Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6787caa-5c0c-31a8-80ba-7971490354a0.roa
File:                     f6787caa-5c0c-31a8-80ba-7971490354a0.roa (raw, json)
Hash identifier:          k7JXbbyQN7ehzMIxKmj+GwMbCYOkcuoIJHNgErPBw+0=
Subject key identifier:   4C:BB:14:BE:6D:D8:46:C4:1D:90:CB:89:9D:2B:26:5B:87:7A:D8:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BB88D257CAD21CB543396C240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6787caa-5c0c-31a8-80ba-7971490354a0.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     61317
IP address blocks:        108.165.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:25:7c:ad:21:cb:54:33:96:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=ccf43614-a24e-42d7-b720-89404aacf593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:76:07:9d:af:d7:a9:42:d4:bc:bd:25:cf:
                    2c:3d:18:5f:0c:a8:c6:dd:6a:aa:8c:13:49:dd:5e:
                    8c:f5:3c:65:72:71:4d:f7:43:4c:49:1e:30:59:0d:
                    ad:98:fa:ce:61:cc:0d:14:79:c0:51:4d:3c:ad:14:
                    5d:67:c1:3d:e0:5c:67:cd:9f:4d:0f:16:52:cd:9c:
                    55:4f:f5:f3:a8:9b:5b:48:e6:35:dc:a1:4b:9c:44:
                    9e:88:01:db:d2:0b:f6:62:ac:36:7b:c3:6b:84:b3:
                    69:da:fb:5e:93:be:95:66:32:ab:e2:64:d9:ba:ac:
                    04:ad:54:ef:53:b1:dd:a7:bc:02:ee:10:35:dd:5a:
                    3b:10:62:48:ba:83:5d:26:f2:c8:56:1f:e3:1a:5e:
                    bb:1f:2c:ed:c3:31:e1:c0:01:ce:b5:1e:a7:56:f2:
                    c3:8f:7f:bf:ce:ec:75:79:56:11:fa:7d:f2:e1:7d:
                    bd:54:24:39:85:02:ed:e0:43:c8:14:02:88:0a:66:
                    50:1f:b2:c3:e1:2d:66:01:f5:5e:f5:e9:8c:b0:d9:
                    a5:d4:a5:7e:8b:93:9d:fb:be:94:02:ae:f6:18:a6:
                    00:e5:5a:ac:06:a9:a2:23:fa:29:40:bb:08:6c:52:
                    8d:c6:f4:07:65:78:a1:e6:fb:2f:8c:85:c4:47:16:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:14:BE:6D:D8:46:C4:1D:90:CB:89:9D:2B:26:5B:87:7A:D8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6787caa-5c0c-31a8-80ba-7971490354a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:05:41:20:22:fe:77:9e:ca:12:1c:5c:f2:39:89:60:cb:
         18:b7:89:9b:72:99:bf:3f:c8:18:10:8e:e5:44:0b:02:59:a9:
         1a:44:0c:79:af:40:47:0e:ad:3b:23:f2:06:15:ee:62:f7:75:
         81:a7:d1:08:0c:36:d9:cc:3e:5b:01:83:70:69:81:46:d2:c5:
         23:e5:b0:ea:ef:9a:61:93:b3:b3:bf:91:95:05:b1:6f:c2:3d:
         51:7d:68:2a:d7:fc:46:c1:10:43:10:2b:1c:46:84:a8:e7:cf:
         3e:25:4c:82:3b:a9:58:5e:ca:a8:24:8a:b7:e5:7c:68:89:c8:
         ec:d9:13:90:64:cf:17:eb:ec:9c:01:fd:19:ba:ab:48:21:56:
         72:e7:7b:9c:60:e1:eb:e7:80:9b:aa:39:da:37:6f:5f:a9:ba:
         2a:9c:52:f5:f5:06:46:77:ff:4c:7e:08:4e:1d:58:bf:66:9e:
         78:26:9b:41:22:73:02:e6:90:b4:b5:d1:20:e8:5c:a9:a7:da:
         7d:df:9a:0c:90:6d:76:c3:2e:eb:b6:cf:e9:50:93:be:d5:02:
         2d:85:14:46:ad:8e:c7:23:d0:99:19:d6:bc:4c:a1:07:ca:84:
         3d:67:4d:32:59:28:8f:87:82:9d:c2:7f:a7:b8:31:57:5a:50:
         ea:bc:7f:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSV8rSHLVDOWwkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
Y2NmNDM2MTQtYTI0ZS00MmQ3LWI3MjAtODk0MDRhYWNmNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbp2B52v16lC1Ly9Jc8sPRhfDKjG3WqqjBNJ
3V6M9TxlcnFN90NMSR4wWQ2tmPrOYcwNFHnAUU08rRRdZ8E94FxnzZ9NDxZSzZxV
T/XzqJtbSOY13KFLnESeiAHb0gv2Yqw2e8NrhLNp2vtek76VZjKr4mTZuqwErVTv
U7Hdp7wC7hA13Vo7EGJIuoNdJvLIVh/jGl67HyztwzHhwAHOtR6nVvLDj3+/zux1
eVYR+n3y4X29VCQ5hQLt4EPIFAKICmZQH7LD4S1mAfVe9emMsNml1KV+i5Od+76U
Aq72GKYA5VqsBqmiI/opQLsIbFKNxvQHZXih5vsvjIXERxZHdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEy7FL5t2EbEHZDLiZ0rJluHeti/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjY3ODdjYWEtNWMwYy0z
MWE4LTgwYmEtNzk3MTQ5MDM1NGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3BBUEgIv53nsoSHFzyOYlgyxi3iZtymb8/yBgQjuVECwJZqRpEDHmv
QEcOrTsj8gYV7mL3dYGn0QgMNtnMPlsBg3BpgUbSxSPlsOrvmmGTs7O/kZUFsW/C
PVF9aCrX/EbBEEMQKxxGhKjnzz4lTII7qVheyqgkirflfGiJyOzZE5Bkzxfr7JwB
/Rm6q0ghVnLne5xg4evngJuqOdo3b1+puiqcUvX1BkZ3/0x+CE4dWL9mnngmm0Ei
cwLmkLS10SDoXKmn2n3fmgyQbXbDLuu2z+lQk77VAi2FFEatjscj0JkZ1rxMoQfK
hD1nTTJZKI+Hgp3Cf6e4MVdaUOq8f5Y=
-----END CERTIFICATE-----
Generated at Tue Nov 4 12:32:02 2025 by rpki-client