Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afbc7206-3c41-32bb-b15b-ca77041a88a9.roa
File:                     afbc7206-3c41-32bb-b15b-ca77041a88a9.roa (raw, json)
Hash identifier:          ttYR9h1oxTD6MdvgoVrprG+M7YfdGa3CyN/koVcco/Q=
Subject key identifier:   29:FE:0F:A9:1C:07:0A:07:45:F4:6E:AD:1B:C8:3A:38:EB:6C:92:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B821CCC3F0CCBCB7803406E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afbc7206-3c41-32bb-b15b-ca77041a88a9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     63023
IP address blocks:        166.1.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cc:3f:0c:cb:cb:78:03:40:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=537de3bb-8c5d-401d-bede-e3269306e290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:d8:df:ac:23:8b:8f:1b:f0:d9:aa:cc:19:
                    db:7f:d0:48:72:e0:0c:83:5f:60:d2:0b:f5:48:58:
                    1f:aa:1c:cb:e1:64:f1:48:f3:5b:06:de:27:42:35:
                    bb:99:56:85:78:02:fc:df:87:58:65:8f:d2:3d:28:
                    50:ef:de:cd:5e:3c:12:36:70:62:2f:b1:d0:d5:f5:
                    5c:d3:69:50:68:8a:4a:6f:3b:64:28:13:e9:23:7f:
                    9f:0a:ff:13:54:6b:b0:92:7a:15:5e:48:85:ab:b9:
                    5d:6b:d7:82:de:1f:f1:72:e1:b4:39:63:ea:98:48:
                    ad:ac:88:34:88:e4:fc:e4:98:33:85:2f:b9:59:c6:
                    c2:d7:20:ac:bf:79:73:f4:ed:37:09:ff:5b:e8:ca:
                    4a:44:1f:d2:74:b9:5e:f0:6c:35:c2:4c:6a:71:4c:
                    db:3f:03:6c:13:40:b5:74:a9:2e:25:bf:06:06:11:
                    92:b2:b2:c7:6e:ee:c7:12:74:b8:e6:1d:78:f4:0a:
                    c3:c7:8a:4e:b0:04:82:91:60:c5:02:58:0d:6a:eb:
                    89:80:a3:e8:c6:f3:98:3e:b8:1e:38:b6:ef:36:0e:
                    00:24:5b:cd:bb:89:77:bd:d9:82:7d:fa:f4:59:ef:
                    82:7d:66:4c:9f:5d:b4:df:24:ea:d6:49:a0:05:89:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:0F:A9:1C:07:0A:07:45:F4:6E:AD:1B:C8:3A:38:EB:6C:92:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afbc7206-3c41-32bb-b15b-ca77041a88a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:97:a2:63:ea:f8:df:36:98:19:a5:f1:bd:67:8a:1b:8b:bb:
         01:e3:a5:20:c0:55:eb:57:f2:97:7b:7d:98:5c:d6:df:cb:43:
         21:56:29:e2:bf:b0:47:e9:e0:f0:ff:2b:97:cb:8a:60:47:84:
         e0:23:bf:97:dd:36:91:65:7b:07:6a:15:a9:c0:ad:e8:8b:db:
         37:6b:7b:97:7b:55:77:0f:b3:57:24:fd:31:76:94:39:c2:92:
         ba:ef:23:18:02:05:93:7d:c8:3c:05:2f:3f:6b:ad:16:eb:ae:
         3c:43:91:08:a9:a7:4a:fa:50:f1:a9:5d:57:08:33:06:c2:4b:
         96:f2:1a:8b:89:a9:69:49:fc:3b:7d:b0:6d:93:3a:a5:d9:03:
         3a:cb:b8:43:35:ee:05:e6:ee:56:cc:3b:d6:9d:c1:f3:aa:a4:
         81:cb:9a:53:88:a8:13:ef:5a:41:bb:2e:96:18:92:89:ca:64:
         dc:15:18:af:bc:2d:44:23:35:8b:fc:34:eb:0d:14:ad:72:36:
         25:57:ec:a6:c0:19:7a:28:ed:89:9e:88:cd:39:2a:c5:40:ee:
         74:69:7a:dc:b2:5c:bb:a6:48:c7:87:f8:3f:aa:57:7b:1c:80:
         20:9b:b7:5f:b4:ad:e3:a3:20:59:20:99:f9:68:62:fa:14:a2:
         2d:41:c6:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMw/DMvLeANAbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NTM3ZGUzYmItOGM1ZC00MDFkLWJlZGUtZTMyNjkzMDZlMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTDY36wji48b8NmqzBnbf9BIcuAMg19g0gv1
SFgfqhzL4WTxSPNbBt4nQjW7mVaFeAL834dYZY/SPShQ797NXjwSNnBiL7HQ1fVc
02lQaIpKbztkKBPpI3+fCv8TVGuwknoVXkiFq7lda9eC3h/xcuG0OWPqmEitrIg0
iOT85JgzhS+5WcbC1yCsv3lz9O03Cf9b6MpKRB/SdLle8Gw1wkxqcUzbPwNsE0C1
dKkuJb8GBhGSsrLHbu7HEnS45h149ArDx4pOsASCkWDFAlgNauuJgKPoxvOYPrge
OLbvNg4AJFvNu4l3vdmCffr0We+CfWZMn1203yTq1kmgBYnQYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCn+D6kcBwoHRfRurRvIOjjrbJI2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWZiYzcyMDYtM2M0MS0z
MmJiLWIxNWItY2E3NzA0MWE4OGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyXomPq+N82mBml8b1nihuLuwHjpSDAVetX8pd7fZhc1t/LQyFWKeK/
sEfp4PD/K5fLimBHhOAjv5fdNpFlewdqFanAreiL2zdre5d7VXcPs1ck/TF2lDnC
krrvIxgCBZN9yDwFLz9rrRbrrjxDkQipp0r6UPGpXVcIMwbCS5byGouJqWlJ/Dt9
sG2TOqXZAzrLuEM17gXm7lbMO9adwfOqpIHLmlOIqBPvWkG7LpYYkonKZNwVGK+8
LUQjNYv8NOsNFK1yNiVX7KbAGXoo7YmeiM05KsVA7nRpetyyXLumSMeH+D+qV3sc
gCCbt1+0reOjIFkgmfloYvoUoi1Bxog=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:11 2025 by rpki-client