Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eeae060b-d415-345a-ad8e-60ecc853e8b7.roa
File:                     eeae060b-d415-345a-ad8e-60ecc853e8b7.roa (raw, json)
Hash identifier:          D2JRX39A9dBnvOB6kYbuzSmphBC9ezL/qxuGWV0PlNQ=
Subject key identifier:   53:4E:13:8F:A9:CD:43:70:03:D1:85:98:9A:64:8F:9A:3A:47:F7:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B917774EAF730FB5634352F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eeae060b-d415-345a-ad8e-60ecc853e8b7.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:74:ea:f7:30:fb:56:34:35:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=e08ef2a4-85d1-41d8-a41d-5a964acfe96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:87:6f:c7:e3:84:78:1c:18:4c:74:bc:f7:
                    01:84:39:be:17:3a:21:b3:9d:f4:db:05:4b:5c:89:
                    11:5c:63:7d:f6:6b:56:21:03:52:bb:9d:cf:40:33:
                    cd:e4:95:49:16:f4:b1:1a:27:53:76:38:2b:f1:19:
                    38:31:a4:3d:4e:7d:00:05:62:a6:b4:fd:bc:83:91:
                    3c:ac:c8:ca:37:36:19:e9:c2:35:63:a1:72:60:74:
                    f4:46:a9:c5:14:24:9d:14:ab:33:a3:45:95:11:2a:
                    5a:09:ea:0c:23:ca:fe:a7:b9:52:0e:fb:4e:c9:f2:
                    0b:0d:0c:e4:5c:a8:91:89:68:42:8c:03:38:5e:40:
                    14:4d:1c:d9:4b:00:6f:2f:85:76:34:20:58:a4:a0:
                    55:2b:0a:12:e7:b9:fd:67:17:8d:07:0e:fc:58:b1:
                    ab:08:d5:ec:d7:64:19:99:c2:ba:4e:07:af:5a:b5:
                    04:28:46:1c:cf:28:a7:9a:de:b8:4b:a8:ce:fa:de:
                    c4:5f:17:6d:8b:91:dc:29:be:9b:f2:9f:1e:25:6f:
                    cb:93:58:90:68:0c:0e:79:89:d4:c9:91:d6:8f:7a:
                    75:a0:97:20:3c:1a:6a:0d:b1:7f:34:63:f6:6a:ba:
                    47:7f:ad:80:c7:d0:75:f9:25:9e:76:66:36:53:5c:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:13:8F:A9:CD:43:70:03:D1:85:98:9A:64:8F:9A:3A:47:F7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eeae060b-d415-345a-ad8e-60ecc853e8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:57:f2:09:81:d1:b3:94:48:fd:f4:73:fd:15:b1:a8:ae:
         9d:55:02:0f:ce:a2:65:a8:3e:d3:15:8c:b2:03:b5:9e:68:31:
         f6:ff:fa:6d:69:5e:7e:5f:26:41:2c:ae:7a:d1:58:9d:a7:78:
         90:b4:28:85:d5:f2:a7:d9:ae:0b:20:2b:b3:15:ad:c4:aa:ce:
         53:40:e4:77:e9:e0:8a:01:00:08:b3:3f:4d:38:d6:f7:00:fb:
         6d:f9:04:6f:e4:39:74:0d:27:72:60:ec:a7:1a:fc:27:d2:d1:
         1b:77:38:bf:84:2f:aa:11:85:a0:5f:0f:3e:fb:3b:26:ec:29:
         ac:1f:b6:00:4c:94:de:77:bf:ac:11:b2:59:bb:60:71:8d:27:
         c1:4b:6e:16:15:01:d1:3c:90:f1:18:38:48:9b:6e:97:5e:c8:
         86:b1:e4:ab:10:8a:de:53:45:30:6c:e3:cb:52:63:7f:fc:1c:
         70:ed:e3:d7:4d:2c:22:dd:5b:c9:39:28:73:ce:bf:f4:48:8f:
         de:ff:4e:81:e1:b8:05:ef:6c:64:34:d4:13:33:1b:f9:ac:78:
         72:f3:dd:91:b1:05:2d:8d:9b:3e:25:af:30:63:e0:3b:60:7b:
         cb:2f:2c:ae:5d:e6:8a:69:f9:04:ed:83:d4:b8:af:b7:9f:9a:
         11:d8:ba:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3Tq9zD7VjQ1L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
ZTA4ZWYyYTQtODVkMS00MWQ4LWE0MWQtNWE5NjRhY2ZlOTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgaHb8fjhHgcGEx0vPcBhDm+Fzohs5302wVL
XIkRXGN99mtWIQNSu53PQDPN5JVJFvSxGidTdjgr8Rk4MaQ9Tn0ABWKmtP28g5E8
rMjKNzYZ6cI1Y6FyYHT0RqnFFCSdFKszo0WVESpaCeoMI8r+p7lSDvtOyfILDQzk
XKiRiWhCjAM4XkAUTRzZSwBvL4V2NCBYpKBVKwoS57n9ZxeNBw78WLGrCNXs12QZ
mcK6TgevWrUEKEYczyinmt64S6jO+t7EXxdti5HcKb6b8p8eJW/Lk1iQaAwOeYnU
yZHWj3p1oJcgPBpqDbF/NGP2arpHf62Ax9B1+SWedmY2U1wHgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNOE4+pzUNwA9GFmJpkj5o6R/fmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWVhZTA2MGItZDQxNS0z
NDVhLWFkOGUtNjBlY2M4NTNlOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrDV/IJgdGzlEj99HP9FbGorp1VAg/OomWoPtMVjLIDtZ5oMfb/+m1p
Xn5fJkEsrnrRWJ2neJC0KIXV8qfZrgsgK7MVrcSqzlNA5Hfp4IoBAAizP0041vcA
+235BG/kOXQNJ3Jg7Kca/CfS0Rt3OL+EL6oRhaBfDz77OybsKawftgBMlN53v6wR
slm7YHGNJ8FLbhYVAdE8kPEYOEibbpdeyIax5KsQit5TRTBs48tSY3/8HHDt49dN
LCLdW8k5KHPOv/RIj97/ToHhuAXvbGQ01BMzG/mseHLz3ZGxBS2Nmz4lrzBj4Dtg
e8svLK5d5opp+QTtg9S4r7efmhHYugA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:51 2025 by rpki-client