Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c541b40-fb75-32d7-a89a-ad91942a4342.roa
File:                     2c541b40-fb75-32d7-a89a-ad91942a4342.roa (raw, json)
Hash identifier:          njV9Jzegc7zGaB+fpdsRCtuWLFt3n13PxvkmYQZhvLo=
Subject key identifier:   6D:47:22:02:3A:DE:82:4C:14:E2:8D:40:33:9D:07:65:DF:6A:34:CC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B8DEC45FB8DAE88E3B380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c541b40-fb75-32d7-a89a-ad91942a4342.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     212238
IP address blocks:        166.88.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:8d:ec:45:fb:8d:ae:88:e3:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=e1be9813-199a-4959-b769-325b687029fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:41:5a:18:80:de:7c:49:9a:dd:23:d8:25:aa:
                    22:78:2a:62:98:54:72:75:d9:b7:00:af:7d:da:f4:
                    fb:30:43:0b:83:29:42:79:4f:f5:5d:56:8b:b9:73:
                    da:e5:04:b5:71:7c:e2:56:9d:fc:d4:50:c5:97:42:
                    b2:a5:f8:3f:b1:c5:5c:f2:dd:53:06:1b:ce:13:16:
                    08:61:61:fa:10:59:d3:48:0b:0a:db:07:ae:0f:39:
                    26:0d:5d:0d:9b:73:27:71:ab:9d:00:4a:9a:b4:28:
                    96:08:3b:39:8a:73:8d:30:c6:33:ff:c1:fd:39:9a:
                    5e:5d:b5:68:68:f9:79:a5:8b:97:2f:ba:f4:64:cb:
                    d1:05:4c:04:5b:e2:16:b7:17:ca:87:73:bc:a1:d0:
                    c4:e7:2d:97:91:e8:1c:1b:5a:de:5b:ea:2a:f9:c6:
                    13:b9:ff:bd:b5:08:c8:90:50:a7:c8:ac:dd:6b:8d:
                    85:2b:4a:6e:9b:96:b8:c1:70:d6:39:f9:71:a7:69:
                    aa:29:99:46:88:f5:dd:c8:9c:0d:07:5d:1b:a0:8f:
                    6d:79:d2:99:aa:12:dc:2c:86:20:ab:02:15:15:95:
                    74:27:e5:d8:5d:0f:a3:95:66:14:ce:ed:e5:32:67:
                    08:27:44:ec:a7:d4:3e:c7:b6:92:68:66:01:76:07:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:22:02:3A:DE:82:4C:14:E2:8D:40:33:9D:07:65:DF:6A:34:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c541b40-fb75-32d7-a89a-ad91942a4342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:f3:b9:0e:86:a8:ed:ab:96:cd:b3:4d:15:ee:03:cb:16:
         d6:3b:82:cc:ed:dd:28:aa:2d:f6:e2:9b:82:5f:a2:44:e5:5a:
         3a:bd:96:27:7f:8e:7b:2c:77:3b:c3:e8:57:87:d7:82:7b:47:
         93:d2:c0:73:e6:d7:f9:92:0f:09:fc:36:d8:70:db:62:21:e1:
         e7:74:11:bf:ed:06:3e:dd:e4:7b:2a:6d:16:75:01:45:f4:fa:
         69:38:70:96:46:90:37:36:b3:2e:0d:87:db:9e:23:f0:b8:83:
         bb:71:c4:f3:4d:7c:58:c7:42:7a:59:ab:84:24:83:ba:63:f9:
         88:f7:b5:3f:9a:fd:8a:a4:b2:30:57:a0:b7:ff:a5:ec:26:1a:
         ca:ac:5e:4e:49:3a:b2:ca:fd:92:42:78:e3:19:b7:88:b0:35:
         b9:e9:51:dc:65:a8:7f:5c:5c:e8:06:74:fc:40:5d:e4:2f:0a:
         41:0c:7e:99:17:32:62:88:1c:c9:82:77:e1:e7:dd:9f:ee:cd:
         40:59:e2:0b:4a:f8:54:4f:fd:54:ff:06:17:d8:08:62:d6:8f:
         7c:25:ef:57:90:f3:f1:3b:5d:60:b2:86:c1:66:55:bd:48:36:
         be:2c:ad:a5:82:15:39:83:55:c7:b2:06:76:73:60:6b:4c:a6:
         4f:71:b7:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i43sRfuNrojjs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZTFiZTk4MTMtMTk5YS00OTU5LWI3NjktMzI1YjY4NzAyOWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EFaGIDefEma3SPYJaoieCpimFRyddm3AK99
2vT7MEMLgylCeU/1XVaLuXPa5QS1cXziVp381FDFl0Kypfg/scVc8t1TBhvOExYI
YWH6EFnTSAsK2weuDzkmDV0Nm3MncaudAEqatCiWCDs5inONMMYz/8H9OZpeXbVo
aPl5pYuXL7r0ZMvRBUwEW+IWtxfKh3O8odDE5y2XkegcG1reW+oq+cYTuf+9tQjI
kFCnyKzda42FK0pum5a4wXDWOflxp2mqKZlGiPXdyJwNB10boI9tedKZqhLcLIYg
qwIVFZV0J+XYXQ+jlWYUzu3lMmcIJ0Tsp9Q+x7aSaGYBdgf2oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1HIgI63oJMFOKNQDOdB2XfajTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmM1NDFiNDAtZmI3NS0z
MmQ3LWE4OWEtYWQ5MTk0MmE0MzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4487kOhqjtq5bNs00V7gPLFtY7gszt3SiqLfbim4JfokTlWjq9lid/
jnssdzvD6FeH14J7R5PSwHPm1/mSDwn8Nthw22Ih4ed0Eb/tBj7d5HsqbRZ1AUX0
+mk4cJZGkDc2sy4Nh9ueI/C4g7txxPNNfFjHQnpZq4Qkg7pj+Yj3tT+a/YqksjBX
oLf/pewmGsqsXk5JOrLK/ZJCeOMZt4iwNbnpUdxlqH9cXOgGdPxAXeQvCkEMfpkX
MmKIHMmCd+Hn3Z/uzUBZ4gtK+FRP/VT/BhfYCGLWj3wl71eQ8/E7XWCyhsFmVb1I
Nr4sraWCFTmDVceyBnZzYGtMpk9xtyw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:03 2025 by rpki-client