Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4802e3fc-a83e-3e6e-8232-603cb2eb91ee.roa
File:                     4802e3fc-a83e-3e6e-8232-603cb2eb91ee.roa (raw, json)
Hash identifier:          VBWAlLspK0lu8ClIkNRmiN22PjZuvMmRvsKrUfZeRD4=
Subject key identifier:   45:DF:1D:8F:25:91:45:FE:61:AE:4A:F7:FD:28:61:7A:A4:0F:9B:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B679804B1C408451ACCB3B4E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4802e3fc-a83e-3e6e-8232-603cb2eb91ee.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:04:b1:c4:08:45:1a:cc:b3:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=735cc874-8d5d-4578-be13-e3183ef3a5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:24:6c:5a:50:b1:36:59:93:f4:de:8f:29:
                    a4:65:6b:00:7b:e4:bc:82:22:97:0e:92:d5:55:86:
                    59:af:3a:1b:52:e0:0d:f9:f8:47:d6:0c:f9:82:91:
                    5e:c9:d0:2f:c3:e1:72:4f:56:95:c0:a8:74:d7:53:
                    05:98:22:e5:58:44:e6:9a:a9:fb:04:a9:e8:14:4b:
                    c5:e6:53:c2:e0:f3:30:af:22:c9:cc:7d:7c:cf:05:
                    db:31:3a:2d:dc:e3:5a:12:ea:64:3a:10:6d:71:90:
                    42:9e:aa:fa:e7:a7:69:08:e1:89:c1:fa:f7:c1:25:
                    e4:06:4b:7c:9e:c2:45:fe:af:9c:15:db:15:94:df:
                    88:4e:1d:ae:d8:72:45:dd:bc:0c:43:ef:dd:04:88:
                    c1:6b:2e:73:b6:c7:80:f0:b8:99:72:57:36:ad:0c:
                    6e:3b:99:b1:2b:25:2e:24:1c:41:32:67:02:7b:6b:
                    e3:fc:9d:84:c3:9f:06:7b:96:43:8c:25:03:71:0d:
                    2b:ab:8b:f4:55:5f:38:4e:b6:60:94:5a:45:19:e6:
                    36:31:67:6a:69:6b:06:7e:b6:49:d8:5f:37:ee:ae:
                    9c:7b:30:c7:74:7d:8e:ef:c6:54:dd:5f:f4:d0:51:
                    4d:60:5b:71:61:2e:d3:7c:c9:ab:c8:03:50:2a:6a:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DF:1D:8F:25:91:45:FE:61:AE:4A:F7:FD:28:61:7A:A4:0F:9B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4802e3fc-a83e-3e6e-8232-603cb2eb91ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:a6:ba:83:25:7f:2e:3b:f8:60:9e:65:fb:37:47:a0:a3:
         1f:98:97:9f:7d:7a:f5:83:ff:fd:65:d4:9a:26:71:fa:51:72:
         92:a5:95:26:dc:ae:d1:76:e5:3b:ee:92:90:2d:ce:93:d2:0e:
         ba:7e:a1:76:e8:ab:3d:69:13:08:fd:48:c2:ff:ba:44:29:6c:
         a9:6e:a1:b0:c0:32:1d:ce:c5:42:ac:12:2b:08:de:14:ec:21:
         b8:33:d4:c3:cc:49:f5:c3:88:91:36:15:19:40:5c:17:e8:ff:
         5d:3e:37:bd:da:3a:82:74:ce:01:03:78:ec:2d:b5:78:72:d1:
         3a:af:c3:c4:79:dc:6f:00:9f:96:47:17:ab:e8:b5:f3:8b:0d:
         0f:59:da:ba:17:d4:90:e1:da:35:06:db:2d:f8:65:79:1e:94:
         ec:c4:5e:87:35:92:40:c2:c4:19:ee:e4:bb:0c:b7:af:16:6d:
         4f:35:ed:7a:bc:d5:fc:13:a0:fe:ec:2f:cc:b6:66:6f:39:aa:
         d0:5c:c9:30:c1:1c:89:56:71:f7:a2:38:fb:91:b6:e9:38:c6:
         35:48:23:59:61:00:30:10:39:36:55:72:c8:d1:db:53:cf:b8:
         96:fa:2b:bb:7f:22:2b:c3:7f:4a:57:91:4f:83:55:72:3c:9f:
         46:e8:fb:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmASxxAhFGsyztOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
NzM1Y2M4NzQtOGQ1ZC00NTc4LWJlMTMtZTMxODNlZjNhNWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeEkbFpQsTZZk/TejymkZWsAe+S8giKXDpLV
VYZZrzobUuAN+fhH1gz5gpFeydAvw+FyT1aVwKh011MFmCLlWETmmqn7BKnoFEvF
5lPC4PMwryLJzH18zwXbMTot3ONaEupkOhBtcZBCnqr656dpCOGJwfr3wSXkBkt8
nsJF/q+cFdsVlN+ITh2u2HJF3bwMQ+/dBIjBay5ztseA8LiZclc2rQxuO5mxKyUu
JBxBMmcCe2vj/J2Ew58Ge5ZDjCUDcQ0rq4v0VV84TrZglFpFGeY2MWdqaWsGfrZJ
2F837q6cezDHdH2O78ZU3V/00FFNYFtxYS7TfMmryANQKmq4cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXfHY8lkUX+Ya5K9/0oYXqkD5vOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDgwMmUzZmMtYTgzZS0z
ZTZlLTgyMzItNjAzY2IyZWI5MWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxJprqDJX8uO/hgnmX7N0egox+Yl599evWD//1l1JomcfpRcpKllSbc
rtF25TvukpAtzpPSDrp+oXboqz1pEwj9SML/ukQpbKluobDAMh3OxUKsEisI3hTs
Ibgz1MPMSfXDiJE2FRlAXBfo/10+N73aOoJ0zgEDeOwttXhy0Tqvw8R53G8An5ZH
F6votfOLDQ9Z2roX1JDh2jUG2y34ZXkelOzEXoc1kkDCxBnu5LsMt68WbU817Xq8
1fwToP7sL8y2Zm85qtBcyTDBHIlWcfeiOPuRtuk4xjVII1lhADAQOTZVcsjR21PP
uJb6K7t/IivDf0pXkU+DVXI8n0bo+5o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:31 2025 by rpki-client