Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3cc604a-868c-3f8a-a272-53d8e91e8981.roa
File:                     e3cc604a-868c-3f8a-a272-53d8e91e8981.roa (raw, json)
Hash identifier:          zFlFiNuacphP54cp8WZhv8ubSEw7uKG+SWtHR8SpgVo=
Subject key identifier:   EC:96:1E:2A:B8:55:80:E2:FB:96:B6:6D:B7:1A:B9:5D:0B:62:1A:58
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6826395E70B62DB267504D40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3cc604a-868c-3f8a-a272-53d8e91e8981.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     149440
IP address blocks:        166.88.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:39:5e:70:b6:2d:b2:67:50:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=19a77c8c-142d-4962-a8b7-8b4d625a76f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:7d:44:26:33:38:12:31:77:04:f1:f9:3b:
                    60:0c:56:83:e8:27:b8:64:a8:9d:55:9d:d3:f6:60:
                    0b:ee:94:72:b6:48:32:b6:39:89:ee:fa:e0:4f:e1:
                    2b:c4:03:ce:82:09:63:e9:5e:89:70:58:06:17:15:
                    b2:6a:23:dc:7a:89:cb:bb:a4:5b:92:f1:56:47:c4:
                    8f:62:42:6e:58:f5:ae:03:ba:5e:87:ae:a6:df:b8:
                    5e:cc:66:62:79:ef:a2:96:07:31:a9:0d:a9:e5:e3:
                    7d:3f:56:89:1d:6e:56:6f:71:3f:f1:53:ad:b6:1e:
                    49:1c:85:f2:05:fe:76:c3:bf:64:56:bc:2f:d6:22:
                    e3:93:6b:2b:9d:28:e4:85:41:8c:0e:d9:ac:74:b1:
                    19:ee:9a:39:75:5d:94:d9:aa:01:3f:52:9c:0a:c2:
                    ed:05:6b:31:37:d6:00:d6:59:dc:1a:42:03:ad:ec:
                    0f:d6:89:a7:24:a1:de:a3:45:ae:68:8c:e3:da:17:
                    ac:b6:b0:d3:f9:2e:20:d6:34:8b:00:e7:51:ac:dd:
                    73:b4:4e:4a:33:ca:a5:9b:ba:99:07:3f:17:84:96:
                    5d:c5:42:fa:75:dd:4f:96:ab:f4:4b:6a:d0:08:16:
                    58:80:75:71:88:bd:83:83:7b:48:f3:05:e0:c7:0d:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:1E:2A:B8:55:80:E2:FB:96:B6:6D:B7:1A:B9:5D:0B:62:1A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3cc604a-868c-3f8a-a272-53d8e91e8981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ca:16:8a:c1:c9:89:d2:0f:a3:4d:1e:c6:c5:e7:fb:c0:8f:
         53:ab:f8:f0:93:9a:c4:ae:61:2d:76:2a:2c:f4:93:4a:84:6a:
         0e:80:57:7b:fd:85:55:aa:f1:f2:e0:70:3e:be:aa:80:a7:eb:
         25:bd:b8:7b:79:06:ba:06:6e:2a:ef:b1:a8:35:dd:0c:5c:a6:
         a0:53:3c:00:43:07:49:f0:74:19:d2:24:10:4c:35:41:fe:5a:
         64:78:02:a1:1c:f7:9f:b9:db:ae:11:94:5f:a1:da:74:12:be:
         fc:dc:84:c8:c1:a7:51:78:b7:9d:21:ec:4e:2e:ee:1c:6c:45:
         1a:2c:d3:c2:03:2d:ff:8e:77:c8:5d:6f:fa:19:90:34:1b:e1:
         d6:69:b6:34:3d:d3:01:bb:36:d0:c1:5a:b6:82:c6:58:38:3a:
         15:8e:a0:5e:25:90:02:81:02:6c:11:7e:6b:9b:f0:45:70:8c:
         d6:82:1e:ae:dc:60:b5:68:51:d1:30:4c:57:fd:61:fc:89:5b:
         92:ab:e0:a8:16:38:c1:70:98:a8:6a:53:63:67:f7:25:04:4d:
         8d:1b:e9:63:db:3a:e5:bb:1c:91:3c:2d:b0:fd:a7:2c:08:ae:
         ac:02:1e:d1:4a:43:df:1c:9c:72:91:f4:cb:0d:61:5d:38:2c:
         df:f1:31:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjlecLYtsmdQTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MTlhNzdjOGMtMTQyZC00OTYyLWE4YjctOGI0ZDYyNWE3NmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLt9RCYzOBIxdwTx+TtgDFaD6Ce4ZKidVZ3T
9mAL7pRytkgytjmJ7vrgT+ErxAPOgglj6V6JcFgGFxWyaiPceonLu6RbkvFWR8SP
YkJuWPWuA7peh66m37hezGZiee+ilgcxqQ2p5eN9P1aJHW5Wb3E/8VOtth5JHIXy
Bf52w79kVrwv1iLjk2srnSjkhUGMDtmsdLEZ7po5dV2U2aoBP1KcCsLtBWsxN9YA
1lncGkIDrewP1omnJKHeo0WuaIzj2hestrDT+S4g1jSLAOdRrN1ztE5KM8qlm7qZ
Bz8XhJZdxUL6dd1Plqv0S2rQCBZYgHVxiL2Dg3tI8wXgxw1hPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyWHiq4VYDi+5a2bbcauV0LYhpYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTNjYzYwNGEtODY4Yy0z
ZjhhLWEyNzItNTNkOGU5MWU4OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7KForByYnSD6NNHsbF5/vAj1Or+PCTmsSuYS12Kiz0k0qEag6AV3v9
hVWq8fLgcD6+qoCn6yW9uHt5BroGbirvsag13QxcpqBTPABDB0nwdBnSJBBMNUH+
WmR4AqEc95+5264RlF+h2nQSvvzchMjBp1F4t50h7E4u7hxsRRos08IDLf+Od8hd
b/oZkDQb4dZptjQ90wG7NtDBWraCxlg4OhWOoF4lkAKBAmwRfmub8EVwjNaCHq7c
YLVoUdEwTFf9YfyJW5Kr4KgWOMFwmKhqU2Nn9yUETY0b6WPbOuW7HJE8LbD9pywI
rqwCHtFKQ98cnHKR9MsNYV04LN/xMZg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 18:45:27 2025 by rpki-client