Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa
File:                     f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa (raw, json)
Hash identifier:          ULDqOrS+S9FLl8QGfNTxsAospqQmhfVL0zgDpgIL1P8=
Subject key identifier:   21:C6:E3:34:5F:BE:F6:20:25:65:11:6D:46:97:CC:F0:96:1A:89:29
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A20F54FEE1C378B507B732BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa
Signing time:             Mon 09 Jun 2025 01:00:50 +0000
ROA not before:           Mon 09 Jun 2025 01:00:50 +0000
ROA not after:            Sun 07 Sep 2025 01:00:50 +0000
asID:                     16276
IP address blocks:        166.1.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:20:f5:4f:ee:1c:37:8b:50:7b:73:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 01:00:50 2025 GMT
            Not After : Sep  7 01:00:50 2025 GMT
        Subject: CN=d3c77c2d-0ce1-4ebb-a9d0-4d874531f719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:9c:af:da:be:71:cf:eb:59:16:26:bc:ce:
                    08:ee:fb:87:fb:4e:80:aa:d2:03:1e:04:28:5b:fa:
                    a4:05:40:e7:ea:1b:b2:ef:04:b6:54:a0:43:ea:35:
                    2b:72:a4:7a:47:d7:ae:3a:00:7d:be:7b:fe:e1:84:
                    d2:29:da:95:ba:c9:20:70:13:98:40:12:b8:0d:1f:
                    75:c5:2d:99:2e:f8:15:9e:08:36:c4:84:52:a2:cd:
                    52:6e:c1:24:2b:d5:ec:ba:a4:a5:5b:d4:d6:d6:9b:
                    6d:f4:1d:bb:19:5e:ed:70:99:1f:66:7e:bd:15:08:
                    e3:f8:b5:dd:f9:40:42:80:97:a3:03:9f:0b:4d:72:
                    e2:2f:c0:89:5d:10:b0:69:a3:cb:8e:b4:83:0a:91:
                    35:fa:07:03:75:00:d3:43:04:c2:13:93:e2:e6:9c:
                    9c:b6:77:55:97:05:e8:d8:46:aa:b2:81:ca:c8:e2:
                    82:bb:1f:a0:6c:f0:4c:80:b5:57:fd:72:72:93:39:
                    41:9f:7e:62:f4:e1:32:52:68:2c:4e:28:06:2b:87:
                    f0:a8:3b:48:f9:6b:7f:81:db:df:b8:9b:ce:b9:d5:
                    65:90:f2:4f:40:9b:49:08:20:b5:74:d3:82:d7:ce:
                    57:eb:06:55:70:6c:f9:90:1d:20:d9:cd:e2:6e:0e:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C6:E3:34:5F:BE:F6:20:25:65:11:6D:46:97:CC:F0:96:1A:89:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:96:ad:16:38:ed:b3:7b:b6:26:40:48:c1:3e:d8:5f:88:37:
         fc:0c:58:6f:6e:2c:1e:e9:78:8a:db:e7:16:cf:10:2d:ae:0c:
         56:13:f7:44:1e:c5:ca:94:3f:38:c3:02:2a:8b:b8:17:3d:52:
         5a:c1:c7:51:24:11:fd:2b:ef:fd:16:f2:a8:ed:34:3c:a1:13:
         1e:4b:68:f8:7f:ac:4c:3a:a8:c9:ac:61:e8:6a:4b:e5:ab:2c:
         4c:91:ec:19:6e:80:6f:9e:2e:54:13:a1:d2:96:ab:24:29:55:
         2e:69:1a:90:9c:df:ba:1e:b2:e0:55:24:36:aa:e1:a7:47:c7:
         f0:a8:82:0e:e9:9e:b1:90:5f:5d:be:0d:68:25:bb:df:0f:81:
         8b:f0:46:75:eb:64:83:c1:9e:c1:c8:64:83:e6:73:1c:47:78:
         ab:98:32:37:6a:e5:07:61:03:74:6a:b8:e5:f6:68:28:ea:71:
         ea:13:c1:db:84:99:39:94:b7:25:6f:8c:a8:7a:d7:d6:65:04:
         3f:88:7b:13:2d:31:fc:d7:56:23:2e:bb:22:8f:10:54:da:a4:
         c4:cd:d4:d9:fe:12:46:e6:2a:70:99:73:0f:c5:24:6e:00:5a:
         3d:c1:a6:d0:7f:9d:d8:73:7a:72:54:34:b8:1d:ac:3a:c0:c0:
         3b:ff:a6:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9U/uHDeLUHtzK8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk
ZDNjNzdjMmQtMGNlMS00ZWJiLWE5ZDAtNGQ4NzQ1MzFmNzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM+cr9q+cc/rWRYmvM4I7vuH+06AqtIDHgQo
W/qkBUDn6huy7wS2VKBD6jUrcqR6R9euOgB9vnv+4YTSKdqVuskgcBOYQBK4DR91
xS2ZLvgVngg2xIRSos1SbsEkK9XsuqSlW9TW1ptt9B27GV7tcJkfZn69FQjj+LXd
+UBCgJejA58LTXLiL8CJXRCwaaPLjrSDCpE1+gcDdQDTQwTCE5Pi5pyctndVlwXo
2EaqsoHKyOKCux+gbPBMgLVX/XJykzlBn35i9OEyUmgsTigGK4fwqDtI+Wt/gdvf
uJvOudVlkPJPQJtJCCC1dNOC185X6wZVcGz5kB0g2c3ibg7VhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHG4zRfvvYgJWURbUaXzPCWGokpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjFjMTk3MTYtMDcxZi0z
Y2M1LTkwN2YtMmUwZTNlY2QyNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSWrRY47bN7tiZASME+2F+IN/wMWG9uLB7peIrb5xbPEC2uDFYT90Qe
xcqUPzjDAiqLuBc9UlrBx1EkEf0r7/0W8qjtNDyhEx5LaPh/rEw6qMmsYehqS+Wr
LEyR7BlugG+eLlQTodKWqyQpVS5pGpCc37oesuBVJDaq4adHx/Cogg7pnrGQX12+
DWglu98PgYvwRnXrZIPBnsHIZIPmcxxHeKuYMjdq5QdhA3RquOX2aCjqceoTwduE
mTmUtyVvjKh619ZlBD+IexMtMfzXViMuuyKPEFTapMTN1Nn+EkbmKnCZcw/FJG4A
Wj3BptB/ndhzenJUNLgdrDrAwDv/prk=
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:28:32 2025 by rpki-client