Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3995483a-e757-31bf-8b1b-056a3967794b.roa
File:                     3995483a-e757-31bf-8b1b-056a3967794b.roa (raw, json)
Hash identifier:          SAGsKaOz4ZqJxJL3pOhv7PYNdsfDETZ+1nrGrB7v0FM=
Subject key identifier:   ED:CC:F7:FF:F8:61:73:8E:01:33:E4:C1:A3:73:1D:71:02:EC:5A:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B79BCAE679399121078DE5950
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3995483a-e757-31bf-8b1b-056a3967794b.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     401152
IP address blocks:        166.0.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:ae:67:93:99:12:10:78:de:59:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=074de305-27de-4a99-93a2-77180bd03eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9f:13:9f:29:db:14:f2:49:4e:d0:88:a2:e4:
                    d8:27:b5:31:16:be:b3:94:ed:1e:27:2b:7e:e8:e8:
                    6f:89:63:f3:41:7e:6f:5c:af:bb:71:99:c3:ed:39:
                    5f:6d:8a:9a:45:3c:ac:8f:40:04:6b:45:b2:8e:f4:
                    53:d7:b1:4a:2c:6b:4c:81:6a:3d:77:8e:f3:f8:a1:
                    b7:a7:1e:68:de:c8:f7:de:6c:59:1f:b0:68:0c:06:
                    83:92:ba:79:fe:f2:e8:47:2e:6c:09:40:9d:ce:03:
                    ca:75:ba:8f:34:61:a0:33:e8:fe:2a:d5:fb:1e:2e:
                    82:34:94:cd:15:d7:95:d2:52:7d:ee:dc:b8:06:df:
                    55:17:9f:24:a0:9f:26:7c:7a:c3:d6:ca:6e:7e:7a:
                    ed:5c:44:3a:9e:fb:cf:a6:35:a7:a4:b0:29:4b:ec:
                    51:1b:da:67:29:f6:5d:62:a3:a2:df:44:a0:7f:b2:
                    29:56:b1:2f:ed:3e:2c:6e:24:82:d2:0b:69:8a:21:
                    46:2f:05:a5:6e:c8:f8:8d:c8:15:b5:4d:8d:82:00:
                    22:92:75:28:dd:dc:ae:94:b1:7a:3f:b8:0d:00:6b:
                    45:07:d1:bb:c2:bd:18:af:5f:5d:6b:ba:aa:61:4b:
                    d2:2f:71:7f:6f:34:73:e4:78:13:c1:78:c2:32:db:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:F7:FF:F8:61:73:8E:01:33:E4:C1:A3:73:1D:71:02:EC:5A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3995483a-e757-31bf-8b1b-056a3967794b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:0f:cb:74:77:4a:f9:8e:bd:3b:85:dc:b6:aa:1e:e9:65:
         48:f4:24:31:e7:eb:a7:c1:b3:e3:b4:14:de:8c:92:d9:f1:26:
         58:b5:37:d4:8e:bf:f4:73:c4:16:34:22:b9:03:ea:ca:b0:02:
         3c:7a:bb:5b:7e:05:7b:e5:18:67:3b:fa:88:b6:bb:0f:fa:5c:
         ef:d0:8f:f1:47:0b:44:72:8f:95:58:05:38:d3:a5:9d:09:d0:
         33:5b:ef:10:d9:60:65:26:b4:b5:76:9a:86:57:70:b8:f1:63:
         c2:6b:9b:44:5d:45:c0:a3:a9:41:7e:14:87:2c:df:7b:09:c6:
         a2:75:55:a6:73:ee:1a:12:1a:57:54:b1:cc:7e:46:c5:75:df:
         2e:e8:67:da:39:ac:61:70:4f:56:55:02:f0:70:44:42:58:0d:
         fc:4a:2c:1e:8f:6a:1c:a4:bb:cd:72:e9:f5:bd:97:81:3f:fc:
         e0:10:0e:03:33:17:16:ab:0f:d5:45:3d:99:81:f6:29:00:5b:
         1e:36:2c:1c:c9:3c:bb:ba:7f:9c:21:11:b8:e4:8d:cf:d2:34:
         49:75:4a:26:38:c5:39:f2:f5:30:a3:8d:50:70:f2:96:58:88:
         4b:9f:6a:7c:7c:06:a1:df:16:5b:0d:1e:c8:88:1b:b6:b4:2b:
         2a:a8:8f:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vK5nk5kSEHjeWVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
MDc0ZGUzMDUtMjdkZS00YTk5LTkzYTItNzcxODBiZDAzZWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ8TnynbFPJJTtCIouTYJ7UxFr6zlO0eJyt+
6OhviWPzQX5vXK+7cZnD7TlfbYqaRTysj0AEa0WyjvRT17FKLGtMgWo9d47z+KG3
px5o3sj33mxZH7BoDAaDkrp5/vLoRy5sCUCdzgPKdbqPNGGgM+j+KtX7Hi6CNJTN
FdeV0lJ97ty4Bt9VF58koJ8mfHrD1spufnrtXEQ6nvvPpjWnpLApS+xRG9pnKfZd
YqOi30Sgf7IpVrEv7T4sbiSC0gtpiiFGLwWlbsj4jcgVtU2NggAiknUo3dyulLF6
P7gNAGtFB9G7wr0Yr19da7qqYUvSL3F/bzRz5HgTwXjCMtsbXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3M9//4YXOOATPkwaNzHXEC7FrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzk5NTQ4M2EtZTc1Ny0z
MWJmLThiMWItMDU2YTM5Njc3OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpgAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjuD8t0d0r5jr07hdy2qh7pZUj0JDHn66fBs+O0FN6MktnxJli1N9SO
v/RzxBY0IrkD6sqwAjx6u1t+BXvlGGc7+oi2uw/6XO/Qj/FHC0Ryj5VYBTjTpZ0J
0DNb7xDZYGUmtLV2moZXcLjxY8Jrm0RdRcCjqUF+FIcs33sJxqJ1VaZz7hoSGldU
scx+RsV13y7oZ9o5rGFwT1ZVAvBwREJYDfxKLB6Pahyku81y6fW9l4E//OAQDgMz
FxarD9VFPZmB9ikAWx42LBzJPLu6f5whEbjkjc/SNEl1SiY4xTny9TCjjVBw8pZY
iEufanx8BqHfFlsNHsiIG7a0Kyqoj94=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:40:00 2025 by rpki-client