Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d6404c5d-58b7-311b-9579-c398bfa22780.roa
File:                     d6404c5d-58b7-311b-9579-c398bfa22780.roa (raw, json)
Hash identifier:          Vzb1O1RAY2uRscMfL79KBbeblZvja1SEcr/0vfejvAs=
Subject key identifier:   33:DC:26:05:FA:43:54:2A:A1:37:A6:C0:9D:8D:03:66:0C:8F:B7:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F4972E7A7970CFF45DEFED400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d6404c5d-58b7-311b-9579-c398bfa22780.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     149440
IP address blocks:        166.0.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e7:a7:97:0c:ff:45:de:fe:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5f7c8030-003b-49d6-98fa-60dac7c2d018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:c4:fe:b5:46:84:fe:6f:4f:3a:a0:0b:bd:
                    a5:35:7a:f3:e5:92:a2:ca:b7:82:67:af:dc:d6:d6:
                    5c:bb:52:8b:85:9e:44:47:95:f9:10:20:1c:b4:ff:
                    78:24:1b:0a:bd:ee:5a:07:ae:8a:cc:70:03:76:11:
                    2d:0b:c8:f8:fe:c3:10:2e:e7:69:2e:3c:f3:33:9f:
                    bc:e2:7d:b7:ac:25:39:97:1f:00:26:6a:d0:59:a2:
                    0d:26:d6:9f:2f:95:a2:4c:4a:d7:23:83:34:5a:e6:
                    98:10:56:8a:6c:8d:e3:a8:61:ad:61:44:0e:a7:f9:
                    84:07:fa:85:c7:6e:d2:4b:13:8d:75:24:03:57:04:
                    f9:d6:94:b8:5f:43:56:2b:ac:82:3c:8f:b3:21:e6:
                    c5:21:6a:9e:fc:57:03:34:39:2d:df:58:f6:2e:e9:
                    cf:c3:69:d3:ec:c9:28:31:19:81:01:a0:8d:0b:a4:
                    2f:a8:37:03:01:ea:33:b5:53:db:2e:d5:a0:e9:28:
                    8c:50:c2:aa:24:d7:d9:ad:0e:e3:40:bd:3a:04:04:
                    3b:8a:93:38:af:81:4e:5b:df:72:a7:98:8d:e7:83:
                    5c:29:e4:d5:21:2c:14:15:67:38:68:37:b3:cd:35:
                    01:23:7e:7b:47:ca:06:fd:18:4c:1c:08:8b:a4:66:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:26:05:FA:43:54:2A:A1:37:A6:C0:9D:8D:03:66:0C:8F:B7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d6404c5d-58b7-311b-9579-c398bfa22780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f0:88:55:04:4d:73:2b:a9:39:d3:3f:91:df:b5:f6:0b:20:
         e2:c9:ac:4e:bd:b1:f3:be:98:31:75:aa:5f:be:23:97:58:4f:
         69:bd:be:97:7c:3d:da:5b:ae:d7:5d:94:bc:71:bb:d4:2d:b7:
         fc:79:e1:3f:9f:91:81:a5:bb:d2:48:b1:32:0e:c3:a0:fb:b2:
         ec:39:82:88:ec:22:bb:c1:2a:ce:71:dd:76:29:69:fa:29:fc:
         48:34:d2:9a:42:68:81:47:ee:8c:6b:87:80:e1:5d:af:23:63:
         6c:c8:87:7b:db:5b:24:18:ef:3c:1c:41:e6:0a:54:d7:97:e0:
         21:fa:2f:59:67:3f:77:36:cb:e9:15:c7:16:72:52:da:54:d2:
         c9:81:34:02:36:b9:f6:f0:34:4c:47:b5:2c:89:cc:9e:b0:1e:
         c0:f5:93:65:65:66:c4:c8:50:41:c0:8a:60:ea:f5:c9:d2:e4:
         59:f8:3e:76:54:94:ca:bf:27:9c:45:37:61:9b:04:06:59:64:
         e2:c6:e4:fb:25:65:8b:38:ce:b3:17:5b:ca:c0:43:9b:ea:e0:
         a2:83:0f:88:39:81:65:34:b4:47:7f:eb:11:e6:6a:46:70:3d:
         c4:fb:91:f5:15:ed:67:de:7e:75:ef:fb:2b:f5:92:3a:a1:48:
         6b:cb:66:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcuenlwz/Rd7+1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWY3YzgwMzAtMDAzYi00OWQ2LTk4ZmEtNjBkYWM3YzJkMDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7LE/rVGhP5vTzqgC72lNXrz5ZKiyreCZ6/c
1tZcu1KLhZ5ER5X5ECActP94JBsKve5aB66KzHADdhEtC8j4/sMQLudpLjzzM5+8
4n23rCU5lx8AJmrQWaINJtafL5WiTErXI4M0WuaYEFaKbI3jqGGtYUQOp/mEB/qF
x27SSxONdSQDVwT51pS4X0NWK6yCPI+zIebFIWqe/FcDNDkt31j2LunPw2nT7Mko
MRmBAaCNC6QvqDcDAeoztVPbLtWg6SiMUMKqJNfZrQ7jQL06BAQ7ipM4r4FOW99y
p5iN54NcKeTVISwUFWc4aDezzTUBI357R8oG/RhMHAiLpGavZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPcJgX6Q1QqoTemwJ2NA2YMj7dVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDY0MDRjNWQtNThiNy0z
MTFiLTk1NzktYzM5OGJmYTIyNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKfwiFUETXMrqTnTP5HftfYLIOLJrE69sfO+mDF1ql++I5dYT2m9vpd8
PdpbrtddlLxxu9Qtt/x54T+fkYGlu9JIsTIOw6D7suw5gojsIrvBKs5x3XYpafop
/Eg00ppCaIFH7oxrh4DhXa8jY2zIh3vbWyQY7zwcQeYKVNeX4CH6L1lnP3c2y+kV
xxZyUtpU0smBNAI2ufbwNExHtSyJzJ6wHsD1k2VlZsTIUEHAimDq9cnS5Fn4PnZU
lMq/J5xFN2GbBAZZZOLG5PslZYs4zrMXW8rAQ5vq4KKDD4g5gWU0tEd/6xHmakZw
PcT7kfUV7WfefnXv+yv1kjqhSGvLZiU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:13:51 2026 by rpki-client