Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78d0132b-ed45-3375-b129-cacfd6ee6315.roa
File:                     78d0132b-ed45-3375-b129-cacfd6ee6315.roa (raw, json)
Hash identifier:          Ypq5OFGYgbRAv1XHTHb4MIzpSe06KHFtS9qqi+oLb6U=
Subject key identifier:   A9:86:31:4A:C8:F9:10:53:12:B0:2F:6D:B4:DC:2E:FD:14:57:F5:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777530DDE0977873C089E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78d0132b-ed45-3375-b129-cacfd6ee6315.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:75:30:dd:e0:97:78:73:c0:89:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=ad0b3b53-d000-43e7-8355-ecd0f13c098f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:10:f0:17:5d:f6:da:dd:10:cd:0e:f3:0c:
                    15:be:21:e8:4b:a8:f1:c4:ef:53:d1:6c:7a:26:3e:
                    99:3b:95:33:46:8e:db:7d:7e:6b:83:05:a5:b2:57:
                    79:92:9f:23:70:f4:fe:b7:ea:51:a5:a7:e4:cd:35:
                    5c:ff:64:c4:16:e9:5d:61:11:df:84:e6:7d:19:f3:
                    cc:b0:82:fa:fa:b1:02:cc:21:38:ad:3a:0f:b7:0b:
                    78:f7:5b:9e:eb:09:c7:19:26:f4:e5:b2:c8:02:ba:
                    9d:43:ea:ca:7a:2d:d2:ae:8b:ac:36:28:d8:16:32:
                    b0:80:90:70:bd:65:fa:18:36:e3:b1:e7:ea:9f:1e:
                    34:2a:b6:15:b0:dc:35:6a:c2:be:c5:26:d3:81:2c:
                    6d:05:64:92:0a:c6:2f:63:05:97:a6:c7:30:61:26:
                    1b:22:13:46:50:f8:0e:8d:ad:73:4d:b6:4c:97:30:
                    94:fe:6a:2e:f9:af:ee:68:34:5b:1f:8f:ef:cf:9b:
                    68:0a:0d:0b:45:3d:69:d0:9c:8f:4e:d3:d2:88:24:
                    3b:98:0e:17:4c:75:31:3e:de:8e:b6:dd:b0:9b:fc:
                    b7:13:73:15:27:89:cc:3f:d0:6b:98:69:2c:f3:11:
                    d1:2b:a2:a9:9e:65:1f:6d:6c:55:ec:c0:f2:6e:d4:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:31:4A:C8:F9:10:53:12:B0:2F:6D:B4:DC:2E:FD:14:57:F5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78d0132b-ed45-3375-b129-cacfd6ee6315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:78:d3:1e:dc:8b:c5:f1:8d:23:4f:48:e1:d7:3d:28:ae:
         6f:5f:67:84:14:c6:26:bc:7c:a8:e2:6d:a1:47:52:2d:31:22:
         0a:65:a7:f9:81:4c:9d:f9:c1:a4:4e:be:a7:ff:cd:76:b2:27:
         c1:2d:f7:68:e0:18:73:9c:ed:45:61:f8:d3:e6:88:0b:ae:d7:
         a5:35:2c:0b:49:9e:08:ff:fc:c9:94:a0:20:15:66:f2:a0:89:
         cc:2f:3a:09:f8:79:03:29:b1:96:4b:d4:38:d5:fa:ab:8b:d2:
         9a:a6:5c:8c:4a:48:02:24:9f:3a:fb:05:00:96:3d:e2:a4:89:
         85:cb:88:e8:42:03:3c:a2:b3:02:e9:41:c6:46:7c:64:39:27:
         46:a7:bc:ed:cb:e5:36:33:41:8d:3c:8e:ac:e7:6c:cf:bc:51:
         f8:6e:b5:ac:4b:4c:93:f3:7e:1b:38:29:f5:35:a0:2c:ab:12:
         e2:56:98:a4:61:da:a4:71:93:48:2f:1c:50:9d:a5:42:b9:68:
         97:1d:d6:52:1b:5d:be:ad:2f:a0:6d:7d:57:75:9f:6b:41:aa:
         56:34:9b:7d:da:1a:8f:e3:4d:c6:da:ae:06:91:1d:21:0c:2f:
         c0:5d:22:01:33:4e:93:1e:05:dd:0b:5d:b1:97:a9:84:b1:51:
         82:3b:9d:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3Uw3eCXeHPAieAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
YWQwYjNiNTMtZDAwMC00M2U3LTgzNTUtZWNkMGYxM2MwOThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAsQ8Bdd9trdEM0O8wwVviHoS6jxxO9T0Wx6
Jj6ZO5UzRo7bfX5rgwWlsld5kp8jcPT+t+pRpafkzTVc/2TEFuldYRHfhOZ9GfPM
sIL6+rECzCE4rToPtwt491ue6wnHGSb05bLIArqdQ+rKei3SrousNijYFjKwgJBw
vWX6GDbjsefqnx40KrYVsNw1asK+xSbTgSxtBWSSCsYvYwWXpscwYSYbIhNGUPgO
ja1zTbZMlzCU/mou+a/uaDRbH4/vz5toCg0LRT1p0JyPTtPSiCQ7mA4XTHUxPt6O
tt2wm/y3E3MVJ4nMP9BrmGks8xHRK6KpnmUfbWxV7MDybtQ8BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKmGMUrI+RBTErAvbbTcLv0UV/VPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzhkMDEzMmItZWQ0NS0z
Mzc1LWIxMjktY2FjZmQ2ZWU2MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTReNMe3IvF8Y0jT0jh1z0orm9fZ4QUxia8fKjibaFHUi0xIgplp/mB
TJ35waROvqf/zXayJ8Et92jgGHOc7UVh+NPmiAuu16U1LAtJngj//MmUoCAVZvKg
icwvOgn4eQMpsZZL1DjV+quL0pqmXIxKSAIknzr7BQCWPeKkiYXLiOhCAzyiswLp
QcZGfGQ5J0anvO3L5TYzQY08jqznbM+8UfhutaxLTJPzfhs4KfU1oCyrEuJWmKRh
2qRxk0gvHFCdpUK5aJcd1lIbXb6tL6BtfVd1n2tBqlY0m33aGo/jTcbargaRHSEM
L8BdIgEzTpMeBd0LXbGXqYSxUYI7nao=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:21 2025 by rpki-client