Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a33cc26-1040-3641-9f3a-978297f34885.roa
File:                     7a33cc26-1040-3641-9f3a-978297f34885.roa (raw, json)
Hash identifier:          3DY1LvdIT4zPZ5PdM5J1/uNBbugHVi8XMXj50i5JqOM=
Subject key identifier:   C6:6F:C1:74:AF:8F:31:71:53:F2:F3:75:CE:F9:3E:01:AE:54:95:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5E6C54926E8B129D9800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a33cc26-1040-3641-9f3a-978297f34885.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5e:6c:54:92:6e:8b:12:9d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=4cda6359-51b2-4f85-82ff-65ba3f267185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:f7:d3:c2:42:f2:67:84:8f:07:96:bb:54:
                    f2:df:84:c1:66:d2:5a:5b:70:4c:59:94:b6:de:a6:
                    69:35:93:29:f1:4d:e4:50:b7:99:1f:c5:1b:72:44:
                    bd:e0:4d:14:fa:54:bf:b9:f3:50:84:ae:8b:7a:71:
                    9d:f9:48:6a:c9:e2:83:76:da:b8:6f:00:69:ee:aa:
                    42:e9:1d:44:f0:9d:8b:65:cf:5e:01:c2:1f:09:16:
                    72:bc:2c:1b:77:6f:e1:37:90:42:09:fc:0d:ea:53:
                    30:73:15:64:23:31:23:9b:94:bb:7e:6f:5d:fe:ae:
                    72:0c:a5:b2:5b:8a:45:78:1a:be:4b:49:0e:27:68:
                    d8:de:dd:6f:21:5a:bb:db:e0:05:ea:a5:e9:40:1f:
                    11:80:ed:a9:12:df:f4:66:4d:5e:cf:ba:4e:0e:2e:
                    c2:ca:3b:2c:80:e7:c3:d7:81:f2:8f:59:87:66:56:
                    dd:8a:93:15:3d:36:3b:81:d1:75:a0:db:24:82:81:
                    d2:87:e5:95:16:e0:ae:08:b0:57:e7:3e:d5:67:c4:
                    89:71:1c:17:6b:f6:7f:d2:ea:4f:63:3f:b0:82:63:
                    27:cf:de:04:38:82:28:52:f3:7b:63:68:c9:cc:29:
                    49:92:87:38:95:8a:6d:83:dd:17:11:3e:08:60:53:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6F:C1:74:AF:8F:31:71:53:F2:F3:75:CE:F9:3E:01:AE:54:95:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a33cc26-1040-3641-9f3a-978297f34885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:10:62:6f:de:df:cf:48:55:d5:44:ee:55:e0:db:9f:8d:
         85:50:c9:3f:dc:51:61:df:a2:f0:99:72:1f:aa:32:3d:6a:68:
         b9:94:76:46:da:54:43:a3:2d:4c:4f:cc:34:e7:9f:f0:ac:45:
         cc:ff:8b:a4:f8:8b:0c:9b:c5:bf:43:dd:6e:02:89:4d:bd:fe:
         73:a6:18:c7:04:49:9b:d0:83:3d:24:4d:95:00:ea:9c:26:28:
         1a:2b:18:a0:b4:e3:5e:97:7c:d4:53:c3:fe:a9:d6:32:2a:6f:
         34:bb:4e:0a:92:0b:7a:c2:a6:84:ee:7a:8f:4f:88:6f:eb:4d:
         49:f4:f2:23:aa:3c:52:93:96:03:ff:24:59:22:66:86:ee:72:
         0f:21:54:b0:a9:fb:c5:c1:43:cc:09:a2:8f:48:d0:53:c5:3b:
         d8:ca:bc:f8:58:d7:9b:fa:0d:ed:14:bb:b2:58:b4:97:01:ba:
         6c:48:cc:d0:ef:4a:88:9c:ba:68:ac:13:b2:6c:93:63:6e:02:
         ea:b1:e3:5f:b5:17:0e:92:90:e6:d2:21:2b:7e:b5:14:58:81:
         de:f2:2d:1e:6c:27:2f:3b:a5:c3:7d:87:0e:48:60:65:02:52:
         bf:ee:a4:6b:05:da:b3:20:8f:d1:56:31:0d:c5:60:35:20:29:
         a8:35:f9:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu15sVJJuixKdmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
NGNkYTYzNTktNTFiMi00Zjg1LTgyZmYtNjViYTNmMjY3MTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRr308JC8meEjweWu1Ty34TBZtJaW3BMWZS2
3qZpNZMp8U3kULeZH8UbckS94E0U+lS/ufNQhK6LenGd+UhqyeKDdtq4bwBp7qpC
6R1E8J2LZc9eAcIfCRZyvCwbd2/hN5BCCfwN6lMwcxVkIzEjm5S7fm9d/q5yDKWy
W4pFeBq+S0kOJ2jY3t1vIVq72+AF6qXpQB8RgO2pEt/0Zk1ez7pODi7CyjssgOfD
14Hyj1mHZlbdipMVPTY7gdF1oNskgoHSh+WVFuCuCLBX5z7VZ8SJcRwXa/Z/0upP
Yz+wgmMnz94EOIIoUvN7Y2jJzClJkoc4lYptg90XET4IYFOF/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZvwXSvjzFxU/Lzdc75PgGuVJXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2EzM2NjMjYtMTA0MC0z
NjQxLTlmM2EtOTc4Mjk3ZjM0ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplheMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGycEGJv3t/PSFXVRO5V4NufjYVQyT/cUWHfovCZch+qMj1qaLmUdkba
VEOjLUxPzDTnn/CsRcz/i6T4iwybxb9D3W4CiU29/nOmGMcESZvQgz0kTZUA6pwm
KBorGKC0416XfNRTw/6p1jIqbzS7TgqSC3rCpoTueo9PiG/rTUn08iOqPFKTlgP/
JFkiZobucg8hVLCp+8XBQ8wJoo9I0FPFO9jKvPhY15v6De0Uu7JYtJcBumxIzNDv
SoicumisE7Jsk2NuAuqx41+1Fw6SkObSISt+tRRYgd7yLR5sJy87pcN9hw5IYGUC
Ur/upGsF2rMgj9FWMQ3FYDUgKag1+VQ=
-----END CERTIFICATE-----
Generated at Thu Jul 10 19:56:26 2025 by rpki-client