxM3Haa133mY1JcYRSU4tSnw5uTdv
uXXv5Z2JcuQQhgULoPeUkeS9a1PqNHWbvu+F2gEAKgifgEKkLDMD2XYhE5SftRAn
ICiTkCcgkC0xC7MDByA1C3Uxg0Nr9NjQ+LY2ie9mL8vJqrvhYzjrRmmBAjLv66aC
f2kiztIhVRnIGugbK80S6Ng8ZqLikeK+3lPOeMFswQNUaJgBWUOhtMeJwgwYziQ2
Sfjt51a1jRaRGqTaXTHQQTfv9tRJ7mA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:00 2025 by rpki-client