Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29d00887-15d7-348d-aad9-0d04b1de0e13.roa
File:                     29d00887-15d7-348d-aad9-0d04b1de0e13.roa (raw, json)
Hash identifier:          FXuXMDZZveDpIvOBALixYm1BUdt8sXIsT28uX5aexFk=
Subject key identifier:   A5:CF:D0:E1:87:A6:7F:92:8A:63:19:52:F2:91:40:59:7A:97:87:77
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7B2209C4A7E3544B5AA3D500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29d00887-15d7-348d-aad9-0d04b1de0e13.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        166.0.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:09:c4:a7:e3:54:4b:5a:a3:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=1d726d0e-ca89-4ec7-9a11-fb9a1cb4c984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:bb:de:ad:e6:47:b1:c4:de:57:28:33:c4:
                    7c:aa:7d:46:81:82:4b:80:3d:9f:df:ef:c9:00:d1:
                    9c:4d:57:44:5a:55:e8:0e:3e:8d:b8:bb:db:c7:35:
                    ac:d4:65:5f:40:9e:00:4a:9d:d8:37:ee:49:69:74:
                    ad:4a:ae:b9:a8:2e:32:8b:a6:7d:4a:f4:d8:85:fe:
                    c5:42:38:1b:1b:a3:2e:8f:08:25:a3:3c:a0:5d:0c:
                    7a:a1:55:15:01:89:62:d5:08:a8:91:26:c7:22:55:
                    bb:f7:4b:1f:c8:15:d0:a2:01:3b:76:92:06:69:fe:
                    1b:7f:ab:2e:78:2a:b2:47:54:db:78:12:1b:23:08:
                    a2:43:4d:c8:60:2b:5d:cf:ae:be:76:86:84:a9:a4:
                    ed:f2:e6:ef:94:95:2d:6e:8d:6e:a2:67:b6:73:e2:
                    1b:42:90:96:71:86:15:6c:24:81:26:87:20:2d:30:
                    6a:38:c6:0c:a0:94:71:10:76:2d:6e:e6:79:ca:e8:
                    da:42:6f:0a:f8:b3:5a:41:33:79:19:93:5c:04:6a:
                    33:2c:a8:4b:95:6b:3e:b7:b8:ae:00:45:54:47:52:
                    1f:95:18:20:b0:9a:b6:24:55:a7:a6:6d:a4:27:dd:
                    56:dc:3b:b2:af:42:b3:ea:df:c3:3f:9d:49:15:33:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:D0:E1:87:A6:7F:92:8A:63:19:52:F2:91:40:59:7A:97:87:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29d00887-15d7-348d-aad9-0d04b1de0e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:c9:39:19:0a:e5:b8:30:f4:4c:e2:70:8b:f3:8a:87:36:
         50:6b:fa:85:db:5b:1d:71:eb:07:e3:c8:22:4e:0c:bf:3c:46:
         0a:70:24:e7:3a:1c:c7:ca:b7:b0:44:a2:28:a1:f6:8e:5c:1f:
         04:af:94:e4:8b:0c:96:ec:8d:9a:b5:e9:05:42:5d:44:cc:67:
         31:ba:4f:55:9d:d0:c4:b3:3f:d5:bd:df:cc:8a:d1:df:8f:13:
         12:da:a0:1d:fa:6a:14:01:21:8e:fb:3d:5c:75:02:b8:2c:56:
         b3:1f:d5:03:18:73:65:da:ed:6c:13:3b:57:30:69:2e:3c:b5:
         ff:79:b6:00:b9:59:db:71:c9:eb:e4:07:92:06:2c:cf:37:4c:
         f3:13:80:de:93:52:f8:41:bd:02:83:ab:35:49:21:c7:04:2c:
         84:a5:8b:6d:02:31:40:d3:4c:10:38:63:2b:c6:06:5a:75:3e:
         83:c4:5e:9c:a8:12:a6:e9:2d:4d:c8:69:b0:b3:ae:70:d5:a5:
         9e:2d:bd:89:3b:fb:60:84:52:b9:92:70:50:cc:8b:a6:72:f2:
         78:fd:5f:28:06:2d:3f:09:25:f5:17:6b:43:b2:35:a8:9b:4e:
         15:15:bd:82:5c:2b:c3:87:05:73:3f:4a:36:6b:f6:41:20:c8:
         a2:98:11:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgnEp+NUS1qj1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk
MWQ3MjZkMGUtY2E4OS00ZWM3LTlhMTEtZmI5YTFjYjRjOTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMm73q3mR7HE3lcoM8R8qn1GgYJLgD2f3+/J
ANGcTVdEWlXoDj6NuLvbxzWs1GVfQJ4ASp3YN+5JaXStSq65qC4yi6Z9SvTYhf7F
QjgbG6MujwglozygXQx6oVUVAYli1QiokSbHIlW790sfyBXQogE7dpIGaf4bf6su
eCqyR1TbeBIbIwiiQ03IYCtdz66+doaEqaTt8ubvlJUtbo1uome2c+IbQpCWcYYV
bCSBJocgLTBqOMYMoJRxEHYtbuZ5yujaQm8K+LNaQTN5GZNcBGozLKhLlWs+t7iu
AEVUR1IflRggsJq2JFWnpm2kJ91W3Duyr0Kz6t/DP51JFTNmFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXP0OGHpn+SimMZUvKRQFl6l4d3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjlkMDA4ODctMTVkNy0z
NDhkLWFhZDktMGQwNGIxZGUwZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+IyTkZCuW4MPRM4nCL84qHNlBr+oXbWx1x6wfjyCJODL88RgpwJOc6
HMfKt7BEoiih9o5cHwSvlOSLDJbsjZq16QVCXUTMZzG6T1Wd0MSzP9W938yK0d+P
ExLaoB36ahQBIY77PVx1ArgsVrMf1QMYc2Xa7WwTO1cwaS48tf95tgC5Wdtxyevk
B5IGLM83TPMTgN6TUvhBvQKDqzVJIccELISli20CMUDTTBA4YyvGBlp1PoPEXpyo
EqbpLU3IabCzrnDVpZ4tvYk7+2CEUrmScFDMi6Zy8nj9XygGLT8JJfUXa0OyNaib
ThUVvYJcK8OHBXM/SjZr9kEgyKKYEUs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:18 2025 by rpki-client