Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/429c2507-14b0-39ee-953c-c6c39de8541b.roa
File:                     429c2507-14b0-39ee-953c-c6c39de8541b.roa (raw, json)
Hash identifier:          gaq4kjnFtna4n7fNKEhQL+r8dxICF5+Al39Ba3aUsbI=
Subject key identifier:   07:56:4F:EB:8A:3D:CD:A2:D6:1E:84:E9:2A:74:C6:BF:E8:85:D0:7A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B48E215272E47688106CD6458
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/429c2507-14b0-39ee-953c-c6c39de8541b.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     213823
IP address blocks:        166.88.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:15:27:2e:47:68:81:06:cd:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=f2052206-cfd3-45ee-9f5e-4e6dbe0a6530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:0e:39:0d:c4:c1:68:80:45:9b:c2:24:1c:
                    c9:3f:51:3e:2e:ff:85:df:cd:a8:04:d7:e9:ca:ef:
                    75:d5:1f:cf:1e:a6:90:c7:1f:85:c4:57:f5:86:3c:
                    21:ef:c1:7b:f3:e5:a6:e9:57:e4:4d:1a:ea:04:ce:
                    0f:5f:8e:eb:6c:19:da:fa:44:76:23:7e:1d:bc:f1:
                    2e:6a:f4:64:76:8c:bd:c6:85:ce:e1:83:fe:c5:fe:
                    1b:db:fd:c4:53:3c:2c:3b:27:4a:2f:dd:cc:74:e4:
                    eb:6f:4c:77:5f:3f:6d:78:ee:11:07:03:e3:bb:98:
                    6d:f4:b4:44:0e:3c:b0:f6:64:dd:05:96:4e:5b:0a:
                    f8:b7:57:c5:b0:eb:bf:b9:5b:21:de:45:ed:d4:e5:
                    d4:04:69:2f:38:8e:95:9c:1c:a6:01:06:ff:00:74:
                    62:40:86:7b:bf:e5:c4:fb:78:a3:03:7d:6b:46:3e:
                    39:9a:f2:ca:f6:51:7e:8e:9a:01:aa:02:6e:db:56:
                    b5:0d:16:70:e8:fa:c9:62:b4:08:99:a5:9c:fc:a9:
                    1d:65:8b:15:92:fe:1c:ad:7c:27:ea:fb:de:f2:f7:
                    7a:73:4a:90:57:d7:ef:b5:5f:75:e0:20:fc:6a:39:
                    d9:f8:94:ab:b1:0e:39:83:90:f8:ff:27:3f:bc:15:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:4F:EB:8A:3D:CD:A2:D6:1E:84:E9:2A:74:C6:BF:E8:85:D0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/429c2507-14b0-39ee-953c-c6c39de8541b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:de:ab:22:ca:5b:a5:8f:03:83:d2:ab:c7:80:50:24:c2:
         0f:61:ca:ce:92:32:6b:74:36:2d:0d:09:26:d7:17:36:e0:6c:
         04:2f:a1:77:f5:57:27:ae:9b:14:ee:59:1d:f2:98:aa:c2:f3:
         56:fa:34:00:d5:d5:6e:3b:d4:e5:58:d9:4f:db:ac:c0:29:92:
         f4:27:5a:6e:fe:8c:fe:10:18:40:96:98:ed:b1:c8:60:46:75:
         95:fd:30:7d:bf:8a:d1:cc:53:fa:ed:d2:ee:a0:6b:b1:a5:24:
         56:9e:c0:f0:3b:18:0b:7b:66:79:15:58:27:35:5f:05:d9:f1:
         c2:81:80:32:c6:36:9b:ab:08:0c:a3:e0:b6:f1:be:6d:68:eb:
         a6:c0:f8:df:24:92:8b:3c:72:ea:e0:28:77:15:49:bf:bd:39:
         3a:a2:c9:69:66:ab:b7:5b:06:a6:02:f8:1d:e4:ba:3b:20:ad:
         1a:30:5a:da:5c:b6:78:8c:32:11:3a:c2:b9:cb:76:d6:bb:3c:
         d3:c6:a3:05:f5:62:b7:68:59:e4:de:4c:93:95:b9:84:bc:a7:
         b5:86:7a:ce:29:1c:34:c5:6e:56:e3:79:69:88:ae:0e:2c:86:
         5a:dc:a2:d0:02:8a:97:ec:e1:08:31:29:c5:a6:f9:71:84:72:
         25:d2:f3:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hUnLkdogQbNZFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjIwNTIyMDYtY2ZkMy00NWVlLTlmNWUtNGU2ZGJlMGE2NTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68EOOQ3EwWiARZvCJBzJP1E+Lv+F382oBNfp
yu911R/PHqaQxx+FxFf1hjwh78F78+Wm6VfkTRrqBM4PX47rbBna+kR2I34dvPEu
avRkdoy9xoXO4YP+xf4b2/3EUzwsOydKL93MdOTrb0x3Xz9teO4RBwPju5ht9LRE
Djyw9mTdBZZOWwr4t1fFsOu/uVsh3kXt1OXUBGkvOI6VnBymAQb/AHRiQIZ7v+XE
+3ijA31rRj45mvLK9lF+jpoBqgJu21a1DRZw6PrJYrQImaWc/KkdZYsVkv4crXwn
6vve8vd6c0qQV9fvtV914CD8ajnZ+JSrsQ45g5D4/yc/vBWs8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdWT+uKPc2i1h6E6Sp0xr/ohdB6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI5YzI1MDctMTRiMC0z
OWVlLTk1M2MtYzZjMzlkZTg1NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtR3qsiyluljwOD0qvHgFAkwg9hys6SMmt0Ni0NCSbXFzbgbAQvoXf1
VyeumxTuWR3ymKrC81b6NADV1W471OVY2U/brMApkvQnWm7+jP4QGECWmO2xyGBG
dZX9MH2/itHMU/rt0u6ga7GlJFaewPA7GAt7ZnkVWCc1XwXZ8cKBgDLGNpurCAyj
4Lbxvm1o66bA+N8kkos8curgKHcVSb+9OTqiyWlmq7dbBqYC+B3kujsgrRowWtpc
tniMMhE6wrnLdta7PNPGowX1YrdoWeTeTJOVuYS8p7WGes4pHDTFblbjeWmIrg4s
hlrcotACipfs4QgxKcWm+XGEciXS85U=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:41 2025 by rpki-client