Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49ebf096-b781-36d0-9d7b-834279f06067.roa
File:                     49ebf096-b781-36d0-9d7b-834279f06067.roa (raw, json)
Hash identifier:          f/yCZXg8VLHZB02U0945IpXDuMGS6+WwbMH8tbSsUXU=
Subject key identifier:   8F:5F:58:E4:DA:83:A6:8D:4E:67:D4:24:07:B4:0C:DE:91:9C:C5:87
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777BDFC7993D9FE0771400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49ebf096-b781-36d0-9d7b-834279f06067.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7b:df:c7:99:3d:9f:e0:77:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=86091fa3-8ea1-47d9-968e-aec19da16386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d8:d2:c1:a1:20:17:73:02:8f:b0:40:2f:00:
                    6e:18:b5:23:c5:af:9b:49:c2:66:4c:80:56:bc:db:
                    aa:a8:35:46:8a:65:d0:8f:8d:e2:4b:02:d7:4a:11:
                    50:37:14:20:23:89:08:f2:24:27:8e:0c:00:4a:e8:
                    12:53:31:43:a0:08:ab:ba:4e:21:66:53:62:ae:f7:
                    53:f5:b9:f3:b8:e4:5d:d3:3b:a3:38:0f:f2:9c:6a:
                    36:c8:22:e4:4a:ef:7d:3c:18:87:6d:c3:b3:c4:64:
                    f4:90:ee:a7:70:a0:63:15:26:34:8e:f7:96:cd:3a:
                    92:13:22:3b:24:e9:40:10:9a:bc:cf:69:39:30:10:
                    1d:96:3b:34:b4:74:34:9a:d9:51:e1:92:b7:28:90:
                    94:56:9b:9a:b2:74:42:88:49:03:3d:9a:01:45:70:
                    7a:66:2b:20:ea:79:d3:e8:dd:2c:8a:24:d1:4b:c0:
                    c4:e1:97:68:d4:31:f5:fd:d5:61:3e:9f:bf:a6:42:
                    ce:47:e6:32:cd:d4:3b:38:24:56:fd:38:ca:59:c0:
                    86:a0:8b:f0:71:74:6d:dd:a6:88:9b:ad:72:51:cf:
                    19:21:3c:f9:a8:33:ed:46:3d:fe:14:f0:ed:7c:b3:
                    0d:83:49:61:7b:6e:11:c3:a1:ff:a2:15:af:11:a1:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:58:E4:DA:83:A6:8D:4E:67:D4:24:07:B4:0C:DE:91:9C:C5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49ebf096-b781-36d0-9d7b-834279f06067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:f9:31:a9:e6:2e:06:0b:f5:98:b7:80:85:ae:ee:e0:e0:
         a3:c7:70:5e:56:69:69:33:ea:f4:d9:5c:51:02:9f:df:a5:54:
         32:20:c9:78:4b:fc:04:08:0e:1c:a2:2e:49:1d:dd:c2:5a:ff:
         a4:be:14:80:01:62:6f:e1:ed:c6:72:56:98:ca:11:33:3e:31:
         92:9c:9a:5c:30:6d:fb:d0:1b:c6:8e:9a:82:00:f3:09:8d:ad:
         cc:bb:ab:3e:bd:1b:9d:5b:2f:35:0f:32:dd:4e:07:e5:4d:b2:
         f0:2d:92:b6:dc:87:af:ae:83:dd:4c:d0:b7:86:9d:de:e2:f5:
         9c:05:86:ed:99:ca:7f:fb:13:e4:c7:d7:9a:27:f9:a2:3e:65:
         1d:8b:df:d6:39:a0:f0:9b:cf:01:a4:36:00:c4:01:10:cd:97:
         83:eb:33:3e:24:76:11:b1:a6:b5:32:3e:c3:90:f7:77:19:de:
         6e:f8:55:13:62:d0:61:f8:c3:a3:e0:9a:be:20:bf:1f:bf:52:
         08:56:bf:81:86:a4:fd:7f:35:1d:5b:66:37:77:10:f6:6b:e5:
         2f:1f:47:d7:6e:56:41:b2:f3:7d:28:7d:1c:61:8e:8e:e3:08:
         21:f3:fd:57:23:74:ea:74:2e:d0:e0:77:a9:4c:c1:53:76:14:
         b8:42:4d:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3vfx5k9n+B3FAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
ODYwOTFmYTMtOGVhMS00N2Q5LTk2OGUtYWVjMTlkYTE2Mzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidjSwaEgF3MCj7BALwBuGLUjxa+bScJmTIBW
vNuqqDVGimXQj43iSwLXShFQNxQgI4kI8iQnjgwASugSUzFDoAiruk4hZlNirvdT
9bnzuORd0zujOA/ynGo2yCLkSu99PBiHbcOzxGT0kO6ncKBjFSY0jveWzTqSEyI7
JOlAEJq8z2k5MBAdljs0tHQ0mtlR4ZK3KJCUVpuasnRCiEkDPZoBRXB6Zisg6nnT
6N0siiTRS8DE4Zdo1DH1/dVhPp+/pkLOR+YyzdQ7OCRW/TjKWcCGoIvwcXRt3aaI
m61yUc8ZITz5qDPtRj3+FPDtfLMNg0lhe24Rw6H/ohWvEaESrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9fWOTag6aNTmfUJAe0DN6RnMWHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDllYmYwOTYtYjc4MS0z
NmQwLTlkN2ItODM0Mjc5ZjA2MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwZ+TGp5i4GC/WYt4CFru7g4KPHcF5WaWkz6vTZXFECn9+lVDIgyXhL
/AQIDhyiLkkd3cJa/6S+FIABYm/h7cZyVpjKETM+MZKcmlwwbfvQG8aOmoIA8wmN
rcy7qz69G51bLzUPMt1OB+VNsvAtkrbch6+ug91M0LeGnd7i9ZwFhu2Zyn/7E+TH
15on+aI+ZR2L39Y5oPCbzwGkNgDEARDNl4PrMz4kdhGxprUyPsOQ93cZ3m74VRNi
0GH4w6Pgmr4gvx+/UghWv4GGpP1/NR1bZjd3EPZr5S8fR9duVkGy830ofRxhjo7j
CCHz/VcjdOp0LtDgd6lMwVN2FLhCTd4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:18:54 2025 by rpki-client