Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/429c2507-14b0-39ee-953c-c6c39de8541b.roa
File:                     429c2507-14b0-39ee-953c-c6c39de8541b.roa (raw, json)
Hash identifier:          Ig15O8klc5ZpgLMM+k0AvqgOTrD9J8hmhcz1mAUcJGg=
Subject key identifier:   99:63:E1:1F:CE:01:B6:2F:68:A4:EB:5F:DF:18:F4:D5:C5:E3:19:67
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A68EF50D946B12FEBDF243A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/429c2507-14b0-39ee-953c-c6c39de8541b.roa
Signing time:             Fri 04 Jul 2025 19:47:01 +0000
ROA not before:           Fri 04 Jul 2025 19:47:01 +0000
ROA not after:            Thu 02 Oct 2025 19:47:01 +0000
asID:                     213823
IP address blocks:        166.88.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:ef:50:d9:46:b1:2f:eb:df:24:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 19:47:01 2025 GMT
            Not After : Oct  2 19:47:01 2025 GMT
        Subject: CN=69b865d1-8de8-47cd-b7ea-eff058ccdc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:72:56:96:dd:3e:2d:9e:8f:5d:89:b0:45:
                    a9:98:9c:00:77:02:60:6b:0b:8c:11:d3:1c:bc:6d:
                    53:1c:1a:8f:7f:2b:e5:65:e6:16:0c:b8:e8:85:54:
                    be:48:99:f0:1a:64:f2:af:1b:38:8f:0d:87:fc:d7:
                    f4:65:05:c5:ca:d5:25:65:33:17:a7:af:7c:03:9c:
                    d0:e6:c5:61:83:12:e5:d9:ee:a0:9d:65:26:35:21:
                    81:88:da:8b:90:18:30:51:04:5e:55:91:71:3f:4e:
                    fe:2b:f9:3f:7b:3c:4e:3f:28:b8:62:50:9d:ab:d6:
                    8a:13:3d:0b:a9:27:04:eb:9f:de:5a:3e:08:c3:7b:
                    9c:6c:42:97:b5:c9:5e:81:10:df:69:c3:96:0c:40:
                    6d:3e:c7:7d:b9:7c:53:57:e0:bd:e1:09:88:b5:17:
                    23:77:21:f5:90:42:8b:9c:12:4b:b9:47:2a:02:8a:
                    20:6f:12:ca:d5:1c:f1:a9:6b:45:20:72:13:4c:73:
                    f6:cc:72:53:4c:f5:90:64:a5:ab:77:f1:0c:80:cd:
                    c6:e2:12:d3:72:54:e0:62:ba:2b:bb:83:91:49:be:
                    3f:5a:c1:50:d6:d4:46:d1:d3:e7:30:6a:2a:15:b4:
                    da:0c:0c:55:32:b2:cc:99:6b:c5:93:52:85:cb:19:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:E1:1F:CE:01:B6:2F:68:A4:EB:5F:DF:18:F4:D5:C5:E3:19:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/429c2507-14b0-39ee-953c-c6c39de8541b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:04:de:ed:a3:11:5a:5a:f1:85:96:54:0f:17:1f:33:68:79:
         86:f1:c5:e3:f9:ba:4a:9f:8e:d5:66:37:fa:2b:c7:ad:51:af:
         a8:1f:01:3d:42:e8:86:22:55:84:9e:72:98:c0:da:66:4b:78:
         0a:f2:41:e4:17:54:14:48:f4:74:96:b0:9f:c5:40:6b:12:d3:
         15:cc:49:4d:71:a9:32:86:c9:fd:6c:ea:18:04:b3:3d:cf:9b:
         f9:80:cc:42:63:da:1c:79:c3:4e:3f:4b:f2:60:d8:cb:95:0a:
         17:fe:68:4f:58:48:28:09:f0:b0:0c:2a:db:04:32:9f:4d:ea:
         2b:4e:b1:36:55:ea:fa:6b:1a:4d:29:ee:4a:e3:0e:ba:6e:78:
         59:44:5d:e6:c6:32:83:45:ab:7e:09:c7:8a:d4:84:be:70:1a:
         f2:25:96:3f:ce:92:98:8b:46:59:ac:91:50:ad:f3:5e:99:b6:
         17:c6:5a:9e:60:fb:db:56:5d:19:88:0b:71:f7:63:a9:43:0a:
         aa:b6:1f:f0:80:e7:9a:52:0f:55:2f:67:88:f3:a3:7f:66:c2:
         a5:ab:40:a3:b2:b5:a7:7b:f1:79:cb:6f:75:ba:02:4f:7a:38:
         44:56:a5:be:67:7a:79:f9:4b:25:74:ed:e7:2e:3d:6b:24:49:
         c3:ea:30:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpo71DZRrEv698kOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNDE5NDcwMVoXDTI1MTAwMjE5NDcwMVowLzEtMCsGA1UEAxMk
NjliODY1ZDEtOGRlOC00N2NkLWI3ZWEtZWZmMDU4Y2NkYzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzZyVpbdPi2ej12JsEWpmJwAdwJgawuMEdMc
vG1THBqPfyvlZeYWDLjohVS+SJnwGmTyrxs4jw2H/Nf0ZQXFytUlZTMXp698A5zQ
5sVhgxLl2e6gnWUmNSGBiNqLkBgwUQReVZFxP07+K/k/ezxOPyi4YlCdq9aKEz0L
qScE65/eWj4Iw3ucbEKXtclegRDfacOWDEBtPsd9uXxTV+C94QmItRcjdyH1kEKL
nBJLuUcqAoogbxLK1RzxqWtFIHITTHP2zHJTTPWQZKWrd/EMgM3G4hLTclTgYror
u4ORSb4/WsFQ1tRG0dPnMGoqFbTaDAxVMrLMmWvFk1KFyxnqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlj4R/OAbYvaKTrX98Y9NXF4xlnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI5YzI1MDctMTRiMC0z
OWVlLTk1M2MtYzZjMzlkZTg1NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkE3u2jEVpa8YWWVA8XHzNoeYbxxeP5ukqfjtVmN/orx61Rr6gfAT1C
6IYiVYSecpjA2mZLeAryQeQXVBRI9HSWsJ/FQGsS0xXMSU1xqTKGyf1s6hgEsz3P
m/mAzEJj2hx5w04/S/Jg2MuVChf+aE9YSCgJ8LAMKtsEMp9N6itOsTZV6vprGk0p
7krjDrpueFlEXebGMoNFq34Jx4rUhL5wGvIllj/OkpiLRlmskVCt816ZthfGWp5g
+9tWXRmIC3H3Y6lDCqq2H/CA55pSD1UvZ4jzo39mwqWrQKOytad78XnLb3W6Ak96
OERWpb5nenn5SyV07ecuPWskScPqMIE=
-----END CERTIFICATE-----
Generated at Sun Jul 6 22:52:32 2025 by rpki-client