Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efcf4f2b-db60-33cd-a41e-0ee8ea775115.roa
File:                     efcf4f2b-db60-33cd-a41e-0ee8ea775115.roa (raw, json)
Hash identifier:          ptQOuU577bx+tHLTcbnqhsRkyr7fYhdd/1XJLCa+xVY=
Subject key identifier:   81:3A:13:7A:1F:F2:51:58:6B:1E:C6:02:E5:69:A7:E1:7E:5B:A8:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B91777D21C13906B46EB96D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efcf4f2b-db60-33cd-a41e-0ee8ea775115.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        166.1.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7d:21:c1:39:06:b4:6e:b9:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=138960b1-7973-4b07-b7c7-550b0f46fdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:9b:6b:ea:1d:f8:7b:85:6d:67:1a:cc:dd:
                    5d:ae:c4:1f:57:bc:b1:72:73:87:7f:9f:35:d3:9d:
                    66:82:60:1a:67:15:54:bb:bd:e4:0e:a9:aa:c6:59:
                    b6:bc:a9:2a:c1:e5:10:77:4f:a2:81:66:3a:6c:c4:
                    75:96:77:9d:23:a6:45:3a:a6:d2:a3:3c:eb:e0:7c:
                    57:e9:af:be:88:75:27:40:9b:87:f0:9a:20:9e:34:
                    06:e7:bc:13:5d:b0:00:fe:6b:46:75:8b:fc:63:ca:
                    4f:5c:db:2e:b4:aa:5d:12:f3:6c:8f:8c:78:74:26:
                    da:30:62:b3:97:77:a4:65:ba:b4:f2:fc:41:03:e0:
                    e4:56:d0:53:55:c0:1c:da:86:3f:ce:53:63:9c:3a:
                    98:2f:5d:35:17:42:88:45:91:da:29:71:8d:9e:ae:
                    ab:ab:3e:97:c7:8d:7a:4e:57:d7:4c:84:dc:f0:92:
                    78:8e:d6:0e:e1:5a:df:53:90:0f:11:e5:55:64:eb:
                    ea:81:9e:83:f0:e1:80:fe:77:75:4a:9c:17:d8:2a:
                    07:05:d9:da:1e:20:65:c6:75:7e:fe:de:31:5a:34:
                    4b:fa:f7:fc:a1:f0:c7:1a:c0:b3:e6:82:eb:9d:49:
                    d9:fc:82:63:e2:71:11:20:28:fa:c9:0e:b0:b5:8b:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:13:7A:1F:F2:51:58:6B:1E:C6:02:E5:69:A7:E1:7E:5B:A8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efcf4f2b-db60-33cd-a41e-0ee8ea775115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:f0:e3:74:28:98:5e:b5:6c:8f:3a:a5:55:8e:9a:fd:d1:
         88:78:59:d7:95:ff:f7:3e:f2:28:21:e4:14:24:f9:b1:a2:1f:
         32:85:ef:ae:8c:ba:2a:43:be:de:f5:a2:7b:77:47:4f:38:a5:
         af:8d:d3:3c:b4:7e:29:b9:39:f4:1f:77:99:4d:2a:13:21:d9:
         47:b5:46:44:dd:c1:ed:65:98:59:82:d3:fc:0c:fc:de:ba:c6:
         07:79:9d:f4:58:68:1c:a3:06:8e:37:78:5e:d1:ff:c0:d2:eb:
         03:c0:1c:e7:16:15:40:75:cc:e2:46:87:0a:94:3c:f0:d4:76:
         27:34:07:2f:36:f1:b1:92:33:5e:90:d2:91:0e:a6:fe:f6:1f:
         0a:98:06:cf:07:5a:8e:77:5e:0e:70:db:89:df:31:79:da:f6:
         59:7b:f0:6f:09:5a:c6:57:82:03:cf:4c:ee:50:ec:f1:97:d9:
         ff:40:1a:b1:dd:af:05:08:02:dd:da:b6:51:be:a9:8a:cb:d1:
         aa:22:48:6c:9a:af:16:d1:06:db:b4:29:28:38:a3:57:39:82:
         42:e0:b8:d5:54:d4:0d:bd:d8:49:2e:de:34:ed:d6:1f:4f:61:
         e9:48:c5:7b:58:80:0b:c1:73:11:bd:06:6c:54:62:63:70:8b:
         fa:39:53:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd30hwTkGtG65bUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
MTM4OTYwYjEtNzk3My00YjA3LWI3YzctNTUwYjBmNDZmZGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmba+od+HuFbWcazN1drsQfV7yxcnOHf581
051mgmAaZxVUu73kDqmqxlm2vKkqweUQd0+igWY6bMR1lnedI6ZFOqbSozzr4HxX
6a++iHUnQJuH8JognjQG57wTXbAA/mtGdYv8Y8pPXNsutKpdEvNsj4x4dCbaMGKz
l3ekZbq08vxBA+DkVtBTVcAc2oY/zlNjnDqYL101F0KIRZHaKXGNnq6rqz6Xx416
TlfXTITc8JJ4jtYO4VrfU5APEeVVZOvqgZ6D8OGA/nd1SpwX2CoHBdnaHiBlxnV+
/t4xWjRL+vf8ofDHGsCz5oLrnUnZ/IJj4nERICj6yQ6wtYsBWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIE6E3of8lFYax7GAuVpp+F+W6joMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWZjZjRmMmItZGI2MC0z
M2NkLWE0MWUtMGVlOGVhNzc1MTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIU78ON0KJhetWyPOqVVjpr90Yh4WdeV//c+8igh5BQk+bGiHzKF766M
uipDvt71ont3R084pa+N0zy0fim5OfQfd5lNKhMh2Ue1RkTdwe1lmFmC0/wM/N66
xgd5nfRYaByjBo43eF7R/8DS6wPAHOcWFUB1zOJGhwqUPPDUdic0By828bGSM16Q
0pEOpv72HwqYBs8HWo53Xg5w24nfMXna9ll78G8JWsZXggPPTO5Q7PGX2f9AGrHd
rwUIAt3atlG+qYrL0aoiSGyarxbRBtu0KSg4o1c5gkLguNVU1A292Eku3jTt1h9P
YelIxXtYgAvBcxG9BmxUYmNwi/o5Uyc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:40 2025 by rpki-client