Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6af9d34b-fdde-39e7-a764-b62017c26cfa.roa
File:                     6af9d34b-fdde-39e7-a764-b62017c26cfa.roa (raw, json)
Hash identifier:          8Vz3jX+Un0hF6yDO7iy1BpgXsWZUDKYg/BRghc+fr0A=
Subject key identifier:   7E:11:8F:13:94:6D:E1:9E:1D:41:30:C3:44:2E:24:EC:80:6F:FE:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B9177705553A2EE95DAED4B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6af9d34b-fdde-39e7-a764-b62017c26cfa.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:70:55:53:a2:ee:95:da:ed:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=6a367d72-529c-461b-ab8a-b099350032e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:b8:09:16:6b:c1:db:07:ea:b5:b9:a6:3e:
                    a8:e5:42:89:b0:48:aa:d3:a3:3b:65:92:34:2d:a9:
                    44:75:fa:c9:53:39:7e:54:bb:5b:ab:fa:71:77:5b:
                    fb:5c:b8:f4:07:56:06:20:f9:e5:f5:eb:14:2e:59:
                    49:09:8d:37:3d:9a:15:e2:04:43:3b:ad:87:f0:df:
                    ee:cc:60:e4:ab:82:8d:6a:21:18:2f:bc:b6:f2:ea:
                    e0:84:e3:c1:a2:57:cf:7b:10:87:2d:36:8a:a8:ef:
                    6a:06:4c:5a:81:a5:a0:53:33:39:e5:a8:53:8b:cf:
                    64:88:b2:82:1c:20:ed:31:86:c9:1d:1b:6f:5a:d2:
                    38:35:f7:11:e7:66:b7:8e:99:c1:2e:ba:27:f4:c3:
                    35:d0:0c:2b:d5:40:ec:cf:65:80:1e:74:2e:4b:9e:
                    01:73:4f:55:1f:18:3f:60:64:f9:a5:f3:0f:a0:96:
                    79:4b:96:c2:a3:69:a5:7b:39:b6:8e:01:13:43:18:
                    b0:e2:80:68:e8:37:9f:92:51:38:37:2a:b6:aa:20:
                    e8:b2:47:56:71:3f:63:4a:ed:02:ed:c4:b0:93:18:
                    8a:a0:7f:79:5e:8c:32:25:ca:4e:fa:d6:c0:95:b4:
                    48:92:5d:fd:f9:9f:91:02:9c:30:b5:ef:dd:6c:5a:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:8F:13:94:6D:E1:9E:1D:41:30:C3:44:2E:24:EC:80:6F:FE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6af9d34b-fdde-39e7-a764-b62017c26cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:19:5b:1a:e3:26:24:df:d8:1e:a2:c9:5d:2a:ec:2d:65:eb:
         54:a7:03:31:da:f6:15:72:e8:36:a8:5d:4c:06:9f:3d:55:d3:
         70:ed:a3:a4:3e:ec:c9:90:02:70:3a:01:4f:79:86:7b:2e:48:
         09:1c:68:3c:2f:6d:64:4a:0b:85:76:65:5e:04:3b:61:72:d9:
         66:ab:30:e8:6b:d5:5c:fa:0b:14:fd:05:f7:e0:d0:c8:9a:c8:
         1f:54:19:7a:d9:71:a9:d6:99:79:a6:03:86:ca:48:49:c6:44:
         1b:bd:0b:80:d9:6d:14:cb:cd:47:1e:16:85:54:0e:c7:2e:2b:
         2a:57:e9:30:e2:39:9c:63:0c:92:61:2f:3a:3b:d8:b1:13:bc:
         43:b4:be:4d:f8:fd:11:6a:80:de:c3:42:90:e1:56:a3:65:15:
         d4:fd:2d:37:c4:47:e4:f2:e2:41:5a:fe:fd:5f:87:63:83:b0:
         ae:f2:ae:3f:9b:3e:fc:61:93:43:28:cd:8f:f9:ce:37:47:ce:
         8c:43:83:bc:a3:99:32:14:4f:a1:f3:da:10:52:82:2d:50:c0:
         c0:33:ee:ff:36:91:a6:9a:41:8f:96:13:cc:17:74:90:c0:68:
         40:f4:bb:6c:b1:9d:5b:43:22:6d:da:77:d9:c4:ad:d2:fc:f6:
         be:18:2f:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3BVU6LuldrtS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
NmEzNjdkNzItNTI5Yy00NjFiLWFiOGEtYjA5OTM1MDAzMmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6C4CRZrwdsH6rW5pj6o5UKJsEiq06M7ZZI0
LalEdfrJUzl+VLtbq/pxd1v7XLj0B1YGIPnl9esULllJCY03PZoV4gRDO62H8N/u
zGDkq4KNaiEYL7y28urghOPBolfPexCHLTaKqO9qBkxagaWgUzM55ahTi89kiLKC
HCDtMYbJHRtvWtI4NfcR52a3jpnBLron9MM10Awr1UDsz2WAHnQuS54Bc09VHxg/
YGT5pfMPoJZ5S5bCo2mlezm2jgETQxiw4oBo6DefklE4Nyq2qiDoskdWcT9jSu0C
7cSwkxiKoH95XowyJcpO+tbAlbRIkl39+Z+RApwwte/dbFppnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4RjxOUbeGeHUEww0QuJOyAb/7NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmFmOWQzNGItZmRkZS0z
OWU3LWE3NjQtYjYyMDE3YzI2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgExMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQZWxrjJiTf2B6iyV0q7C1l61SnAzHa9hVy6DaoXUwGnz1V03Dto6Q+
7MmQAnA6AU95hnsuSAkcaDwvbWRKC4V2ZV4EO2Fy2WarMOhr1Vz6CxT9Bffg0Mia
yB9UGXrZcanWmXmmA4bKSEnGRBu9C4DZbRTLzUceFoVUDscuKypX6TDiOZxjDJJh
Lzo72LETvEO0vk34/RFqgN7DQpDhVqNlFdT9LTfER+Ty4kFa/v1fh2ODsK7yrj+b
Pvxhk0MozY/5zjdHzoxDg7yjmTIUT6Hz2hBSgi1QwMAz7v82kaaaQY+WE8wXdJDA
aED0u2yxnVtDIm3ad9nErdL89r4YL04=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:52 2025 by rpki-client