Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9208aa7e-74bd-34ba-9977-76859d2acbff.roa
File:                     9208aa7e-74bd-34ba-9977-76859d2acbff.roa (raw, json)
Hash identifier:          dgFdqfpuzJVqvatK7Q+BkgECKiNbrvmBnHoj+WSai0A=
Subject key identifier:   0D:87:B4:1F:C2:2E:2F:46:5A:EE:06:0F:E5:0B:00:5E:5E:38:11:92
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5F4A9920CE199EFC4480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9208aa7e-74bd-34ba-9977-76859d2acbff.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5f:4a:99:20:ce:19:9e:fc:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=67574aa0-8efe-47a4-b1da-be7ba2fae42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:ba:b1:8e:b3:f4:95:71:68:4f:4d:9f:ae:
                    80:99:55:e2:6d:c4:b5:bc:50:26:67:5b:f2:e6:c5:
                    98:7c:68:61:42:3e:9f:5a:85:f3:14:a2:45:38:8a:
                    3f:05:dc:52:ae:f3:72:e7:ef:f9:aa:c3:46:1f:f0:
                    e0:d8:b6:86:99:cd:ca:06:44:a7:74:3d:87:fa:55:
                    6b:b6:53:0e:63:ff:4e:f9:df:ff:c2:35:d7:e7:ab:
                    e8:b7:37:2b:e0:ce:99:cd:fb:1a:56:e7:64:04:0e:
                    e7:13:49:85:ca:d8:d8:78:10:5c:47:6d:bf:e7:ad:
                    a7:18:bb:5d:d8:5f:c9:cc:fb:ba:6e:ac:eb:4a:7d:
                    44:77:a4:07:a8:e6:5c:4d:72:76:32:64:a5:6e:a7:
                    be:af:7e:4f:a6:09:2f:c0:ec:44:fb:e6:85:59:7e:
                    aa:8b:b3:17:4c:90:47:0f:01:78:1a:b1:bf:a4:a1:
                    39:85:5f:46:e7:61:3e:1a:52:cc:fe:a4:16:ca:27:
                    3c:44:02:52:0f:2d:9c:7b:e2:d8:94:86:5c:cd:cf:
                    e6:2c:0d:0b:db:28:17:8f:c8:44:9d:25:e2:b6:af:
                    59:e9:e5:e6:bf:a4:8f:fa:10:4f:c8:90:0b:bd:91:
                    eb:9e:2a:61:de:46:da:e8:7e:31:9a:c4:29:7f:20:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:B4:1F:C2:2E:2F:46:5A:EE:06:0F:E5:0B:00:5E:5E:38:11:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9208aa7e-74bd-34ba-9977-76859d2acbff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:fe:bb:c8:77:a5:67:26:e8:45:63:50:90:42:b4:79:ea:
         ba:ac:e1:e3:56:36:85:b5:69:7b:22:d7:ad:6f:15:f6:29:23:
         5b:fe:da:8d:b8:6a:5e:ce:1a:87:21:27:31:d7:21:48:d7:09:
         bb:69:91:a1:ff:49:79:ad:ac:e2:70:10:4b:08:75:ef:3d:81:
         d5:2a:27:08:ee:b8:1f:d9:b4:dc:c1:9e:4e:4e:72:64:ae:33:
         14:ab:ed:bc:6c:9c:c2:10:37:12:8b:97:c0:86:81:cf:e0:1b:
         ce:8c:51:b0:43:a1:f5:5a:48:2e:6f:17:57:b4:2b:18:d9:3b:
         d7:69:22:2c:ff:1e:ce:78:24:ac:3d:a5:5d:93:0f:fd:49:55:
         10:75:f9:d6:32:9c:56:2c:e3:dc:b3:51:1e:ac:a0:38:47:f7:
         f9:00:a3:e3:e5:0d:3a:5b:12:8d:be:c7:6a:11:5f:c2:c8:47:
         9b:38:ee:6e:f5:80:0c:8f:57:95:9b:f9:b9:fa:33:a4:06:91:
         e3:01:81:85:2a:c8:d9:03:81:3e:b2:2d:c4:e6:9c:27:24:95:
         42:28:be:2e:2c:51:53:2a:2b:72:28:60:aa:dd:22:57:d6:2f:
         ea:4e:4f:a9:37:d9:89:71:2b:2e:fa:5e:4d:bb:14:41:3d:71:
         8d:41:c3:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu19KmSDOGZ78RIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
Njc1NzRhYTAtOGVmZS00N2E0LWIxZGEtYmU3YmEyZmFlNDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdC6sY6z9JVxaE9Nn66AmVXibcS1vFAmZ1vy
5sWYfGhhQj6fWoXzFKJFOIo/BdxSrvNy5+/5qsNGH/Dg2LaGmc3KBkSndD2H+lVr
tlMOY/9O+d//wjXX56votzcr4M6ZzfsaVudkBA7nE0mFytjYeBBcR22/562nGLtd
2F/JzPu6bqzrSn1Ed6QHqOZcTXJ2MmSlbqe+r35PpgkvwOxE++aFWX6qi7MXTJBH
DwF4GrG/pKE5hV9G52E+GlLM/qQWyic8RAJSDy2ce+LYlIZczc/mLA0L2ygXj8hE
nSXitq9Z6eXmv6SP+hBPyJALvZHrniph3kba6H4xmsQpfyDB0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2HtB/CLi9GWu4GD+ULAF5eOBGSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTIwOGFhN2UtNzRiZC0z
NGJhLTk5NzctNzY4NTlkMmFjYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplibMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEou/rvId6VnJuhFY1CQQrR56rqs4eNWNoW1aXsi161vFfYpI1v+2o24
al7OGochJzHXIUjXCbtpkaH/SXmtrOJwEEsIde89gdUqJwjuuB/ZtNzBnk5OcmSu
MxSr7bxsnMIQNxKLl8CGgc/gG86MUbBDofVaSC5vF1e0KxjZO9dpIiz/Hs54JKw9
pV2TD/1JVRB1+dYynFYs49yzUR6soDhH9/kAo+PlDTpbEo2+x2oRX8LIR5s47m71
gAyPV5Wb+bn6M6QGkeMBgYUqyNkDgT6yLcTmnCcklUIovi4sUVMqK3IoYKrdIlfW
L+pOT6k32YlxKy76Xk27FEE9cY1Bw04=
-----END CERTIFICATE-----
Generated at Thu Jul 10 19:54:35 2025 by rpki-client