Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/973ae00c-345f-345e-be28-66d21e2670d1.roa
File:                     973ae00c-345f-345e-be28-66d21e2670d1.roa (raw, json)
Hash identifier:          nZadLEOxq6QpADagbhfray+5/cRRNC6swmNhZo5qWgk=
Subject key identifier:   52:6A:D7:96:D4:C3:34:EB:72:91:13:87:E1:2A:F0:E3:CC:B8:CD:9F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D3EB1DD87C311AC4DAD8
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/973ae00c-345f-345e-be28-66d21e2670d1.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        198.166.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d3:eb:1d:d8:7c:31:1a:c4:da:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=68e29bdb-c4ca-4165-bca1-e39627c132ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:52:78:59:03:99:33:1a:29:69:a2:8a:5a:
                    e8:a9:f9:cb:fc:96:ad:b2:1c:da:7d:f1:01:5f:af:
                    f3:37:47:ea:f1:fd:7e:5b:c8:7d:e4:d2:81:d8:98:
                    e8:1e:cb:fa:f6:d3:dd:f7:07:19:c3:38:1f:ce:d1:
                    78:43:a6:13:5e:57:45:9d:ff:61:8e:00:1e:65:10:
                    84:0f:15:8a:b5:56:fd:c6:86:97:ed:a4:e2:e0:6a:
                    6a:5e:99:7d:52:64:ff:33:99:d4:dc:ba:1c:df:f6:
                    e7:ff:4f:d9:e1:7a:65:62:d8:d4:e8:0b:80:98:12:
                    b1:d5:bc:86:53:fe:30:c3:e1:00:76:aa:d3:3f:8c:
                    71:72:bc:b4:e4:a4:cc:63:f0:44:98:50:42:e4:80:
                    69:5f:d1:81:05:24:a2:c4:8c:8f:ef:98:22:f0:28:
                    71:3c:ee:2e:9f:bf:2b:9f:d7:d8:1a:6b:74:70:2d:
                    0c:18:c5:57:3e:cc:61:ac:99:86:61:24:24:91:94:
                    58:97:80:0a:28:42:55:fe:c8:eb:b8:8e:5b:9f:7f:
                    bf:66:a2:f4:34:30:cb:8f:98:ce:4e:e7:3a:76:79:
                    83:3d:84:0f:a6:55:93:3d:e9:ea:49:7f:74:d0:d4:
                    bb:dd:30:1e:0a:3c:9b:bd:c8:3e:cd:66:86:45:1b:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6A:D7:96:D4:C3:34:EB:72:91:13:87:E1:2A:F0:E3:CC:B8:CD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/973ae00c-345f-345e-be28-66d21e2670d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f0:d7:d1:f8:d7:78:66:6a:13:f3:38:c2:15:cd:f4:61:46:7f:
         dd:33:86:bb:d4:b1:7a:76:8f:2a:de:5c:68:8a:36:6d:af:b4:
         08:6c:33:45:78:0d:56:a2:91:bd:9c:9e:b8:9c:45:68:1e:96:
         e2:10:68:ea:90:aa:2b:c1:dd:69:46:f8:b7:4d:95:8b:44:9f:
         39:7d:ee:d4:4c:54:46:ad:ae:1d:a1:03:f1:b2:63:30:8e:38:
         79:c9:d4:fd:43:74:2b:3f:fd:84:44:d5:9d:81:c2:2e:87:a4:
         62:2b:78:ce:8b:73:52:cf:e9:ff:01:33:bf:61:00:d2:ff:b9:
         91:79:bb:54:be:f6:d9:b5:33:f7:65:57:63:d5:68:f8:1f:ea:
         59:57:55:67:02:d1:57:8f:83:23:a7:4c:dc:de:f2:f9:89:d3:
         a1:29:6c:fc:e7:2f:7c:8c:dc:30:67:ab:72:84:c0:0d:21:a5:
         e7:a0:6d:fc:b7:6f:de:45:44:85:a1:d6:15:96:18:99:3e:5b:
         bb:18:0d:c9:3b:2a:65:a3:5e:90:48:b7:20:30:c5:48:d7:18:
         a3:c3:67:70:28:52:9a:d6:8f:56:38:5f:f3:c3:c7:a0:63:48:
         90:15:83:35:55:7c:b4:0f:d2:7c:b3:38:8a:6d:f0:53:35:36:
         30:ad:7c:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdPrHdh8MRrE2tgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
NjhlMjliZGItYzRjYS00MTY1LWJjYTEtZTM5NjI3YzEzMmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdRSeFkDmTMaKWmiilroqfnL/JatshzaffEB
X6/zN0fq8f1+W8h95NKB2JjoHsv69tPd9wcZwzgfztF4Q6YTXldFnf9hjgAeZRCE
DxWKtVb9xoaX7aTi4GpqXpl9UmT/M5nU3Loc3/bn/0/Z4XplYtjU6AuAmBKx1byG
U/4ww+EAdqrTP4xxcry05KTMY/BEmFBC5IBpX9GBBSSixIyP75gi8ChxPO4un78r
n9fYGmt0cC0MGMVXPsxhrJmGYSQkkZRYl4AKKEJV/sjruI5bn3+/ZqL0NDDLj5jO
Tuc6dnmDPYQPplWTPenqSX900NS73TAeCjybvcg+zWaGRRvcYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJq15bUwzTrcpETh+Eq8OPMuM2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTczYWUwMGMtMzQ1Zi0z
NDVlLWJlMjgtNjZkMjFlMjY3MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqa4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAPDX0fjXeGZqE/M4whXN9GFGf90zhrvUsXp2jyreXGiKNm2vtAhsM0V4
DVaikb2cnricRWgeluIQaOqQqivB3WlG+LdNlYtEnzl97tRMVEatrh2hA/GyYzCO
OHnJ1P1DdCs//YRE1Z2Bwi6HpGIreM6Lc1LP6f8BM79hANL/uZF5u1S+9tm1M/dl
V2PVaPgf6llXVWcC0VePgyOnTNze8vmJ06EpbPznL3yM3DBnq3KEwA0hpeegbfy3
b95FRIWh1hWWGJk+W7sYDck7KmWjXpBItyAwxUjXGKPDZ3AoUprWj1Y4X/PDx6Bj
SJAVgzVVfLQP0nyzOIpt8FM1NjCtfD4=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:28:45 2025 by rpki-client