Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3036c8d-ee50-365c-b975-f868c96b0245.roa
File:                     b3036c8d-ee50-365c-b975-f868c96b0245.roa (raw, json)
Hash identifier:          XqLYl2ae4sdwEUR1tZf6wAkkyuqIMCu2pJDGZrkxToE=
Subject key identifier:   C6:07:CB:D5:67:E4:1E:CA:73:40:C7:32:D1:51:67:5E:44:3C:7F:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A87B8BDFB4B864E9341B53A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3036c8d-ee50-365c-b975-f868c96b0245.roa
Signing time:             Tue 15 Jul 2025 20:27:07 +0000
ROA not before:           Tue 15 Jul 2025 20:27:07 +0000
ROA not after:            Mon 13 Oct 2025 20:27:07 +0000
asID:                     44559
IP address blocks:        166.1.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:bd:fb:4b:86:4e:93:41:b5:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 15 20:27:07 2025 GMT
            Not After : Oct 13 20:27:07 2025 GMT
        Subject: CN=82421461-5f0d-4d19-8dd1-1a42d4b1de13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:f4:a6:18:37:a7:43:49:f6:5e:2e:ed:1d:
                    56:77:1f:64:77:9b:fa:a9:9f:8c:77:91:49:88:c7:
                    4e:2e:59:a3:77:77:8b:e5:df:ee:a3:ef:3f:3e:9e:
                    a9:fc:07:e0:d7:fe:32:b3:2d:d6:aa:b4:b8:35:35:
                    89:63:47:ff:53:9e:f4:96:76:38:53:1c:14:e7:e7:
                    77:74:ad:8d:92:2e:22:2b:f4:dd:87:a8:74:a1:46:
                    fa:d8:1b:1d:e7:e6:73:cb:f2:72:be:10:6d:44:2a:
                    54:eb:a1:37:21:03:6e:fc:aa:df:8b:d8:e8:85:65:
                    b2:a2:a1:e7:9a:e2:b9:f6:e8:ec:c8:05:ea:93:11:
                    a9:64:d8:c2:2f:30:9c:a5:23:ee:55:a2:0c:3b:ea:
                    18:15:f7:2c:e0:18:14:5d:e2:85:12:0d:c2:18:67:
                    ea:61:14:6d:fa:26:8a:e4:b0:52:92:92:1b:68:d0:
                    91:3e:fe:9d:29:c4:48:92:a4:23:e3:39:7b:0c:93:
                    41:fe:30:7d:56:97:d0:8a:9c:4e:13:31:3b:c1:13:
                    1a:1b:97:86:d3:0b:88:80:c1:93:67:c4:38:d3:97:
                    99:cc:f2:5a:6f:3b:4e:06:fa:92:cb:e6:0d:92:da:
                    8f:7b:0d:03:46:2f:3f:24:7d:66:f1:f6:b2:5a:bc:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:07:CB:D5:67:E4:1E:CA:73:40:C7:32:D1:51:67:5E:44:3C:7F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b3036c8d-ee50-365c-b975-f868c96b0245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:47:d9:f0:84:a9:60:61:f2:fb:aa:11:c4:34:c5:0d:93:
         21:d2:b1:d7:74:ce:c4:f7:39:43:de:f7:ea:23:d3:d3:db:69:
         38:62:25:19:b0:5b:42:43:7d:7f:09:3f:24:09:10:ba:27:3d:
         a3:fd:60:82:c1:30:fe:45:dc:33:27:35:06:22:99:e3:c9:1c:
         bd:5d:f3:48:83:ba:13:f3:47:26:da:21:4d:c9:12:89:94:36:
         01:ed:be:a0:9b:da:ae:ec:ce:ad:45:14:89:aa:75:6e:ab:64:
         2c:46:af:fe:8b:76:17:cd:8b:d8:c7:66:e4:c1:0c:60:48:fd:
         01:95:dc:07:76:ad:22:3f:03:3d:8b:97:e6:18:60:b5:7f:5a:
         b5:94:31:2e:b1:0a:9f:e1:37:6a:45:a9:73:69:be:d1:be:35:
         a5:77:fd:b5:f8:06:a6:9d:2a:f9:48:ab:50:e5:f2:dc:52:3e:
         94:dc:a4:7b:78:ba:01:81:05:d8:b0:34:83:14:f1:73:9b:d5:
         3e:53:6b:1f:83:58:ef:76:29:59:e0:05:b3:4c:5a:9b:ba:ee:
         a9:c3:01:ea:fe:02:41:19:4b:8d:af:2b:2f:b7:23:01:72:0e:
         fd:19:88:d9:b0:93:ec:aa:34:33:ed:5a:eb:15:be:cd:7b:bf:
         2f:b6:2a:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuL37S4ZOk0G1OoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcxNTIwMjcwN1oXDTI1MTAxMzIwMjcwN1owLzEtMCsGA1UEAxMk
ODI0MjE0NjEtNWYwZC00ZDE5LThkZDEtMWE0MmQ0YjFkZTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJj0phg3p0NJ9l4u7R1Wdx9kd5v6qZ+Md5FJ
iMdOLlmjd3eL5d/uo+8/Pp6p/Afg1/4ysy3WqrS4NTWJY0f/U570lnY4UxwU5+d3
dK2Nki4iK/Tdh6h0oUb62Bsd5+Zzy/JyvhBtRCpU66E3IQNu/Krfi9johWWyoqHn
muK59ujsyAXqkxGpZNjCLzCcpSPuVaIMO+oYFfcs4BgUXeKFEg3CGGfqYRRt+iaK
5LBSkpIbaNCRPv6dKcRIkqQj4zl7DJNB/jB9VpfQipxOEzE7wRMaG5eG0wuIgMGT
Z8Q405eZzPJabztOBvqSy+YNktqPew0DRi8/JH1m8fayWrzxKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYHy9Vn5B7Kc0DHMtFRZ15EPH9+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjMwMzZjOGQtZWU1MC0z
NjVjLWI5NzUtZjg2OGM5NmIwMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgG4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzKR9nwhKlgYfL7qhHENMUNkyHSsdd0zsT3OUPe9+oj09PbaThiJRmw
W0JDfX8JPyQJELonPaP9YILBMP5F3DMnNQYimePJHL1d80iDuhPzRybaIU3JEomU
NgHtvqCb2q7szq1FFImqdW6rZCxGr/6LdhfNi9jHZuTBDGBI/QGV3Ad2rSI/Az2L
l+YYYLV/WrWUMS6xCp/hN2pFqXNpvtG+NaV3/bX4BqadKvlIq1Dl8txSPpTcpHt4
ugGBBdiwNIMU8XOb1T5Tax+DWO92KVngBbNMWpu67qnDAer+AkEZS42vKy+3IwFy
Dv0ZiNmwk+yqNDPtWusVvs17vy+2KvI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:55:07 2025 by rpki-client