Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/164e3a50-b5dc-328d-94f7-2ff10ef36346.roa
File:                     164e3a50-b5dc-328d-94f7-2ff10ef36346.roa (raw, json)
Hash identifier:          657QlZ9FrH5a4fWCQQJWq4Z2koi/hW2XdsY1+oLTrPI=
Subject key identifier:   F1:A6:52:C5:62:09:46:48:25:96:27:FF:33:D9:12:C6:A9:59:4D:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499294AE6A9E441E92BF42BA40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/164e3a50-b5dc-328d-94f7-2ff10ef36346.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     209854
IP address blocks:        166.88.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:ae:6a:9e:44:1e:92:bf:42:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=cc0a07c1-8227-417a-a4cb-4aeb582ebc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:59:a4:92:00:5e:82:fb:61:51:82:c3:e6:
                    74:e1:10:ac:e0:ce:07:43:a7:00:6e:b3:99:3c:05:
                    07:62:49:62:62:e6:0e:bd:8c:40:39:3e:2e:5a:ae:
                    b1:90:79:24:c3:55:64:76:91:63:a9:d1:ae:eb:13:
                    3b:57:3f:04:0d:41:6c:38:73:a7:58:49:d4:5c:04:
                    ba:b3:a0:cb:31:76:69:65:c6:3d:7a:03:d9:48:bf:
                    06:7f:88:fd:88:28:85:ad:73:92:09:7e:d8:07:b1:
                    f5:dd:5c:22:70:9e:46:23:e1:a4:d7:14:b3:5b:0e:
                    51:7c:87:ee:c7:04:36:a1:0c:c4:58:7a:fc:82:0e:
                    a8:c0:b9:ac:54:e5:a9:9e:53:a4:17:f2:d5:3a:cb:
                    07:47:05:72:8e:3a:64:43:ee:df:55:22:a5:a4:5f:
                    e6:63:22:a0:a3:48:0f:75:85:1f:48:c3:b5:03:8f:
                    b7:7b:56:80:5c:fb:11:fe:1a:e4:ab:a2:a3:27:73:
                    41:69:cd:d6:27:80:19:22:f6:37:6f:d2:15:7b:15:
                    d9:fb:6f:61:ba:92:eb:fe:59:a2:32:e5:63:e5:21:
                    08:92:c3:f7:94:95:62:4e:1d:3c:e5:a8:fd:9b:f5:
                    0e:e1:65:eb:1a:19:e3:20:90:d6:bd:2c:27:42:83:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A6:52:C5:62:09:46:48:25:96:27:FF:33:D9:12:C6:A9:59:4D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/164e3a50-b5dc-328d-94f7-2ff10ef36346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:82:fd:44:d7:3a:59:c8:41:74:13:49:30:c7:5d:8f:ed:97:
         de:f3:13:a8:f0:a2:d7:82:e5:4b:7d:28:d0:51:15:9b:da:a9:
         d7:ca:15:29:65:65:77:4e:da:60:4a:dc:55:50:1f:7f:ad:04:
         b1:45:fb:e9:e2:45:04:da:67:9e:4c:a1:1e:01:60:1c:c6:78:
         b5:12:9e:2f:11:af:8c:83:a8:46:58:2b:65:d8:78:c4:40:f9:
         c3:ca:8f:48:33:e7:19:8c:6e:77:f0:b2:ff:17:db:a2:0a:6d:
         a5:01:67:47:f0:1e:57:70:5d:cb:2d:d9:5a:87:1a:4b:48:ce:
         db:a1:41:61:01:63:31:af:3c:60:16:62:71:20:43:92:fc:b3:
         4f:0c:c4:28:ee:5a:84:c1:cd:f8:e8:72:7c:99:c3:ba:df:3a:
         56:0d:88:01:54:c3:81:07:ff:e2:a0:21:4f:e6:b9:d3:a2:f1:
         99:13:51:3b:6b:d4:26:57:e4:55:77:e3:62:83:97:90:40:96:
         49:9c:ad:05:d1:0f:05:c6:ce:a0:87:43:76:52:6e:22:03:fd:
         fe:12:c3:ff:a2:2a:a2:ab:5e:c8:f6:fc:1d:82:96:0d:89:87:
         16:73:28:3e:61:39:28:bc:3d:d5:d9:44:04:a5:4f:ee:0c:66:
         d6:d0:64:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlK5qnkQekr9CukAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
Y2MwYTA3YzEtODIyNy00MTdhLWE0Y2ItNGFlYjU4MmViYzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL5ZpJIAXoL7YVGCw+Z04RCs4M4HQ6cAbrOZ
PAUHYkliYuYOvYxAOT4uWq6xkHkkw1VkdpFjqdGu6xM7Vz8EDUFsOHOnWEnUXAS6
s6DLMXZpZcY9egPZSL8Gf4j9iCiFrXOSCX7YB7H13VwicJ5GI+Gk1xSzWw5RfIfu
xwQ2oQzEWHr8gg6owLmsVOWpnlOkF/LVOssHRwVyjjpkQ+7fVSKlpF/mYyKgo0gP
dYUfSMO1A4+3e1aAXPsR/hrkq6KjJ3NBac3WJ4AZIvY3b9IVexXZ+29hupLr/lmi
MuVj5SEIksP3lJViTh085aj9m/UO4WXrGhnjIJDWvSwnQoPfFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGmUsViCUZIJZYn/zPZEsapWU3wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTY0ZTNhNTAtYjVkYy0z
MjhkLTk0ZjctMmZmMTBlZjM2MzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSC/UTXOlnIQXQTSTDHXY/tl97zE6jwoteC5Ut9KNBRFZvaqdfKFSll
ZXdO2mBK3FVQH3+tBLFF++niRQTaZ55MoR4BYBzGeLUSni8Rr4yDqEZYK2XYeMRA
+cPKj0gz5xmMbnfwsv8X26IKbaUBZ0fwHldwXcst2VqHGktIztuhQWEBYzGvPGAW
YnEgQ5L8s08MxCjuWoTBzfjocnyZw7rfOlYNiAFUw4EH/+KgIU/mudOi8ZkTUTtr
1CZX5FV342KDl5BAlkmcrQXRDwXGzqCHQ3ZSbiID/f4Sw/+iKqKrXsj2/B2Clg2J
hxZzKD5hOSi8PdXZRASlT+4MZtbQZE4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:55 2025 by rpki-client