Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa
File:                     5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa (raw, json)
Hash identifier:          x+l5N4Z9mWIKU5yUEn4txw8xaL9c1rqB6a9cwvoEU5k=
Subject key identifier:   DA:C3:61:C2:18:47:FF:9E:A9:8E:21:B2:73:AF:29:4D:50:5B:7D:90
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A794DFD15F0F51B0197E68B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa
Signing time:             Thu 10 Jul 2025 16:30:43 +0000
ROA not before:           Thu 10 Jul 2025 16:30:43 +0000
ROA not after:            Wed 08 Oct 2025 16:30:43 +0000
asID:                     213823
IP address blocks:        166.88.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:4d:fd:15:f0:f5:1b:01:97:e6:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 10 16:30:43 2025 GMT
            Not After : Oct  8 16:30:43 2025 GMT
        Subject: CN=b76a7119-b4c1-4165-a572-b74420f5010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:24:a2:42:4e:e7:87:7a:f0:6a:ed:72:0e:
                    38:4f:c2:06:8f:9b:9a:dd:e7:d0:12:7e:49:24:3c:
                    18:62:f6:d0:9f:02:1a:48:37:11:86:d1:20:ef:ca:
                    78:2d:14:69:43:d4:64:0b:5f:50:ff:55:bd:8c:b1:
                    9e:fa:71:b6:43:23:9d:f1:b9:97:3a:a0:15:2f:55:
                    74:9b:43:26:1d:d2:62:87:2e:9a:f8:1d:4b:17:ba:
                    66:1a:7b:57:bf:ab:5c:78:05:bb:db:00:ac:6f:5d:
                    2d:08:74:a8:3a:74:57:29:62:62:d4:ed:41:98:ac:
                    4a:04:39:2a:05:8e:0d:af:8b:68:1b:56:41:a9:54:
                    12:70:13:5e:6b:6a:d6:d4:b2:c0:8f:28:8d:08:57:
                    bc:bd:f3:7e:43:1c:61:3b:d0:fa:a4:72:a5:44:00:
                    67:2b:96:e0:d9:5c:af:a9:e4:4c:bf:24:09:c2:c6:
                    f0:17:9d:23:67:ee:74:17:4b:f5:ae:eb:22:9e:54:
                    77:52:20:cb:a3:1a:94:79:bf:5c:74:8d:94:01:0f:
                    12:34:64:80:13:a0:b8:94:66:a2:f9:0e:7d:87:f8:
                    b8:c9:cc:cb:8d:99:fd:d2:36:c2:5e:0b:96:79:e1:
                    4b:30:26:b6:b5:a4:87:65:c0:8f:21:05:0d:8c:96:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:61:C2:18:47:FF:9E:A9:8E:21:B2:73:AF:29:4D:50:5B:7D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:20:86:22:bb:7d:83:d6:3a:fd:a2:76:98:86:ba:77:5b:72:
         13:16:7a:45:4d:20:bd:3f:be:1b:cb:13:30:15:c0:0a:d4:85:
         b1:4c:3e:4a:c8:cf:c1:02:cc:11:8d:7b:ba:80:80:1c:90:11:
         6b:cd:d7:89:01:b5:f6:7f:5d:08:47:c6:8d:ba:1a:bc:62:1f:
         96:d3:aa:2a:26:38:54:a3:00:e0:70:b9:ac:6c:0b:0e:fb:2e:
         a1:58:99:dd:92:ec:5d:d6:33:0d:82:08:62:76:1f:58:9f:df:
         0e:1d:a4:eb:f8:48:fd:24:7d:d9:b7:66:07:ea:68:2a:ef:a0:
         10:92:f4:99:9a:81:e3:a1:e1:45:98:e4:51:de:47:d2:57:24:
         8b:f1:68:49:a2:14:be:66:df:c3:4a:c1:40:ca:68:14:ec:2f:
         92:c4:74:01:2c:d2:26:97:b9:3e:4e:13:8c:6e:bf:90:96:3f:
         a3:a5:47:3c:1d:3e:6c:3a:42:f0:76:a7:b5:92:03:ce:3d:0c:
         0b:9f:c0:e8:30:5f:22:e6:bf:67:41:2a:4a:44:be:c7:dc:4f:
         da:19:1d:34:1e:f7:b9:ee:4e:0b:3d:17:e0:dd:4f:35:36:87:
         0b:0c:5a:55:b6:d2:df:3e:a3:35:f5:31:f7:ac:1e:bd:fc:2c:
         25:95:16:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp5Tf0V8PUbAZfmi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcxMDE2MzA0M1oXDTI1MTAwODE2MzA0M1owLzEtMCsGA1UEAxMk
Yjc2YTcxMTktYjRjMS00MTY1LWE1NzItYjc0NDIwZjUwMTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKwkokJO54d68Grtcg44T8IGj5ua3efQEn5J
JDwYYvbQnwIaSDcRhtEg78p4LRRpQ9RkC19Q/1W9jLGe+nG2QyOd8bmXOqAVL1V0
m0MmHdJihy6a+B1LF7pmGntXv6tceAW72wCsb10tCHSoOnRXKWJi1O1BmKxKBDkq
BY4Nr4toG1ZBqVQScBNea2rW1LLAjyiNCFe8vfN+QxxhO9D6pHKlRABnK5bg2Vyv
qeRMvyQJwsbwF50jZ+50F0v1rusinlR3UiDLoxqUeb9cdI2UAQ8SNGSAE6C4lGai
+Q59h/i4yczLjZn90jbCXguWeeFLMCa2taSHZcCPIQUNjJby2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrDYcIYR/+eqY4hsnOvKU1QW32QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTYyNjkyMmEtZjZjMC0z
YWM4LTg1YTMtMmZlZTI4NmU0YmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplixMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEghiK7fYPWOv2idpiGundbchMWekVNIL0/vhvLEzAVwArUhbFMPkrI
z8ECzBGNe7qAgByQEWvN14kBtfZ/XQhHxo26GrxiH5bTqiomOFSjAOBwuaxsCw77
LqFYmd2S7F3WMw2CCGJ2H1if3w4dpOv4SP0kfdm3ZgfqaCrvoBCS9JmageOh4UWY
5FHeR9JXJIvxaEmiFL5m38NKwUDKaBTsL5LEdAEs0iaXuT5OE4xuv5CWP6OlRzwd
Pmw6QvB2p7WSA849DAufwOgwXyLmv2dBKkpEvsfcT9oZHTQe97nuTgs9F+DdTzU2
hwsMWlW20t8+ozX1MfesHr38LCWVFkQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:24 2025 by rpki-client