Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9040d995-7bb3-30f2-83ac-5379a7b34f0c.roa
File:                     9040d995-7bb3-30f2-83ac-5379a7b34f0c.roa (raw, json)
Hash identifier:          tWsOtro2lxrpgGaN890wqa5SURif2QT9Q3LxIwGoZe8=
Subject key identifier:   B8:DE:F7:24:1E:9E:DD:58:85:56:A3:B0:A1:CD:EF:B7:64:3E:C1:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A3BD57421659AFA5C24E36C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9040d995-7bb3-30f2-83ac-5379a7b34f0c.roa
Signing time:             Wed 18 Jun 2025 16:03:32 +0000
ROA not before:           Wed 18 Jun 2025 16:03:32 +0000
ROA not after:            Tue 16 Sep 2025 16:03:32 +0000
asID:                     401152
IP address blocks:        166.1.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:d5:74:21:65:9a:fa:5c:24:e3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 18 16:03:32 2025 GMT
            Not After : Sep 16 16:03:32 2025 GMT
        Subject: CN=f0878e5f-267e-4fe7-8f06-21d6081100d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:3a:e4:30:ab:fb:f9:c4:7c:78:61:70:ed:
                    1d:c2:3e:62:7c:de:63:37:52:29:05:4b:03:d8:5b:
                    e7:57:95:2a:7e:eb:fd:2e:ef:b4:e2:aa:88:7b:5d:
                    c1:12:4b:9e:05:65:51:8e:78:35:f5:ef:22:d6:42:
                    49:e8:ec:8a:d9:a5:4a:41:de:7b:39:88:83:7f:77:
                    13:6e:6f:61:fe:15:49:50:0b:ab:5b:5f:9c:a4:d3:
                    ab:93:3e:89:2e:2f:ac:5c:64:ef:c1:bf:3e:e0:36:
                    42:24:be:b9:85:14:0a:bc:6e:81:95:f4:43:20:9f:
                    d7:5d:7b:af:0d:f3:f4:04:b1:60:13:97:8a:2d:d0:
                    8a:ad:5b:dc:0c:63:81:28:ff:d8:40:13:d5:36:39:
                    25:67:b9:28:be:30:f8:e2:41:e9:8a:5b:7d:1e:fc:
                    f9:1c:35:1a:54:f7:26:01:df:cf:f4:d2:bf:e6:51:
                    48:2d:44:9f:0e:35:13:6f:27:fa:81:35:4a:fd:bf:
                    26:4f:5a:3a:8f:7f:1a:f3:df:1a:de:0f:5d:39:53:
                    f2:37:47:ee:23:54:67:eb:93:5c:78:9b:69:c1:5a:
                    2f:84:88:d2:b6:df:d7:fd:78:b0:d0:67:f2:f4:14:
                    46:d1:82:69:f4:64:c5:a7:40:07:53:d9:e3:b0:c3:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:F7:24:1E:9E:DD:58:85:56:A3:B0:A1:CD:EF:B7:64:3E:C1:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9040d995-7bb3-30f2-83ac-5379a7b34f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:f8:22:5e:ce:0c:64:31:67:00:4f:b3:a5:93:b9:a2:3a:
         5c:91:42:c8:45:b8:b4:58:c2:51:1e:32:ea:ee:1e:3a:9e:ec:
         88:1d:6e:88:c1:0c:65:24:0c:d1:71:d5:76:67:75:9a:b8:e5:
         8c:a2:a5:a1:c7:cb:ad:81:33:a4:90:1b:5b:f7:9b:11:b7:93:
         d7:2e:4e:ce:83:d5:2e:02:86:3e:27:3d:76:98:d1:5c:1e:e7:
         a5:1b:36:75:ad:23:ec:0c:c4:da:6c:8b:88:1b:89:37:18:ed:
         6b:de:bf:18:21:f0:8e:50:8d:01:ab:7b:1a:2c:63:d8:69:0d:
         79:fc:3a:4a:48:81:69:a8:e9:0e:10:cb:45:fd:1b:89:6e:b1:
         08:da:c7:3d:4c:07:67:46:43:3c:ee:bb:3d:6d:74:f5:ed:f4:
         13:93:a7:59:ca:cd:db:11:ff:87:75:b7:92:5a:07:a8:33:40:
         3a:60:2c:31:21:a8:4c:31:44:41:61:e1:e5:eb:b9:94:1a:8e:
         e3:39:94:d7:9f:de:d3:a5:ca:ae:f3:2b:6d:31:c7:a1:7a:0c:
         8c:1b:3c:33:ab:65:8d:97:01:d2:fa:fa:02:85:34:74:6a:16:
         1a:db:e9:9c:99:ea:04:62:5b:ee:df:b5:93:da:e1:5a:29:bc:
         c2:9a:ca:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo71XQhZZr6XCTjbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDYxODE2MDMzMloXDTI1MDkxNjE2MDMzMlowLzEtMCsGA1UEAxMk
ZjA4NzhlNWYtMjY3ZS00ZmU3LThmMDYtMjFkNjA4MTEwMGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Q65DCr+/nEfHhhcO0dwj5ifN5jN1IpBUsD
2FvnV5Uqfuv9Lu+04qqIe13BEkueBWVRjng19e8i1kJJ6OyK2aVKQd57OYiDf3cT
bm9h/hVJUAurW1+cpNOrkz6JLi+sXGTvwb8+4DZCJL65hRQKvG6BlfRDIJ/XXXuv
DfP0BLFgE5eKLdCKrVvcDGOBKP/YQBPVNjklZ7kovjD44kHpilt9Hvz5HDUaVPcm
Ad/P9NK/5lFILUSfDjUTbyf6gTVK/b8mT1o6j38a898a3g9dOVPyN0fuI1Rn65Nc
eJtpwVovhIjStt/X/Xiw0Gfy9BRG0YJp9GTFp0AHU9njsMPIpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLje9yQent1YhVajsKHN77dkPsG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTA0MGQ5OTUtN2JiMy0z
MGYyLTgzYWMtNTM3OWE3YjM0ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA6+CJezgxkMWcAT7Olk7miOlyRQshFuLRYwlEeMuruHjqe7IgdbojB
DGUkDNFx1XZndZq45YyipaHHy62BM6SQG1v3mxG3k9cuTs6D1S4Chj4nPXaY0Vwe
56UbNnWtI+wMxNpsi4gbiTcY7Wvevxgh8I5QjQGrexosY9hpDXn8OkpIgWmo6Q4Q
y0X9G4lusQjaxz1MB2dGQzzuuz1tdPXt9BOTp1nKzdsR/4d1t5JaB6gzQDpgLDEh
qEwxREFh4eXruZQajuM5lNef3tOlyq7zK20xx6F6DIwbPDOrZY2XAdL6+gKFNHRq
Fhrb6ZyZ6gRiW+7ftZPa4VopvMKayko=
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:22:38 2025 by rpki-client