Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/10e2dd66-2429-3ee7-ba1b-78d266f3e528.roa
File:                     10e2dd66-2429-3ee7-ba1b-78d266f3e528.roa (raw, json)
Hash identifier:          ZwkJLdGWNLpFEUdQZQMIUGgx9a2r85JaDzriIcYpIuU=
Subject key identifier:   1D:03:4D:3B:73:73:E3:37:9B:7C:5C:4C:95:7C:C7:51:B3:22:7F:61
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584DC40061FFFBCB1952D2457CC0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/10e2dd66-2429-3ee7-ba1b-78d266f3e528.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        166.105.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:61:ff:fb:cb:19:52:d2:45:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=4618bb60-2475-4dd7-ac62-4ac33c605ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:54:44:f7:2f:36:33:44:d6:67:ac:e2:d3:
                    ef:0b:56:1b:8f:01:8f:bb:9c:23:a7:7c:44:2f:56:
                    ed:91:62:79:db:d6:6c:2b:fb:b7:3d:f0:25:8c:06:
                    73:66:9d:3b:47:b3:35:c0:c4:3a:d6:6b:a6:de:70:
                    ea:25:c6:71:c6:c6:6b:4c:6d:c7:af:7a:51:29:a2:
                    71:c4:01:fe:86:e8:8e:15:5f:2e:6d:c4:69:3c:76:
                    96:70:70:06:3f:14:52:b1:3a:63:69:13:f7:20:51:
                    50:4a:85:7d:f5:a2:e2:33:89:c4:a6:c6:51:b0:85:
                    9e:50:f9:6c:36:87:d4:71:a3:47:77:be:9f:19:1a:
                    a6:ac:f6:73:23:13:48:c5:78:04:c6:e9:de:ef:43:
                    94:35:c0:32:85:71:ef:38:c8:8b:22:3a:a8:9e:6a:
                    89:73:d6:cf:9d:d3:a1:48:e8:67:24:aa:ad:f2:93:
                    08:9e:3c:f8:44:b7:f2:c2:b1:3a:42:e4:d0:3f:e6:
                    83:ac:5f:16:55:10:7b:6e:d3:0f:0c:45:57:45:cd:
                    41:b2:25:3e:91:39:94:f9:07:68:0e:7b:ec:9e:1c:
                    cb:8c:22:15:c5:45:30:9c:86:8f:2c:85:bd:63:f9:
                    50:33:ef:91:88:a4:a6:5d:6a:f4:76:62:ce:16:98:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:4D:3B:73:73:E3:37:9B:7C:5C:4C:95:7C:C7:51:B3:22:7F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/10e2dd66-2429-3ee7-ba1b-78d266f3e528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.105.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:74:0c:0f:86:ea:50:e9:cd:57:96:49:85:79:3c:a1:26:9c:
         9b:f2:2a:f4:eb:a6:b6:23:3a:70:74:e8:92:35:0a:3c:03:27:
         f8:7d:97:8d:14:16:68:17:7c:cd:ec:d0:0b:7f:67:50:39:91:
         4b:a2:51:40:0f:3d:4f:b1:f1:5f:99:c8:69:22:8d:92:36:1f:
         93:cd:89:dd:bb:43:34:a4:02:33:17:d2:2c:dd:87:54:59:de:
         15:3d:7c:fb:f3:57:fd:16:98:22:a2:18:44:c6:8d:45:d2:e3:
         5e:d4:3b:b9:70:fb:ce:95:4d:c0:4b:0b:1c:2a:8c:82:af:22:
         38:44:96:45:cc:ed:c9:ec:f9:cf:07:aa:7c:cc:2a:41:e5:b1:
         a8:da:b8:d2:a1:79:45:11:98:25:1c:49:79:91:86:d0:ac:bf:
         99:98:fc:85:60:aa:d9:83:0e:3e:5e:07:d6:40:83:a6:e6:9c:
         c1:d5:e9:4b:67:59:fe:ef:7a:ce:4d:1e:82:f4:f2:fe:9c:c6:
         1c:2d:3d:1e:b8:ed:ef:aa:83:90:3f:6e:36:05:d5:dc:51:1b:
         a9:6f:00:ae:93:db:38:d7:38:a1:27:0e:4e:26:12:2a:2a:80:
         25:6b:0a:06:e6:00:cf:fa:51:2b:a6:4d:28:37:68:11:cb:64:
         10:fe:83:b4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3EAGH/+8sZUtJFfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk
NDYxOGJiNjAtMjQ3NS00ZGQ3LWFjNjItNGFjMzNjNjA1ZmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNdURPcvNjNE1mes4tPvC1YbjwGPu5wjp3xE
L1btkWJ529ZsK/u3PfAljAZzZp07R7M1wMQ61mum3nDqJcZxxsZrTG3Hr3pRKaJx
xAH+huiOFV8ubcRpPHaWcHAGPxRSsTpjaRP3IFFQSoV99aLiM4nEpsZRsIWeUPls
NofUcaNHd76fGRqmrPZzIxNIxXgExune70OUNcAyhXHvOMiLIjqonmqJc9bPndOh
SOhnJKqt8pMInjz4RLfywrE6QuTQP+aDrF8WVRB7btMPDEVXRc1BsiU+kTmU+Qdo
DnvsnhzLjCIVxUUwnIaPLIW9Y/lQM++RiKSmXWr0dmLOFphx0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB0DTTtzc+M3m3xcTJV8x1GzIn9hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMTBlMmRkNjYtMjQyOS0z
ZWU3LWJhMWItNzhkMjY2ZjNlNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApmkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAI3QMD4bqUOnNV5ZJhXk8oSacm/Iq9OumtiM6cHTokjUKPAMn+H2XjRQW
aBd8zezQC39nUDmRS6JRQA89T7HxX5nIaSKNkjYfk82J3btDNKQCMxfSLN2HVFne
FT18+/NX/RaYIqIYRMaNRdLjXtQ7uXD7zpVNwEsLHCqMgq8iOESWRcztyez5zweq
fMwqQeWxqNq40qF5RRGYJRxJeZGG0Ky/mZj8hWCq2YMOPl4H1kCDpuacwdXpS2dZ
/u96zk0egvTy/pzGHC09Hrjt76qDkD9uNgXV3FEbqW8ArpPbONc4oScOTiYSKiqA
JWsKBuYAz/pRK6ZNKDdoEctkEP6DtA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:22 2026 by rpki-client