Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
File:                     561321f5-144e-3b4d-b1f8-27b1230853fd.roa (raw, json)
Hash identifier:          UJLzJYcdP7IAoczTovTKgsR7QoT6NL4u57sTcHxnJBs=
Subject key identifier:   26:80:BC:93:E8:E9:5E:3E:7B:21:DB:D9:0F:44:C9:DF:80:D3:DA:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B92DD40F53599C492F28C5AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     58061
IP address blocks:        166.1.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:40:f5:35:99:c4:92:f2:8c:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=ce1c6b5e-2c1a-4b48-9284-4edda5806b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:e7:34:a0:ac:35:4f:08:de:ea:c5:5c:cc:
                    90:e2:cc:45:f0:3b:ab:48:16:dc:fe:8c:6c:97:9b:
                    bf:b4:87:19:cb:ce:96:73:46:61:30:c1:d2:4a:e9:
                    6f:8c:97:94:d7:34:cb:f5:bb:89:ef:31:8d:88:42:
                    b6:83:e1:7d:97:7a:96:ea:bd:bb:50:0c:be:f2:d1:
                    76:ae:e6:bb:83:6c:ba:a9:73:74:48:43:64:05:27:
                    6b:9b:33:0b:b1:a7:82:1a:78:1d:4e:f6:a1:45:38:
                    06:95:c6:93:0f:1f:17:be:92:8c:0b:de:70:0f:0d:
                    d5:59:ca:6f:7b:d2:59:d7:db:f1:38:fe:b2:a0:a4:
                    d7:b4:59:4b:61:bd:8d:53:9a:e8:ff:e9:ad:62:a5:
                    6e:c4:d3:83:2a:c7:9e:cf:41:a0:d8:16:bf:8f:83:
                    5b:9f:03:c5:fa:20:4e:95:78:f7:42:9d:b9:6b:45:
                    dc:d5:c8:b4:bd:5a:b9:d2:e1:16:62:44:28:b6:2c:
                    ed:b4:91:57:8a:44:b2:83:f9:ca:ca:48:d4:ac:47:
                    68:79:32:05:c4:56:df:9e:d4:3e:b9:41:f9:7d:93:
                    e5:65:16:9d:41:b3:5a:a4:ba:ca:70:8b:15:97:76:
                    c2:fc:37:a8:77:60:3a:00:48:a7:1b:2c:3a:a1:a2:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:BC:93:E8:E9:5E:3E:7B:21:DB:D9:0F:44:C9:DF:80:D3:DA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b9:08:32:cf:06:6f:ba:d2:6b:7a:55:10:aa:6e:2d:cf:5c:
         a7:db:bb:06:fa:fe:42:82:08:e7:95:be:49:a7:98:32:a0:f9:
         3c:9e:88:90:70:2b:86:6d:ca:8a:52:f4:1a:98:f3:e1:a7:02:
         47:30:f2:7e:e7:f4:05:7d:0e:d3:1d:94:3f:a1:f0:82:d3:83:
         c1:7e:4b:b8:49:5d:86:cf:ba:95:03:2f:4e:ff:c0:7a:d3:a3:
         ed:f0:90:b3:84:7f:c4:b9:6b:f9:7d:e8:fa:1f:b8:87:98:f3:
         25:46:46:87:56:d9:41:e1:17:3c:85:9b:af:61:90:bd:bc:4a:
         52:0f:c0:ed:b6:18:fb:fa:03:80:51:70:31:ee:cc:06:66:81:
         04:36:ce:e6:63:bf:be:3e:7c:11:eb:60:79:96:19:0e:15:c5:
         01:26:58:bb:eb:60:3a:9b:40:fb:22:4b:e9:86:23:b1:e8:73:
         80:e8:82:5b:ca:21:e6:d9:f0:77:9a:5c:88:b1:f1:ce:2a:1e:
         e2:6f:4e:83:e6:a0:3c:f8:e8:21:05:80:7b:cc:76:65:22:bf:
         5a:14:8e:ed:c3:f6:10:f4:3c:b7:47:b9:a2:cf:0a:13:00:49:
         62:64:a8:4d:4b:04:9e:a1:4a:9b:88:46:81:36:4b:dd:44:11:
         7f:6c:9b:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UD1NZnEkvKMWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
Y2UxYzZiNWUtMmMxYS00YjQ4LTkyODQtNGVkZGE1ODA2YjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDPnNKCsNU8I3urFXMyQ4sxF8DurSBbc/oxs
l5u/tIcZy86Wc0ZhMMHSSulvjJeU1zTL9buJ7zGNiEK2g+F9l3qW6r27UAy+8tF2
rua7g2y6qXN0SENkBSdrmzMLsaeCGngdTvahRTgGlcaTDx8XvpKMC95wDw3VWcpv
e9JZ19vxOP6yoKTXtFlLYb2NU5ro/+mtYqVuxNODKseez0Gg2Ba/j4NbnwPF+iBO
lXj3Qp25a0Xc1ci0vVq50uEWYkQotizttJFXikSyg/nKykjUrEdoeTIFxFbfntQ+
uUH5fZPlZRadQbNapLrKcIsVl3bC/Deod2A6AEinGyw6oaKpIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaAvJPo6V4+eyHb2Q9Eyd+A09p5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTYxMzIxZjUtMTQ0ZS0z
YjRkLWIxZjgtMjdiMTIzMDg1M2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgE6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIW5CDLPBm+60mt6VRCqbi3PXKfbuwb6/kKCCOeVvkmnmDKg+TyeiJBw
K4ZtyopS9BqY8+GnAkcw8n7n9AV9DtMdlD+h8ILTg8F+S7hJXYbPupUDL07/wHrT
o+3wkLOEf8S5a/l96PofuIeY8yVGRodW2UHhFzyFm69hkL28SlIPwO22GPv6A4BR
cDHuzAZmgQQ2zuZjv74+fBHrYHmWGQ4VxQEmWLvrYDqbQPsiS+mGI7Hoc4DoglvK
IebZ8HeaXIix8c4qHuJvToPmoDz46CEFgHvMdmUiv1oUju3D9hD0PLdHuaLPChMA
SWJkqE1LBJ6hSpuIRoE2S91EEX9sm9U=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:33 2025 by rpki-client