Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91da6aee-8a4e-36ac-96af-883606a6edb1.roa
File:                     91da6aee-8a4e-36ac-96af-883606a6edb1.roa (raw, json)
Hash identifier:          Oo0BDO0E9E0h4F4qqwXBHYM1QdDC34L64mN/8MHBqiA=
Subject key identifier:   B1:28:2B:94:36:42:A0:26:7A:6E:3F:F8:B3:82:A4:18:A4:43:38:6A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E90BA4F1E46D16062D282FE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91da6aee-8a4e-36ac-96af-883606a6edb1.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        166.0.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4f:1e:46:d1:60:62:d2:82:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=017fead3-7da8-41fc-8a1e-fe11b0b6a4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:66:44:e8:ff:b6:84:5e:df:76:2d:9f:d6:
                    5e:24:fa:a9:20:43:92:a5:cd:71:e4:c0:eb:d0:4e:
                    77:dc:c4:3b:08:aa:6e:81:0f:0c:cf:0c:c1:8f:13:
                    9d:0e:78:72:28:ea:73:c9:73:9a:76:13:24:c2:ef:
                    5e:59:ec:64:6b:f2:08:04:03:3f:b5:af:40:ed:43:
                    cb:42:dc:71:6e:91:8b:f7:bb:dc:0d:92:e4:d6:3a:
                    ff:f0:bf:bd:12:87:53:01:57:29:9b:4a:30:a5:cc:
                    c3:7e:0b:c7:6d:63:da:53:a8:40:fa:af:82:a5:a6:
                    a9:12:f9:7e:a4:4b:7b:18:16:3b:2d:ae:45:42:e5:
                    5b:0b:c9:93:06:73:66:e8:28:5a:c6:64:e9:2f:30:
                    8a:d8:27:34:b4:09:34:5e:8c:03:9c:a2:39:75:a9:
                    ab:25:f0:d7:86:77:7d:b7:55:21:8c:61:4a:a3:cf:
                    80:1b:ef:2e:dd:bd:a3:c0:10:a3:b8:1d:90:13:09:
                    24:a4:68:6b:a2:38:aa:93:7a:82:6e:6a:68:1b:42:
                    ba:9b:7b:8d:5d:14:1f:a9:8b:91:78:e8:8f:25:7f:
                    24:6a:b7:2c:70:dc:96:51:32:3a:1a:6a:09:1b:34:
                    3f:7a:15:9a:19:a5:a5:ea:9b:a9:44:19:06:62:9e:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:2B:94:36:42:A0:26:7A:6E:3F:F8:B3:82:A4:18:A4:43:38:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91da6aee-8a4e-36ac-96af-883606a6edb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:71:01:91:48:ce:07:60:ba:fd:e3:d6:38:73:dc:2e:2b:
         8d:bf:eb:c4:b0:61:81:01:49:fa:dd:b0:99:b8:85:e3:c0:95:
         74:d6:83:ac:9d:b1:a4:24:1b:c8:d3:62:77:b3:e4:5d:6d:76:
         f9:20:7b:13:6f:09:4a:d5:6c:b4:64:8e:44:1d:82:9e:6c:c7:
         f0:4f:b3:8d:fa:cc:f7:af:48:75:ae:23:d1:78:5e:10:9e:0d:
         ed:12:17:c1:89:91:a5:e6:2a:d2:ef:d3:ee:95:c9:bc:96:4e:
         8d:be:72:0c:81:9a:17:c6:b0:f3:44:cb:05:01:21:62:0b:13:
         ee:73:0e:e3:cf:9f:36:ca:d8:fb:2e:41:b0:78:a4:91:4e:7a:
         65:d4:ec:59:30:7d:e0:56:7e:91:33:38:85:9e:17:73:d6:74:
         cd:b3:a7:e1:f2:f1:46:64:28:13:85:20:b8:4e:16:ec:d8:90:
         ba:80:58:de:5a:06:15:91:b5:69:14:c4:15:29:6c:e0:80:e1:
         be:a0:ae:3a:69:ac:51:76:c3:bf:93:4f:0a:d1:39:23:0c:40:
         88:55:be:06:46:3d:bb:9e:18:97:87:a8:44:29:23:3f:a9:2c:
         cf:20:f8:80:b3:65:29:88:ce:5a:13:3c:0b:a2:01:24:51:4a:
         ce:a0:0d:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Quk8eRtFgYtKC/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
MDE3ZmVhZDMtN2RhOC00MWZjLThhMWUtZmUxMWIwYjZhNGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpJmROj/toRe33Ytn9ZeJPqpIEOSpc1x5MDr
0E533MQ7CKpugQ8MzwzBjxOdDnhyKOpzyXOadhMkwu9eWexka/IIBAM/ta9A7UPL
QtxxbpGL97vcDZLk1jr/8L+9EodTAVcpm0owpczDfgvHbWPaU6hA+q+CpaapEvl+
pEt7GBY7La5FQuVbC8mTBnNm6ChaxmTpLzCK2Cc0tAk0XowDnKI5damrJfDXhnd9
t1UhjGFKo8+AG+8u3b2jwBCjuB2QEwkkpGhrojiqk3qCbmpoG0K6m3uNXRQfqYuR
eOiPJX8karcscNyWUTI6GmoJGzQ/ehWaGaWl6pupRBkGYp7QswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEoK5Q2QqAmem4/+LOCpBikQzhqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFkYTZhZWUtOGE0ZS0z
NmFjLTk2YWYtODgzNjA2YTZlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6jcQGRSM4HYLr949Y4c9wuK42/68SwYYEBSfrdsJm4hePAlXTWg6yd
saQkG8jTYnez5F1tdvkgexNvCUrVbLRkjkQdgp5sx/BPs436zPevSHWuI9F4XhCe
De0SF8GJkaXmKtLv0+6VybyWTo2+cgyBmhfGsPNEywUBIWILE+5zDuPPnzbK2Psu
QbB4pJFOemXU7FkwfeBWfpEzOIWeF3PWdM2zp+Hy8UZkKBOFILhOFuzYkLqAWN5a
BhWRtWkUxBUpbOCA4b6grjpprFF2w7+TTwrROSMMQIhVvgZGPbueGJeHqEQpIz+p
LM8g+ICzZSmIzloTPAuiASRRSs6gDa4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:57 2026 by rpki-client