Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9585d6fb-39fb-3878-9526-8baeac14c7e2.roa
File:                     9585d6fb-39fb-3878-9526-8baeac14c7e2.roa (raw, json)
Hash identifier:          rMP3PZ4O/EdyrOlGz/wegtBmvaPlB0gsHodn+8zfQrE=
Subject key identifier:   35:03:2F:B2:A6:0F:53:59:4F:76:9E:BD:97:2E:7A:05:18:B5:27:B3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B328C630DCEFE5CD4F90D5C30
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9585d6fb-39fb-3878-9526-8baeac14c7e2.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        166.88.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:63:0d:ce:fe:5c:d4:f9:0d:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=716fdd0c-e2c8-4274-9782-d2a7756ba97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:44:4e:ec:99:bf:16:0b:f8:b1:32:23:47:
                    f9:e9:de:11:e5:d5:0c:13:f5:c4:58:aa:76:26:6b:
                    66:5e:50:8b:cb:c8:6a:61:36:cf:07:84:50:f0:36:
                    d6:20:26:e7:04:df:f8:d1:3c:c9:62:af:d9:7c:ed:
                    3b:3b:a1:a0:42:aa:f8:ab:f1:34:f0:c6:02:d2:f2:
                    0a:fb:52:96:f6:fe:ab:d8:2c:89:a7:f2:2d:5c:50:
                    9d:5c:7c:b1:2d:2d:a3:91:f1:d8:2d:86:66:07:c4:
                    d2:58:5e:a2:dd:55:9d:d3:e8:e2:76:82:f6:21:4d:
                    61:46:51:5e:f4:42:f2:c5:b5:4d:b9:94:18:1a:2e:
                    1e:57:a7:27:06:83:97:3d:03:e4:f0:9f:d8:96:0f:
                    89:38:d3:2d:0c:e4:de:01:8d:9d:9f:f9:11:9e:ee:
                    ce:68:fd:82:f6:d4:28:21:22:e7:8a:2c:21:65:c9:
                    ce:6b:77:d1:20:4b:9f:8e:b8:57:52:74:2d:e2:58:
                    ba:a8:a0:8e:21:51:84:e7:f2:a4:84:5c:1a:32:79:
                    e1:41:5e:79:fa:19:98:09:41:21:17:e6:67:9c:0e:
                    67:e3:c1:20:5b:eb:f0:65:fd:52:83:2f:fd:38:12:
                    ef:ce:6c:53:c9:d0:b0:9a:ef:d0:74:fe:80:a4:bf:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:2F:B2:A6:0F:53:59:4F:76:9E:BD:97:2E:7A:05:18:B5:27:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9585d6fb-39fb-3878-9526-8baeac14c7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:0f:77:01:06:97:06:b5:49:7d:00:89:5d:7f:59:9e:f5:
         f6:b1:b5:88:ab:db:ce:52:c7:da:d7:b5:2d:fa:e1:1f:9c:69:
         8a:2b:5e:e2:01:1f:fa:63:29:8e:0e:4d:78:4f:7b:51:af:db:
         31:13:19:c7:34:00:95:a5:ed:0f:7b:20:94:92:cc:21:ea:54:
         23:5a:ff:4d:05:89:5b:ed:f2:d3:34:53:e1:37:7b:1e:c9:b0:
         2d:a9:ba:92:5f:48:1c:3b:dd:a7:7d:cf:59:39:63:ab:0b:84:
         44:43:af:9e:e0:79:b8:6e:25:5a:8b:d6:62:a7:e7:be:c2:9e:
         37:b7:b5:5d:b6:6e:65:b4:10:ec:1b:66:de:38:73:ef:7b:fe:
         0c:95:65:a4:e6:63:8a:3c:75:e9:72:9b:5a:f2:2b:57:26:76:
         2f:d2:68:3d:fe:d4:67:89:a2:d6:e9:dc:16:1a:be:ae:dd:ac:
         aa:ce:72:29:50:8c:36:cc:71:27:87:a9:7d:1b:0f:18:89:44:
         0b:2b:cb:aa:3b:85:c9:4c:dc:45:22:ec:be:ce:27:e0:e0:48:
         97:56:6a:c7:42:71:61:e7:ef:c6:43:87:ba:d6:5b:4a:74:51:
         41:c3:d7:7a:17:42:b0:3c:5b:89:8e:7c:79:98:ca:47:65:ac:
         6c:50:27:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGMNzv5c1PkNXDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
NzE2ZmRkMGMtZTJjOC00Mjc0LTk3ODItZDJhNzc1NmJhOTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8JETuyZvxYL+LEyI0f56d4R5dUME/XEWKp2
JmtmXlCLy8hqYTbPB4RQ8DbWICbnBN/40TzJYq/ZfO07O6GgQqr4q/E08MYC0vIK
+1KW9v6r2CyJp/ItXFCdXHyxLS2jkfHYLYZmB8TSWF6i3VWd0+jidoL2IU1hRlFe
9ELyxbVNuZQYGi4eV6cnBoOXPQPk8J/Ylg+JONMtDOTeAY2dn/kRnu7OaP2C9tQo
ISLniiwhZcnOa3fRIEufjrhXUnQt4li6qKCOIVGE5/KkhFwaMnnhQV55+hmYCUEh
F+ZnnA5n48EgW+vwZf1Sgy/9OBLvzmxTydCwmu/QdP6ApL+BsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUDL7KmD1NZT3aevZcuegUYtSezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTU4NWQ2ZmItMzlmYi0z
ODc4LTk1MjYtOGJhZWFjMTRjN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6dD3cBBpcGtUl9AIldf1me9faxtYir285Sx9rXtS364R+caYorXuIB
H/pjKY4OTXhPe1Gv2zETGcc0AJWl7Q97IJSSzCHqVCNa/00FiVvt8tM0U+E3ex7J
sC2pupJfSBw73ad9z1k5Y6sLhERDr57gebhuJVqL1mKn577Cnje3tV22bmW0EOwb
Zt44c+97/gyVZaTmY4o8delym1ryK1cmdi/SaD3+1GeJotbp3BYavq7drKrOcilQ
jDbMcSeHqX0bDxiJRAsry6o7hclM3EUi7L7OJ+DgSJdWasdCcWHn78ZDh7rWW0p0
UUHD13oXQrA8W4mOfHmYykdlrGxQJ1g=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:55 2025 by rpki-client