Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b952558-1bb6-34da-9934-96f2a6260c1d.roa
File:                     3b952558-1bb6-34da-9934-96f2a6260c1d.roa (raw, json)
Hash identifier:          RprzDqq1FsF7efED24mnXJMEsQLbGzuBM0xkLsWMSvw=
Subject key identifier:   A5:C9:F5:08:E2:50:5C:02:29:EC:EF:4C:89:DF:D0:B1:97:69:8E:61
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB0757ECF9162E4A37B35E100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b952558-1bb6-34da-9934-96f2a6260c1d.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     149440
IP address blocks:        166.0.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:7e:cf:91:62:e4:a3:7b:35:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=725d745f-bbfd-4975-a797-1d7913c9a474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:24:b3:ed:d1:ff:d2:a8:b2:0c:3d:09:f0:
                    3d:a2:99:8d:69:16:ec:0a:f6:64:2d:51:89:77:05:
                    0a:84:86:8b:88:c2:94:25:25:fc:14:e2:cf:72:02:
                    8a:8b:06:29:24:59:09:f2:72:3b:61:32:da:84:51:
                    9e:53:5e:0f:a9:c7:c8:0e:10:f1:5f:10:9c:61:b4:
                    a9:5f:a0:b7:b2:c8:f7:62:15:cd:5f:20:18:c2:3a:
                    80:f3:76:0f:15:80:cb:46:4d:9b:1e:6f:4d:e8:67:
                    4e:24:57:d1:9f:a0:45:62:c5:b3:5b:87:76:b9:f7:
                    44:97:56:68:b0:21:c4:a7:32:3c:eb:69:07:dd:80:
                    ee:60:6a:09:e9:20:5e:69:f7:64:95:fb:1c:b1:44:
                    ff:22:f9:1d:58:fd:cf:dc:a8:8e:de:42:09:49:27:
                    fd:51:cf:02:62:cb:43:23:6b:25:55:88:83:48:8d:
                    41:b3:cb:0f:82:c4:d0:47:f4:95:09:e0:c8:ad:5c:
                    05:0e:21:b6:e0:44:58:f2:77:ea:02:67:a8:60:1e:
                    e5:40:b2:e9:ba:f3:fe:a2:e6:e8:ba:c4:f9:54:51:
                    ec:7f:1f:19:67:ef:32:01:01:bf:b3:a8:cf:c9:7e:
                    f6:fd:0c:f0:1e:23:6c:5d:11:92:f8:2e:e3:0b:71:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C9:F5:08:E2:50:5C:02:29:EC:EF:4C:89:DF:D0:B1:97:69:8E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b952558-1bb6-34da-9934-96f2a6260c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:95:7c:00:d4:93:5f:7d:7f:67:5a:66:24:dd:b0:e3:14:
         c0:a6:a7:8b:4b:89:c4:26:8b:1f:b6:fe:96:0c:58:ed:8a:ad:
         97:0f:ce:f6:50:d4:30:96:20:ed:c2:8f:c6:1c:23:94:ac:1a:
         f3:e5:25:fc:ef:d6:ed:3d:28:9f:a6:62:35:0e:bc:6e:56:a8:
         a9:fd:22:36:12:5f:48:ac:d9:e9:cd:81:02:00:97:a1:ef:68:
         f9:33:25:fa:60:47:d7:11:32:8d:47:3b:78:73:17:9f:93:77:
         a0:9e:c8:55:aa:fa:36:b9:ca:b1:28:8b:13:1e:f9:56:8e:d6:
         12:f5:be:05:86:30:d7:f5:03:b4:d6:4c:eb:c4:48:98:77:3f:
         32:21:7a:4d:68:15:24:cf:ee:fe:0c:2e:69:60:f5:6e:5b:38:
         ef:8e:03:fc:d0:1e:24:90:a7:e9:08:2f:27:10:b7:41:a6:26:
         ce:de:5c:51:24:18:13:81:00:92:e4:38:45:d3:f3:c6:9e:e4:
         50:d4:f1:a1:7d:81:93:d3:67:30:5f:a7:6a:db:a2:29:94:ce:
         3f:be:cf:88:c0:99:a7:ac:3d:56:a3:0b:91:70:dd:5e:d2:dc:
         39:5d:d6:0f:5c:45:9d:96:b4:81:65:27:b2:9b:b1:55:31:f9:
         6a:c7:f5:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdX7PkWLko3s14QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
NzI1ZDc0NWYtYmJmZC00OTc1LWE3OTctMWQ3OTEzYzlhNDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1gks+3R/9Kosgw9CfA9opmNaRbsCvZkLVGJ
dwUKhIaLiMKUJSX8FOLPcgKKiwYpJFkJ8nI7YTLahFGeU14PqcfIDhDxXxCcYbSp
X6C3ssj3YhXNXyAYwjqA83YPFYDLRk2bHm9N6GdOJFfRn6BFYsWzW4d2ufdEl1Zo
sCHEpzI862kH3YDuYGoJ6SBeafdklfscsUT/IvkdWP3P3KiO3kIJSSf9Uc8CYstD
I2slVYiDSI1Bs8sPgsTQR/SVCeDIrVwFDiG24ERY8nfqAmeoYB7lQLLpuvP+oubo
usT5VFHsfx8ZZ+8yAQG/s6jPyX72/QzwHiNsXRGS+C7jC3H5ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXJ9QjiUFwCKezvTInf0LGXaY5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2I5NTI1NTgtMWJiNi0z
NGRhLTk5MzQtOTZmMmE2MjYwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOhlXwA1JNffX9nWmYk3bDjFMCmp4tLicQmix+2/pYMWO2KrZcPzvZQ
1DCWIO3Cj8YcI5SsGvPlJfzv1u09KJ+mYjUOvG5WqKn9IjYSX0is2enNgQIAl6Hv
aPkzJfpgR9cRMo1HO3hzF5+Td6CeyFWq+ja5yrEoixMe+VaO1hL1vgWGMNf1A7TW
TOvESJh3PzIhek1oFSTP7v4MLmlg9W5bOO+OA/zQHiSQp+kILycQt0GmJs7eXFEk
GBOBAJLkOEXT88ae5FDU8aF9gZPTZzBfp2rboimUzj++z4jAmaesPVajC5Fw3V7S
3Dld1g9cRZ2WtIFlJ7KbsVUx+WrH9VU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:06:03 2026 by rpki-client