Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/167a78a6-e314-33c6-a33a-9b45eaf8c937.roa
File:                     167a78a6-e314-33c6-a33a-9b45eaf8c937.roa (raw, json)
Hash identifier:          3qLu/CfeW1qlsU9lzQo6EicMMVSo65RAFCpbnnTRPus=
Subject key identifier:   99:74:F7:89:4C:33:8E:50:8D:D8:5D:27:13:8C:75:A6:07:F8:CF:9E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B9177716BF012DD4C13D5E400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/167a78a6-e314-33c6-a33a-9b45eaf8c937.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:71:6b:f0:12:dd:4c:13:d5:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=85a0333b-04e6-4341-b0fd-9357ce68b330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:54:39:e5:c3:9d:62:d1:75:94:aa:21:c2:
                    72:0a:14:2b:01:4f:21:fe:fe:b3:78:35:80:52:09:
                    8f:33:bb:7f:f2:a9:b4:14:d7:bf:33:32:89:16:09:
                    fd:12:d4:1a:32:5c:eb:ac:1d:90:09:ca:44:22:6f:
                    98:70:15:2f:a5:2b:54:5e:54:cc:5e:3c:ac:d5:bc:
                    08:5c:1e:d9:fc:f2:bf:f3:f2:e3:f3:6c:eb:83:df:
                    11:5b:81:8f:74:2b:e8:fe:d0:a2:b9:2e:f8:7b:65:
                    33:89:df:9f:d0:7d:19:a4:2a:04:1a:ed:b5:f4:cf:
                    f2:d0:59:c8:6d:03:b7:32:e0:b8:17:6d:b2:4e:d7:
                    c4:d0:60:b6:0e:ca:c3:92:b8:65:51:8c:eb:ba:31:
                    1a:cf:85:f0:99:8e:9a:cb:66:bc:9c:1d:c1:3a:b8:
                    a9:b5:16:f5:92:64:6d:f6:0a:ef:32:01:a5:27:20:
                    53:ac:aa:2c:07:c0:f9:20:8e:0a:9b:a8:88:fd:7c:
                    71:86:20:49:0e:b7:79:33:3a:47:1e:8b:1a:58:b6:
                    a8:d8:9c:e5:10:aa:21:5c:75:7c:39:cc:1d:ad:5c:
                    a0:ce:97:a7:82:d2:46:2f:87:92:73:ca:7a:1d:4d:
                    c1:1b:18:3a:61:84:43:41:91:cb:39:e2:48:24:1d:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:74:F7:89:4C:33:8E:50:8D:D8:5D:27:13:8C:75:A6:07:F8:CF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/167a78a6-e314-33c6-a33a-9b45eaf8c937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:12:a7:3d:14:ab:96:f5:c0:9d:6f:e7:62:4c:bf:b4:3f:55:
         56:ed:7b:bf:2e:65:ac:ea:28:a2:40:04:68:00:a9:78:b3:c0:
         15:41:d1:a1:1d:a8:a0:dc:8f:66:f4:f7:76:d2:2a:2e:2e:f5:
         eb:27:df:5a:ae:b6:1d:98:78:27:c1:86:fa:b4:20:5e:9b:99:
         81:47:d6:a0:69:33:fa:40:e6:aa:ac:ef:6a:6e:d3:c6:44:4e:
         e3:0b:1b:20:bf:78:e4:b0:24:41:61:0f:01:6b:2f:57:0b:ce:
         bd:43:0f:03:83:da:e8:17:4f:82:f9:9b:4d:cb:92:40:2b:fa:
         91:0a:f1:8d:39:0e:16:26:f2:ff:bf:9a:2e:41:b8:97:26:f5:
         6d:87:74:cd:b7:67:b5:da:ac:47:27:35:e5:5f:62:5a:d8:cf:
         ab:1b:ab:d4:ef:46:43:db:b3:3b:e5:6d:da:fd:c8:1b:7f:b0:
         d2:c2:5a:c6:bd:8e:67:f7:9e:37:4e:06:64:4a:ca:08:49:3f:
         b1:04:d6:89:d4:9b:99:c7:52:d1:d7:d2:ac:5f:53:54:bb:12:
         1f:40:8e:e8:ee:2c:82:76:f5:00:84:a5:7f:df:c9:c1:3e:5c:
         2f:55:64:fc:20:2e:ee:e4:68:9e:17:3f:58:06:01:28:53:3b:
         7c:08:9e:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3Fr8BLdTBPV5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
ODVhMDMzM2ItMDRlNi00MzQxLWIwZmQtOTM1N2NlNjhiMzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ZUOeXDnWLRdZSqIcJyChQrAU8h/v6zeDWA
UgmPM7t/8qm0FNe/MzKJFgn9EtQaMlzrrB2QCcpEIm+YcBUvpStUXlTMXjys1bwI
XB7Z/PK/8/Lj82zrg98RW4GPdCvo/tCiuS74e2Uzid+f0H0ZpCoEGu219M/y0FnI
bQO3MuC4F22yTtfE0GC2DsrDkrhlUYzrujEaz4XwmY6ay2a8nB3BOriptRb1kmRt
9grvMgGlJyBTrKosB8D5II4Km6iI/XxxhiBJDrd5MzpHHosaWLao2JzlEKohXHV8
OcwdrVygzpengtJGL4eSc8p6HU3BGxg6YYRDQZHLOeJIJB192QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJl094lMM45QjdhdJxOMdaYH+M+eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTY3YTc4YTYtZTMxNC0z
M2M2LWEzM2EtOWI0NWVhZjhjOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcSpz0Uq5b1wJ1v52JMv7Q/VVbte78uZazqKKJABGgAqXizwBVB0aEd
qKDcj2b093bSKi4u9esn31quth2YeCfBhvq0IF6bmYFH1qBpM/pA5qqs72pu08ZE
TuMLGyC/eOSwJEFhDwFrL1cLzr1DDwOD2ugXT4L5m03LkkAr+pEK8Y05DhYm8v+/
mi5BuJcm9W2HdM23Z7XarEcnNeVfYlrYz6sbq9TvRkPbszvlbdr9yBt/sNLCWsa9
jmf3njdOBmRKyghJP7EE1onUm5nHUtHX0qxfU1S7Eh9AjujuLIJ29QCEpX/fycE+
XC9VZPwgLu7kaJ4XP1gGAShTO3wIngE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:21 2025 by rpki-client