Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2111e390-b799-3c1d-9c9c-ed1b52e3a463.roa
File:                     2111e390-b799-3c1d-9c9c-ed1b52e3a463.roa (raw, json)
Hash identifier:          WCCeyh9xE/eLdULK1mKwq5jqJs72J6YT4IisbTjLkmM=
Subject key identifier:   5C:C9:A3:FB:F2:CF:D9:FB:29:31:5B:DD:AC:D5:2B:C7:7C:A0:C9:F4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B63D58C7EF5AECD81EC64AA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2111e390-b799-3c1d-9c9c-ed1b52e3a463.roa
Signing time:             Thu 02 Oct 2025 16:43:00 +0000
ROA not before:           Thu 02 Oct 2025 16:43:00 +0000
ROA not after:            Wed 31 Dec 2025 17:43:00 +0000
asID:                     401152
IP address blocks:        166.1.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:d5:8c:7e:f5:ae:cd:81:ec:64:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  2 16:43:00 2025 GMT
            Not After : Dec 31 17:43:00 2025 GMT
        Subject: CN=6bf9bb45-3d04-4e83-a141-a43ca8ebc78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:81:28:ae:9d:d3:8e:4d:c0:16:20:1b:d8:
                    87:d2:83:df:17:94:0a:60:f1:7a:33:7d:15:37:11:
                    d9:70:61:66:ab:48:8f:a7:8f:2b:f9:34:94:e8:94:
                    f5:60:1c:10:c1:70:d5:e8:b7:91:71:05:1a:fc:66:
                    18:cb:6e:c2:ab:15:12:21:93:85:c3:7d:25:f8:1b:
                    0c:ec:ea:39:ce:86:33:28:40:42:63:ef:56:77:d4:
                    46:9c:cd:e2:69:c6:8b:61:8c:dd:11:e3:d8:f7:be:
                    c3:aa:7f:28:be:8d:eb:07:ae:51:1e:2c:a3:ee:c8:
                    bf:5c:cb:09:80:a8:e1:98:40:00:08:03:0c:30:39:
                    ff:8d:14:33:bd:20:30:eb:b2:cd:2c:79:7c:5d:1f:
                    89:d1:bc:55:f2:11:0d:2a:a3:35:c1:17:2d:9a:d9:
                    20:df:17:bf:27:b0:77:8a:25:98:26:b7:f6:f1:a4:
                    3a:84:57:67:4b:a7:bf:0d:91:20:e8:e5:e8:28:f7:
                    da:5e:00:fd:3c:20:94:73:77:c1:32:68:44:ff:a2:
                    4c:25:d4:a0:c1:3e:50:09:3b:3f:6a:49:69:a4:db:
                    f8:dd:22:12:ec:1a:8b:5d:09:ad:f0:40:84:e2:a7:
                    ee:4e:30:d4:06:16:54:34:b4:e3:74:9a:bf:9f:f0:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C9:A3:FB:F2:CF:D9:FB:29:31:5B:DD:AC:D5:2B:C7:7C:A0:C9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2111e390-b799-3c1d-9c9c-ed1b52e3a463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:25:f3:86:df:d8:bd:1a:4e:61:3f:d6:58:81:fb:d1:82:
         d4:15:91:85:2f:a1:ec:54:a1:fa:a6:ac:a4:dc:63:a2:b6:c1:
         f4:b6:04:da:a0:24:27:05:90:0e:26:61:75:af:f1:3c:f0:96:
         10:7e:61:88:aa:a6:e0:29:90:25:75:d6:d3:d8:c8:57:0e:b3:
         7b:03:e2:fa:c4:13:89:07:b8:b3:4c:98:79:10:c4:1e:58:f5:
         02:73:c6:41:c4:22:b0:8d:6a:c3:91:b7:47:13:e2:5e:69:52:
         16:7d:27:55:09:c4:93:54:83:2c:a9:f2:95:54:cb:76:70:a4:
         85:39:49:43:9a:f6:62:e4:80:fc:2f:10:87:13:32:6c:f1:79:
         54:81:ad:18:d4:36:22:43:3b:ec:82:75:39:47:1f:47:49:fa:
         58:cf:a4:5e:85:1d:eb:3f:2f:42:58:18:82:4b:46:ca:e8:bc:
         d1:dc:14:9b:3d:dd:c6:2a:20:cd:00:6e:94:17:29:80:c3:eb:
         8f:62:97:3c:8b:7b:7c:58:40:21:ad:83:2f:0c:a5:9e:52:23:
         07:ae:5f:8d:7e:77:25:a1:28:1c:41:1f:00:bf:e7:49:5a:ed:
         5e:4b:c0:e7:e4:34:ef:52:d5:65:24:3b:7e:dc:4f:bf:42:08:
         4b:7f:e4:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtj1Yx+9a7NgexkqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAwMjE2NDMwMFoXDTI1MTIzMTE3NDMwMFowLzEtMCsGA1UEAxMk
NmJmOWJiNDUtM2QwNC00ZTgzLWExNDEtYTQzY2E4ZWJjNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSOBKK6d045NwBYgG9iH0oPfF5QKYPF6M30V
NxHZcGFmq0iPp48r+TSU6JT1YBwQwXDV6LeRcQUa/GYYy27CqxUSIZOFw30l+BsM
7Oo5zoYzKEBCY+9Wd9RGnM3iacaLYYzdEePY977Dqn8ovo3rB65RHiyj7si/XMsJ
gKjhmEAACAMMMDn/jRQzvSAw67LNLHl8XR+J0bxV8hENKqM1wRctmtkg3xe/J7B3
iiWYJrf28aQ6hFdnS6e/DZEg6OXoKPfaXgD9PCCUc3fBMmhE/6JMJdSgwT5QCTs/
aklppNv43SIS7BqLXQmt8ECE4qfuTjDUBhZUNLTjdJq/n/DNIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzJo/vyz9n7KTFb3azVK8d8oMn0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjExMWUzOTAtYjc5OS0z
YzFkLTljOWMtZWQxYjUyZTNhNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASjJfOG39i9Gk5hP9ZYgfvRgtQVkYUvoexUofqmrKTcY6K2wfS2BNqg
JCcFkA4mYXWv8TzwlhB+YYiqpuApkCV11tPYyFcOs3sD4vrEE4kHuLNMmHkQxB5Y
9QJzxkHEIrCNasORt0cT4l5pUhZ9J1UJxJNUgyyp8pVUy3ZwpIU5SUOa9mLkgPwv
EIcTMmzxeVSBrRjUNiJDO+yCdTlHH0dJ+ljPpF6FHes/L0JYGIJLRsrovNHcFJs9
3cYqIM0AbpQXKYDD649ilzyLe3xYQCGtgy8MpZ5SIweuX41+dyWhKBxBHwC/50la
7V5LwOfkNO9S1WUkO37cT79CCEt/5FA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:04 2025 by rpki-client