Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5200b606-f4b0-3cde-88c1-4430a3fc2754.roa
File:                     5200b606-f4b0-3cde-88c1-4430a3fc2754.roa (raw, json)
Hash identifier:          hObXVl1G4ftWp3Fto43q4BonQm8BP3Hol25NP4579Us=
Subject key identifier:   F2:95:3F:28:67:6B:AE:D6:DA:7C:E0:1F:C7:F1:82:E3:96:DF:F9:1B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A71EB5B14FAD4931203B72480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5200b606-f4b0-3cde-88c1-4430a3fc2754.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        166.88.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:5b:14:fa:d4:93:12:03:b7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=09300b9e-bced-4467-b27a-538f7b26ad77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:3a:0d:ef:40:ff:6d:8f:7c:4d:c0:01:08:
                    1b:a0:af:d0:d3:27:35:85:99:53:49:30:87:56:34:
                    4a:ed:9f:55:ad:89:ae:73:01:72:08:44:b6:d4:10:
                    4e:71:64:91:9e:c6:ae:a6:0c:11:a8:bf:08:c8:f5:
                    20:69:56:f0:b7:cd:d2:5f:e4:72:86:c7:31:29:29:
                    8b:38:00:07:58:bf:74:51:17:56:cb:b1:07:f4:d3:
                    1f:2a:b4:3d:cf:1c:1e:47:69:ee:97:12:87:e6:27:
                    30:be:1e:af:99:a5:2f:01:fd:2d:cd:9e:ab:25:ca:
                    e2:7a:93:f2:63:a2:9f:35:91:8e:74:8e:e5:41:1a:
                    98:2a:a3:e6:50:7d:51:52:b8:9f:41:45:20:50:11:
                    4f:38:fa:d8:d3:75:10:0b:5c:f6:14:c3:c7:62:6f:
                    58:b0:a7:cc:cf:15:ca:94:43:64:77:10:8b:74:60:
                    64:5a:a1:f0:d2:c7:c5:a0:26:0e:65:42:2f:ba:1d:
                    4a:30:98:6a:28:16:b3:7a:1f:df:06:ae:08:9a:59:
                    0e:92:40:fc:99:ec:40:45:1b:b1:a0:0c:96:9b:e9:
                    7a:9a:28:23:d4:fb:28:42:22:5a:91:ad:e4:c8:9c:
                    69:d1:16:49:a9:c9:4c:75:79:61:1e:99:ef:ae:1a:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:3F:28:67:6B:AE:D6:DA:7C:E0:1F:C7:F1:82:E3:96:DF:F9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5200b606-f4b0-3cde-88c1-4430a3fc2754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a0:84:2c:9c:aa:e1:db:4e:98:50:a5:05:39:27:21:35:3d:
         43:c5:a8:55:05:c2:0d:8c:3d:4f:f6:ed:5f:16:70:33:66:e4:
         3c:39:28:e2:ab:68:07:e2:d9:c2:91:08:3b:64:36:99:16:c4:
         e5:db:4b:16:34:eb:28:3f:c4:09:60:63:c3:f1:40:27:3b:77:
         f2:d1:58:a0:e0:fc:ae:74:4c:aa:ad:56:9f:e5:c2:74:85:00:
         c9:e4:25:1f:79:f1:7e:d7:78:20:eb:4e:27:3c:27:54:d8:67:
         af:1e:ef:c5:63:6d:11:28:c3:3a:53:ee:7e:1d:51:e9:a2:60:
         28:6a:9b:5c:04:7c:3e:4a:ab:25:61:4e:bd:be:a9:df:2a:30:
         0d:ac:3d:a4:d3:56:7f:9c:05:72:27:8b:15:9d:5e:06:0c:79:
         7f:09:f0:94:5e:35:3b:3c:2a:30:59:3e:37:9e:ca:9e:56:e8:
         20:17:9f:0b:8d:32:83:37:21:1c:bc:9a:81:68:2f:79:80:a2:
         ad:58:72:63:5b:d8:58:84:64:e4:a7:c8:57:12:4c:98:14:74:
         6a:d6:4c:73:46:2a:e9:e6:19:3e:5e:3f:1f:ce:9f:7a:c9:0e:
         74:3c:74:0e:bc:16:bb:59:7a:92:23:7c:97:b9:65:d1:bf:dc:
         29:f3:23:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61sU+tSTEgO3JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
MDkzMDBiOWUtYmNlZC00NDY3LWIyN2EtNTM4ZjdiMjZhZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1A6De9A/22PfE3AAQgboK/Q0yc1hZlTSTCH
VjRK7Z9VrYmucwFyCES21BBOcWSRnsaupgwRqL8IyPUgaVbwt83SX+RyhscxKSmL
OAAHWL90URdWy7EH9NMfKrQ9zxweR2nulxKH5icwvh6vmaUvAf0tzZ6rJcriepPy
Y6KfNZGOdI7lQRqYKqPmUH1RUrifQUUgUBFPOPrY03UQC1z2FMPHYm9YsKfMzxXK
lENkdxCLdGBkWqHw0sfFoCYOZUIvuh1KMJhqKBazeh/fBq4ImlkOkkD8mexARRux
oAyWm+l6migj1PsoQiJaka3kyJxp0RZJqclMdXlhHpnvrhp31QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKVPyhna67W2nzgH8fxguOW3/kbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTIwMGI2MDYtZjRiMC0z
Y2RlLTg4YzEtNDQzMGEzZmMyNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWghCycquHbTphQpQU5JyE1PUPFqFUFwg2MPU/27V8WcDNm5Dw5KOKr
aAfi2cKRCDtkNpkWxOXbSxY06yg/xAlgY8PxQCc7d/LRWKDg/K50TKqtVp/lwnSF
AMnkJR958X7XeCDrTic8J1TYZ68e78VjbREowzpT7n4dUemiYChqm1wEfD5KqyVh
Tr2+qd8qMA2sPaTTVn+cBXInixWdXgYMeX8J8JReNTs8KjBZPjeeyp5W6CAXnwuN
MoM3IRy8moFoL3mAoq1YcmNb2FiEZOSnyFcSTJgUdGrWTHNGKunmGT5ePx/On3rJ
DnQ8dA68FrtZepIjfJe5ZdG/3CnzIzM=
-----END CERTIFICATE-----
Generated at Thu Jul 10 16:41:56 2025 by rpki-client