Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b17094c4-0df5-349d-a115-4e724266a383.roa
File:                     b17094c4-0df5-349d-a115-4e724266a383.roa (raw, json)
Hash identifier:          B3PEdYc8SryllTxsEZzNy5OPZKoTB0ThRhlqx+h4NHQ=
Subject key identifier:   A7:89:B6:2A:B3:60:41:DD:83:99:5D:13:0F:49:0E:9F:AC:8B:58:84
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6826391DEC5119AE02036800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b17094c4-0df5-349d-a115-4e724266a383.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     149440
IP address blocks:        166.88.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:39:1d:ec:51:19:ae:02:03:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d56e2d72-d31f-40df-b2a3-c1ca40ad74b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:c5:17:f5:04:48:c4:9f:47:fb:ee:e8:1c:
                    7e:2b:06:96:50:96:0d:03:d3:c0:d8:5a:4b:db:66:
                    11:02:f3:fd:d9:2f:65:9c:68:80:a3:11:8c:fc:b5:
                    c4:c3:f1:a1:9e:84:7f:c2:0b:88:9c:04:7f:fb:21:
                    18:20:79:ca:cd:ed:31:27:3c:81:02:3b:64:cc:20:
                    49:fa:ee:e9:87:ca:33:b6:85:92:bd:ab:81:48:44:
                    6e:03:88:7f:72:e6:1d:b8:92:7b:64:bd:3e:42:c9:
                    7c:82:eb:72:ea:df:e4:7d:08:d7:13:ae:b4:ef:1b:
                    07:43:37:96:9f:1a:d3:cf:5a:40:d2:06:87:96:36:
                    61:f0:dc:2c:b1:42:59:ec:05:2c:7d:83:c3:c6:da:
                    0e:57:d0:12:28:61:5e:6a:8b:9d:47:c5:8e:e7:4e:
                    09:59:b8:32:0a:ce:ed:a5:54:af:2e:c9:a1:1d:97:
                    7f:8b:d6:9c:b3:b6:38:6b:19:6f:fc:13:41:c2:b9:
                    9d:a8:d4:e7:77:3e:00:d1:b6:75:d0:4d:26:f1:d0:
                    31:2e:88:eb:52:43:96:02:60:7e:76:7c:e4:b7:1c:
                    7b:c4:56:3d:e3:e8:be:e2:a1:03:34:0e:76:de:2c:
                    89:c7:0e:3a:3d:7e:3a:14:f2:c7:6e:ab:91:eb:10:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:B6:2A:B3:60:41:DD:83:99:5D:13:0F:49:0E:9F:AC:8B:58:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b17094c4-0df5-349d-a115-4e724266a383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ce:ae:bd:3b:cc:ee:2b:84:cd:ac:08:f3:7b:03:31:30:24:
         27:6d:2d:21:6b:7f:37:74:66:ed:9b:df:43:3c:7a:1b:e4:4d:
         32:5a:47:35:0e:ab:7a:a6:3a:40:82:a4:f6:3f:03:3e:b8:79:
         20:50:7f:38:02:c8:6b:29:77:c9:df:77:fc:6c:79:bd:7e:3d:
         cf:be:94:c2:a0:43:c4:e6:d5:11:2e:03:af:88:fa:b1:23:29:
         0b:40:22:e1:a4:6f:34:df:25:0e:15:c8:7b:0d:a2:cd:a2:ee:
         43:35:8d:11:14:40:0f:93:6a:73:57:4b:16:f4:45:66:df:83:
         6c:57:6e:9f:f4:c4:f9:9b:ab:e7:3d:56:7e:e0:9d:74:c2:6e:
         d3:e3:2a:59:da:e6:0d:9f:ba:6d:63:29:4b:d6:fe:0b:a7:b1:
         ad:2c:b1:ff:49:f9:a9:33:95:a5:d6:51:7c:70:cb:08:d1:4a:
         4b:e6:1d:95:e8:52:f1:96:54:3f:6f:87:e1:a3:ca:6f:71:9d:
         84:a6:76:8b:1b:da:1b:f9:af:01:fa:75:8c:ef:27:63:0d:1e:
         27:6f:17:db:7d:5f:e3:c0:d6:83:e3:e7:f7:2b:a5:3c:cc:f8:
         a5:b2:17:38:24:cb:02:9e:81:0c:5c:97:15:8a:9c:71:71:e1:
         e7:c1:5a:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjkd7FEZrgIDaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZDU2ZTJkNzItZDMxZi00MGRmLWIyYTMtYzFjYTQwYWQ3NGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraXFF/UESMSfR/vu6Bx+KwaWUJYNA9PA2FpL
22YRAvP92S9lnGiAoxGM/LXEw/GhnoR/wguInAR/+yEYIHnKze0xJzyBAjtkzCBJ
+u7ph8oztoWSvauBSERuA4h/cuYduJJ7ZL0+Qsl8guty6t/kfQjXE6607xsHQzeW
nxrTz1pA0gaHljZh8NwssUJZ7AUsfYPDxtoOV9ASKGFeaoudR8WO504JWbgyCs7t
pVSvLsmhHZd/i9acs7Y4axlv/BNBwrmdqNTndz4A0bZ10E0m8dAxLojrUkOWAmB+
dnzktxx7xFY94+i+4qEDNA523iyJxw46PX46FPLHbquR6xBJ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKeJtiqzYEHdg5ldEw9JDp+si1iEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjE3MDk0YzQtMGRmNS0z
NDlkLWExMTUtNGU3MjQyNjZhMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplg2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/Orr07zO4rhM2sCPN7AzEwJCdtLSFrfzd0Zu2b30M8ehvkTTJaRzUO
q3qmOkCCpPY/Az64eSBQfzgCyGspd8nfd/xseb1+Pc++lMKgQ8Tm1REuA6+I+rEj
KQtAIuGkbzTfJQ4VyHsNos2i7kM1jREUQA+TanNXSxb0RWbfg2xXbp/0xPmbq+c9
Vn7gnXTCbtPjKlna5g2fum1jKUvW/gunsa0ssf9J+akzlaXWUXxwywjRSkvmHZXo
UvGWVD9vh+Gjym9xnYSmdosb2hv5rwH6dYzvJ2MNHidvF9t9X+PA1oPj5/crpTzM
+KWyFzgkywKegQxclxWKnHFx4efBWqM=
-----END CERTIFICATE-----
Generated at Thu Jul 10 17:06:18 2025 by rpki-client