Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa
File:                     8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa (raw, json)
Hash identifier:          5BrtevVzulRQbgJQWMyeLQZjyvH8Sn8cxrAxIKaG/Fo=
Subject key identifier:   26:0D:4B:30:E2:69:8C:93:21:C8:41:DB:75:5B:C4:E8:D2:7A:1D:4D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ACCA6912766C5761FA906B8C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     216093
IP address blocks:        166.88.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:91:27:66:c5:76:1f:a9:06:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=dac60d4f-356a-425e-94d2-58ba711aa1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:83:90:db:68:6b:74:a5:c9:46:25:30:d5:
                    ea:5e:d2:6d:23:98:99:83:58:9a:39:08:83:5f:de:
                    79:da:d6:22:b6:9e:bd:cf:4f:40:00:35:aa:ea:23:
                    17:3f:58:be:72:65:3f:0d:00:5b:db:6d:c9:4a:bb:
                    d2:35:f5:e1:64:52:c1:d3:8d:06:8c:82:f3:a9:5d:
                    b8:a5:ee:ec:4e:cb:16:6d:53:75:fd:08:7d:ab:43:
                    5d:29:03:8f:a6:0b:12:ff:29:9e:11:3f:11:ec:2e:
                    5b:bd:b3:b3:39:16:73:d2:40:00:8f:38:91:e3:f5:
                    ba:15:a9:4d:73:00:b8:f3:d2:59:2d:0a:e5:62:eb:
                    27:6e:c3:78:67:90:18:86:cd:7a:d2:6f:55:d2:98:
                    92:60:0b:09:eb:92:fa:ef:c1:3a:00:b4:3f:ae:1b:
                    7d:2a:5f:24:2d:1c:cd:2a:92:b2:44:b8:ba:81:39:
                    cc:28:63:12:85:c1:af:06:02:cc:a9:ab:f1:17:b6:
                    5d:3e:5b:46:60:6e:68:e1:06:16:cd:e0:25:03:cd:
                    36:28:af:c7:84:89:64:86:f8:01:73:cc:30:b8:74:
                    d8:b9:2c:af:84:7e:03:e2:e1:1a:60:f7:08:c0:30:
                    82:bd:71:e0:93:19:1d:0b:f1:2f:87:eb:ac:60:ed:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0D:4B:30:E2:69:8C:93:21:C8:41:DB:75:5B:C4:E8:D2:7A:1D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2bd204-1900-3b87-b914-eadc3bf4cdf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:b7:58:78:21:af:33:6c:45:75:1a:b8:a8:c1:9f:8d:a0:
         10:ad:b4:36:c7:b4:da:65:91:e3:3a:87:9b:69:c0:e4:7c:3b:
         13:eb:51:bc:4e:47:0b:1c:eb:f3:51:5a:24:29:72:09:c1:04:
         64:0f:a5:a7:48:3e:aa:f5:63:7e:a4:35:f3:74:60:1d:8e:7d:
         bc:ab:dc:39:e7:42:27:4d:c9:e8:b5:5b:75:d9:3b:88:5c:c3:
         46:14:a0:de:3e:1b:87:89:1f:38:08:ae:53:db:c1:3f:5e:94:
         a8:f5:bc:17:fe:26:ec:a5:d8:af:7d:5b:45:96:53:1d:50:ff:
         69:e2:cc:b4:67:c6:ce:fa:6d:60:fc:21:bf:2b:45:86:2c:7a:
         03:72:2c:cf:f6:e9:5d:67:53:dd:3d:f6:fe:35:de:f6:0c:c4:
         f3:a0:55:33:98:a2:28:c0:2c:6e:19:32:1f:d0:8c:2e:45:d0:
         d8:d6:17:52:3b:8a:de:c4:5d:c5:05:cf:8b:db:3d:95:34:a3:
         97:11:09:a5:c4:bb:48:af:e7:a8:1b:ca:68:0c:3f:b4:78:ad:
         a8:3c:e2:83:eb:ef:ef:08:52:23:94:19:41:2b:28:43:da:4e:
         e5:3c:a2:cb:b5:2c:17:0e:40:43:b4:d6:4a:99:a4:a4:13:1a:
         a7:26:88:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMppEnZsV2H6kGuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZGFjNjBkNGYtMzU2YS00MjVlLTk0ZDItNThiYTcxMWFhMWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJCDkNtoa3SlyUYlMNXqXtJtI5iZg1iaOQiD
X9552tYitp69z09AADWq6iMXP1i+cmU/DQBb223JSrvSNfXhZFLB040GjILzqV24
pe7sTssWbVN1/Qh9q0NdKQOPpgsS/ymeET8R7C5bvbOzORZz0kAAjziR4/W6FalN
cwC489JZLQrlYusnbsN4Z5AYhs160m9V0piSYAsJ65L678E6ALQ/rht9Kl8kLRzN
KpKyRLi6gTnMKGMShcGvBgLMqavxF7ZdPltGYG5o4QYWzeAlA802KK/HhIlkhvgB
c8wwuHTYuSyvhH4D4uEaYPcIwDCCvXHgkxkdC/Evh+usYO0YWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYNSzDiaYyTIchB23VbxOjSeh1NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGMyYmQyMDQtMTkwMC0z
Yjg3LWI5MTQtZWFkYzNiZjRjZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLdt1h4Ia8zbEV1GriowZ+NoBCttDbHtNplkeM6h5tpwOR8OxPrUbxO
Rwsc6/NRWiQpcgnBBGQPpadIPqr1Y36kNfN0YB2Ofbyr3DnnQidNyei1W3XZO4hc
w0YUoN4+G4eJHzgIrlPbwT9elKj1vBf+Juyl2K99W0WWUx1Q/2nizLRnxs76bWD8
Ib8rRYYsegNyLM/26V1nU9099v413vYMxPOgVTOYoijALG4ZMh/QjC5F0NjWF1I7
it7EXcUFz4vbPZU0o5cRCaXEu0iv56gbymgMP7R4rag84oPr7+8IUiOUGUErKEPa
TuU8osu1LBcOQEO01kqZpKQTGqcmiGw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:56 2025 by rpki-client