Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22ce11dd-c3b5-3934-9218-5a023025272a.roa
File:                     22ce11dd-c3b5-3934-9218-5a023025272a.roa (raw, json)
Hash identifier:          UWfDUelcKIaH3bq2PhggaqEkkkjOKCWz4s7oeNO0eyg=
Subject key identifier:   41:52:BA:AA:99:76:6D:4F:A8:70:CA:75:12:4E:ED:4B:73:5E:79:FE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F374D378672F4A76B31058D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22ce11dd-c3b5-3934-9218-5a023025272a.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        166.0.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:37:86:72:f4:a7:6b:31:05:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=e9b2fc09-350d-4f46-83fb-605f5bd2460a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:35:8b:cb:bc:2d:c0:7e:41:9e:a2:88:1a:
                    a3:66:c0:16:a4:5a:5a:52:84:a5:f7:3b:e6:f1:d3:
                    11:db:d7:48:f3:2c:43:05:64:df:b4:6b:9e:c6:05:
                    05:a3:a5:08:83:e9:4c:47:af:cc:32:b9:d3:4e:f6:
                    5a:68:f4:c3:49:d1:9d:21:f0:3b:df:25:39:de:1a:
                    2d:18:50:40:af:ea:e9:3f:dc:f2:02:4a:85:13:d8:
                    ae:1f:39:00:09:9d:24:25:e8:e0:39:55:a1:f5:8b:
                    0b:81:31:b3:22:53:9e:5d:fd:28:37:63:cb:45:c6:
                    50:89:e6:37:19:77:73:06:87:43:1b:c0:e7:4b:50:
                    0b:a2:3a:5b:b2:44:7f:2b:1d:db:e5:cb:e8:f1:7f:
                    77:6b:17:20:e6:e8:23:2e:58:67:1e:2f:2d:dc:8e:
                    6d:8b:c1:81:aa:19:15:f7:53:0e:17:4d:0c:f3:c5:
                    44:55:24:2d:ae:67:35:d6:68:a0:24:6a:46:90:fd:
                    9d:e7:fb:78:0a:13:44:c0:4f:f0:72:37:e9:fc:42:
                    be:60:f8:81:ea:7b:9b:54:ee:ae:9c:8c:5d:6b:e3:
                    0f:b7:f7:14:68:56:83:cf:8d:19:fa:d3:cd:ec:d6:
                    77:b1:15:8f:bc:70:f0:1b:ec:19:47:06:3c:c2:92:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:BA:AA:99:76:6D:4F:A8:70:CA:75:12:4E:ED:4B:73:5E:79:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/22ce11dd-c3b5-3934-9218-5a023025272a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:7e:75:aa:ad:04:cf:7d:79:a4:da:eb:78:59:81:1f:df:
         08:6e:44:14:59:e4:b6:a5:d8:70:70:f5:ab:79:40:78:e4:fa:
         a9:77:7e:f8:ec:c2:6c:09:8f:9c:90:b3:be:74:f0:5f:aa:71:
         f1:e9:af:55:a4:5a:8c:3d:54:c7:0f:9c:d3:f4:03:5d:24:1b:
         90:95:13:83:e5:a3:4e:c8:4c:ca:ff:81:4a:69:76:b5:8b:5c:
         34:f4:f8:61:d5:88:82:15:f1:c9:2e:bd:bb:74:55:32:c8:3e:
         ec:98:e8:0a:ce:ba:0b:8c:53:9a:f4:bb:0a:82:fd:f5:40:62:
         24:86:fc:40:83:87:70:91:19:1d:15:f9:0d:9a:0a:09:96:be:
         5f:1d:2b:0a:19:25:de:e8:4d:72:85:5d:8e:0d:b1:96:d8:e0:
         00:b9:2a:e2:e1:16:f6:33:0f:79:9b:96:c2:a9:85:06:35:d3:
         27:28:9d:02:c6:d1:5c:c7:a7:a2:ef:ba:40:17:83:4c:52:56:
         b0:84:70:80:f3:fa:1b:04:e3:4c:a1:b3:e6:a5:7d:8b:49:bc:
         2c:e2:f5:9e:a3:65:a0:d7:fb:2e:ef:c7:73:8b:ff:e5:6f:27:
         0a:98:ca:3e:8a:b8:05:c4:00:23:99:a9:d4:79:ae:05:f6:cb:
         3d:0c:89:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TTeGcvSnazEFjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
ZTliMmZjMDktMzUwZC00ZjQ2LTgzZmItNjA1ZjViZDI0NjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu01i8u8LcB+QZ6iiBqjZsAWpFpaUoSl9zvm
8dMR29dI8yxDBWTftGuexgUFo6UIg+lMR6/MMrnTTvZaaPTDSdGdIfA73yU53hot
GFBAr+rpP9zyAkqFE9iuHzkACZ0kJejgOVWh9YsLgTGzIlOeXf0oN2PLRcZQieY3
GXdzBodDG8DnS1ALojpbskR/Kx3b5cvo8X93axcg5ugjLlhnHi8t3I5ti8GBqhkV
91MOF00M88VEVSQtrmc11migJGpGkP2d5/t4ChNEwE/wcjfp/EK+YPiB6nubVO6u
nIxda+MPt/cUaFaDz40Z+tPN7NZ3sRWPvHDwG+wZRwY8wpI3/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFSuqqZdm1PqHDKdRJO7UtzXnn+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjJjZTExZGQtYzNiNS0z
OTM0LTkyMTgtNWEwMjMwMjUyNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgA9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4JfnWqrQTPfXmk2ut4WYEf3whuRBRZ5Lal2HBw9at5QHjk+ql3fvjs
wmwJj5yQs7508F+qcfHpr1WkWow9VMcPnNP0A10kG5CVE4Plo07ITMr/gUppdrWL
XDT0+GHViIIV8ckuvbt0VTLIPuyY6ArOuguMU5r0uwqC/fVAYiSG/ECDh3CRGR0V
+Q2aCgmWvl8dKwoZJd7oTXKFXY4NsZbY4AC5KuLhFvYzD3mblsKphQY10yconQLG
0VzHp6LvukAXg0xSVrCEcIDz+hsE40yhs+alfYtJvCzi9Z6jZaDX+y7vx3OL/+Vv
JwqYyj6KuAXEACOZqdR5rgX2yz0MiQc=
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:49:30 2026 by rpki-client