Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0e2543d-2fc0-39b6-97fa-1f82f95844d4.roa
File:                     d0e2543d-2fc0-39b6-97fa-1f82f95844d4.roa (raw, json)
Hash identifier:          3Kiortpb4N5WRT6NWegOCBvQkWt7VwaoPNzlKLHD0Jk=
Subject key identifier:   D5:0D:CF:5D:60:54:EA:5B:A0:F7:78:F0:5C:97:BA:5E:C3:AF:A7:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B6798014B2DE3ADC08244AC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0e2543d-2fc0-39b6-97fa-1f82f95844d4.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.1.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:98:01:4b:2d:e3:ad:c0:82:44:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=15614e06-51ab-4a5b-ae08-11d33afb0c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:ab:64:df:03:c3:c8:6e:b6:59:4d:32:40:
                    ad:81:b2:21:08:45:e8:49:b9:c5:be:f1:cf:dc:77:
                    5f:fa:ed:db:ce:31:ad:34:bd:e1:c3:04:ca:d3:8f:
                    c9:de:47:a4:bd:48:50:d7:4f:6b:62:01:3a:52:37:
                    86:a4:ea:45:fb:d4:9a:af:e7:99:7d:19:7e:7e:2a:
                    17:c4:83:e5:f8:fc:50:da:6e:f4:bb:9c:43:57:52:
                    0c:40:22:2c:00:b6:d4:b4:77:e7:c1:bc:37:25:d8:
                    6b:d1:66:c1:12:ac:53:fd:04:9f:75:7b:a4:d1:f7:
                    c8:ad:b5:a9:cd:e6:9d:98:b9:12:59:e9:4c:a1:0d:
                    43:13:77:32:38:1c:6c:f3:23:61:85:ae:2e:9a:df:
                    93:74:f9:88:a0:5d:34:e9:53:b9:83:76:58:28:df:
                    fb:db:ea:59:eb:9a:6f:f3:00:a1:8f:5a:77:bb:74:
                    5e:9e:a7:3a:51:7e:fb:f3:97:f6:f9:7c:65:71:1b:
                    25:c8:70:c8:b9:42:53:0a:d7:45:46:c8:56:76:8b:
                    0c:a0:66:0d:12:89:88:40:3e:bb:7e:bc:65:b0:ab:
                    b7:64:e6:d1:47:10:da:ba:a5:8e:c2:78:ab:d8:f9:
                    18:3a:37:c5:69:a7:bf:92:30:f3:aa:4f:33:ee:04:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:CF:5D:60:54:EA:5B:A0:F7:78:F0:5C:97:BA:5E:C3:AF:A7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0e2543d-2fc0-39b6-97fa-1f82f95844d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:f6:b2:f2:8d:98:54:c2:5a:ca:ad:5f:e2:c8:05:25:43:
         b0:e8:fb:80:db:ae:3e:f7:1d:d0:10:e6:dd:d6:e0:bb:64:cc:
         c5:28:c4:a9:c2:56:a8:62:d5:83:e8:01:33:9d:b5:33:0f:11:
         e6:a4:6e:a6:42:7a:9f:bd:23:b4:1b:0e:89:f3:32:f8:47:0c:
         20:32:c1:95:68:0f:7f:d0:79:76:7f:b4:e5:b3:f9:1f:ea:fd:
         54:d9:18:da:f1:36:12:ae:16:99:ad:04:1a:88:96:d6:38:c9:
         ea:ae:56:30:32:b8:89:8b:a2:93:77:79:62:09:01:df:b8:7c:
         eb:87:3b:a9:c8:6a:ad:f4:9e:1d:22:f6:d9:34:b5:a2:41:e9:
         f6:78:78:36:ef:aa:29:fb:a7:8b:8c:2f:f0:fe:0b:b0:9e:6c:
         f5:c9:8b:08:b6:86:f1:be:15:4c:78:09:9b:2b:b8:ed:cc:c4:
         7c:4f:af:3b:da:cb:6e:21:4f:1d:aa:a5:d7:1c:ec:8d:23:93:
         66:2c:ad:eb:98:f6:95:9d:64:9b:43:a1:07:92:7f:4a:44:31:
         35:c6:7e:34:60:3b:1e:bf:da:a7:4a:cf:9d:96:5c:e7:12:0c:
         d3:59:66:cc:af:e8:03:25:8a:08:1b:94:41:ab:83:ca:bc:b6:
         2a:c7:c3:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmAFLLeOtwIJErIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MTU2MTRlMDYtNTFhYi00YTViLWFlMDgtMTFkMzNhZmIwYzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYyrZN8Dw8hutllNMkCtgbIhCEXoSbnFvvHP
3Hdf+u3bzjGtNL3hwwTK04/J3kekvUhQ109rYgE6UjeGpOpF+9Sar+eZfRl+fioX
xIPl+PxQ2m70u5xDV1IMQCIsALbUtHfnwbw3Jdhr0WbBEqxT/QSfdXuk0ffIrbWp
zeadmLkSWelMoQ1DE3cyOBxs8yNhha4umt+TdPmIoF006VO5g3ZYKN/72+pZ65pv
8wChj1p3u3Renqc6UX7785f2+XxlcRslyHDIuUJTCtdFRshWdosMoGYNEomIQD67
frxlsKu3ZObRRxDauqWOwnir2PkYOjfFaae/kjDzqk8z7gTiPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNUNz11gVOpboPd48FyXul7Dr6eNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDBlMjU0M2QtMmZjMC0z
OWI2LTk3ZmEtMWY4MmY5NTg0NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgE3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELp9rLyjZhUwlrKrV/iyAUlQ7Do+4Dbrj73HdAQ5t3W4LtkzMUoxKnC
Vqhi1YPoATOdtTMPEeakbqZCep+9I7QbDonzMvhHDCAywZVoD3/QeXZ/tOWz+R/q
/VTZGNrxNhKuFpmtBBqIltY4yequVjAyuImLopN3eWIJAd+4fOuHO6nIaq30nh0i
9tk0taJB6fZ4eDbvqin7p4uML/D+C7CebPXJiwi2hvG+FUx4CZsruO3MxHxPrzva
y24hTx2qpdcc7I0jk2YsreuY9pWdZJtDoQeSf0pEMTXGfjRgOx6/2qdKz52WXOcS
DNNZZsyv6AMliggblEGrg8q8tirHw1w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:20 2025 by rpki-client