Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa
File:                     8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa (raw, json)
Hash identifier:          CRbOKm8NsCFC9CumqB73XSmhcDAhJbpjsJqgD25yFUc=
Subject key identifier:   20:F6:83:59:22:60:ED:26:68:5B:5F:D3:94:BB:57:18:76:10:80:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B758C9F004D3ABE7945F76F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     58061
IP address blocks:        166.1.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9f:00:4d:3a:be:79:45:f7:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=180333ca-8e9d-4afb-aa0f-3271311fdbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:15:cc:7f:fa:4d:5f:ea:94:63:1f:03:08:
                    96:05:f0:8a:6a:89:48:c8:88:98:81:3f:4c:31:45:
                    89:56:c0:98:d0:48:ea:4b:25:c2:1a:0e:97:7b:0e:
                    24:f7:ec:68:69:7c:f9:74:71:04:18:5f:99:09:3b:
                    46:c8:48:bd:04:f3:d7:7b:3a:17:fd:4a:e9:e8:64:
                    a5:fc:b9:91:2c:90:d7:d5:03:51:b4:bb:94:b9:68:
                    ea:34:69:e2:bc:6b:49:eb:9d:7e:c3:e2:ab:a4:50:
                    a2:0a:fa:74:7b:5d:d9:e6:6d:c1:a8:81:a5:d6:8e:
                    3b:5d:5c:a5:ef:a8:29:30:1c:50:59:9a:05:93:d9:
                    be:80:4a:c2:51:9b:59:e8:23:a9:4c:26:3b:3b:c8:
                    67:8a:17:27:ee:ea:a6:b7:b4:7d:00:40:5b:ad:c5:
                    d9:81:39:34:0c:78:fd:95:4b:05:4e:16:cb:b1:12:
                    9f:78:ef:45:1b:e6:46:48:56:3d:10:b6:ff:39:0c:
                    1a:78:00:87:2b:69:c0:3c:ea:46:e1:68:fc:69:95:
                    e4:fe:54:cf:65:0f:09:e5:1e:fc:74:cb:a4:c2:1d:
                    55:32:fe:a5:2f:ce:54:da:51:a8:6f:37:e3:b5:96:
                    03:5f:bd:dc:60:2e:97:2f:99:27:07:a3:d4:8a:11:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:83:59:22:60:ED:26:68:5B:5F:D3:94:BB:57:18:76:10:80:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:17:54:41:f0:7d:7e:77:f2:26:12:71:a0:73:6a:6a:5f:
         e1:d5:09:b1:2f:bc:5d:af:37:f9:0f:28:ce:6c:38:04:90:b6:
         d6:f2:44:02:49:dc:d9:7b:b1:9b:0c:2e:8e:2f:2d:f5:b0:9a:
         1a:a9:3c:8f:2c:3a:ed:e4:6c:c9:c6:a5:57:e2:40:28:25:b1:
         f1:b4:4e:64:e1:35:ab:3d:16:9b:17:2d:0e:f1:52:af:08:b8:
         61:a0:23:c3:89:cd:0e:4a:dc:3a:65:a0:b0:4d:95:58:07:1b:
         de:cd:ed:c1:49:c3:db:cd:45:47:cb:69:1f:bf:fe:74:e3:e5:
         05:7b:40:ae:7d:a5:2d:0e:31:ec:7c:ee:6f:9b:3a:67:51:69:
         f4:92:8a:9a:29:5f:d9:0f:ce:88:ec:44:de:4b:75:99:3b:46:
         c8:e9:88:36:c2:43:b7:10:1e:7c:2a:4d:2e:c3:b7:70:b9:f1:
         30:be:9d:00:42:20:2c:f9:6e:4f:ab:9d:28:22:02:00:5d:ba:
         04:82:fe:05:b9:f0:8b:2a:f6:00:f2:f0:1f:1f:a5:40:38:f4:
         bf:ff:70:7f:09:c5:2c:96:5b:b9:84:2f:be:d3:72:32:a5:c0:
         2f:24:0d:26:38:cf:78:5d:e3:89:0f:24:15:71:40:25:67:62:
         ca:9c:9f:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJ8ATTq+eUX3bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
MTgwMzMzY2EtOGU5ZC00YWZiLWFhMGYtMzI3MTMxMWZkYmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9oVzH/6TV/qlGMfAwiWBfCKaolIyIiYgT9M
MUWJVsCY0EjqSyXCGg6Xew4k9+xoaXz5dHEEGF+ZCTtGyEi9BPPXezoX/Urp6GSl
/LmRLJDX1QNRtLuUuWjqNGnivGtJ651+w+KrpFCiCvp0e13Z5m3BqIGl1o47XVyl
76gpMBxQWZoFk9m+gErCUZtZ6COpTCY7O8hnihcn7uqmt7R9AEBbrcXZgTk0DHj9
lUsFThbLsRKfeO9FG+ZGSFY9ELb/OQwaeACHK2nAPOpG4Wj8aZXk/lTPZQ8J5R78
dMukwh1VMv6lL85U2lGobzfjtZYDX73cYC6XL5knB6PUihH2lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCD2g1kiYO0maFtf05S7Vxh2EICrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGYxZWU3MWMtZjhkNy0z
NzNhLWEwN2MtMDdhYTQzNTUxYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxtF1RB8H1+d/ImEnGgc2pqX+HVCbEvvF2vN/kPKM5sOASQttbyRAJJ
3Nl7sZsMLo4vLfWwmhqpPI8sOu3kbMnGpVfiQCglsfG0TmThNas9FpsXLQ7xUq8I
uGGgI8OJzQ5K3DploLBNlVgHG97N7cFJw9vNRUfLaR+//nTj5QV7QK59pS0OMex8
7m+bOmdRafSSipopX9kPzojsRN5LdZk7RsjpiDbCQ7cQHnwqTS7Dt3C58TC+nQBC
ICz5bk+rnSgiAgBdugSC/gW58Isq9gDy8B8fpUA49L//cH8JxSyWW7mEL77TcjKl
wC8kDSY4z3hd44kPJBVxQCVnYsqcn7Q=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:35 2025 by rpki-client