Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cbb67195-3432-3b04-acdd-f05a7bb0fb8c.roa
File:                     cbb67195-3432-3b04-acdd-f05a7bb0fb8c.roa (raw, json)
Hash identifier:          zqW3HNIMyXu915gKQ8D9VspiUyao8HMmv0fmtLc3CBc=
Subject key identifier:   99:9B:A1:23:C5:C6:4E:58:0B:79:71:0D:31:17:2D:2F:98:89:62:B5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849C20AB94C953B3B1D1F1E4600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cbb67195-3432-3b04-acdd-f05a7bb0fb8c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     6939
IP address blocks:        166.88.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b9:4c:95:3b:3b:1d:1f:1e:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=0568953c-f036-46cc-bebf-32c48ae923b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:d3:37:1c:4b:3b:be:11:d0:e7:15:aa:e8:
                    47:f6:91:56:ac:1e:85:a2:49:a8:b0:04:bc:a1:55:
                    ef:59:18:e9:04:ee:b4:fc:de:65:54:c6:bb:ef:e3:
                    a2:b0:90:ec:e4:d7:c6:d3:33:05:0b:8a:ec:7f:c9:
                    fd:a5:fb:40:d8:e1:9d:0b:d5:5a:6f:a7:30:53:b2:
                    51:d5:bf:79:77:1b:76:ce:5a:ad:43:9a:5a:43:6e:
                    20:69:56:ab:d2:0f:14:0d:81:32:10:1d:1e:d6:8c:
                    0c:17:5e:4c:ce:73:a3:6f:33:c9:b9:8a:77:d0:65:
                    fc:41:db:a6:de:4e:98:87:d9:9c:2b:9e:31:96:d4:
                    ad:b6:45:98:9a:37:e0:c3:43:37:cb:f7:66:b0:b3:
                    7e:d7:c9:a0:6b:4e:f5:24:0b:53:56:5f:50:51:68:
                    df:1c:3b:7d:c0:de:76:5d:d0:7b:96:ac:7d:32:a0:
                    20:29:39:62:28:9e:57:16:93:ac:cb:f6:fb:e0:45:
                    5b:76:e7:26:fe:f0:cf:2b:0a:c8:58:f3:1e:41:8e:
                    96:94:b7:0f:56:f0:b0:e4:4d:b8:99:ce:ff:5a:f0:
                    a4:ba:f2:dc:45:9e:d5:89:b9:a2:e2:07:8a:48:04:
                    42:04:69:d8:71:fc:9e:54:84:87:de:e1:dc:88:5e:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:A1:23:C5:C6:4E:58:0B:79:71:0D:31:17:2D:2F:98:89:62:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cbb67195-3432-3b04-acdd-f05a7bb0fb8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:65:11:3f:7d:0a:f7:5d:fa:6a:10:51:aa:18:a5:22:b6:
         d6:be:e8:0f:55:26:9a:76:28:f3:cb:5f:39:b4:ca:4d:7d:e9:
         55:e8:13:df:93:97:9d:ce:a9:97:6e:7c:1b:bd:1b:06:25:36:
         20:be:48:b9:d4:af:79:b7:07:9e:b8:48:8d:57:b6:8c:89:68:
         83:fe:f3:29:d6:e2:d2:a1:21:09:fd:e7:6e:fa:01:75:81:e2:
         a9:48:95:ee:46:c1:53:8a:a0:21:21:e4:c3:34:dc:28:1d:63:
         53:ac:07:e6:32:66:17:c2:a6:20:18:d0:b6:5b:c1:99:b7:17:
         2a:46:42:40:3b:0d:b1:c3:dd:58:11:01:f8:c9:9e:e8:1e:57:
         ba:e5:c4:79:69:58:68:91:ff:15:17:cd:6f:a5:de:5c:f5:5b:
         64:86:4c:a2:30:e7:42:10:0d:e5:5b:76:ff:8d:aa:03:e3:96:
         9a:d2:7e:a7:84:4f:a1:b2:bb:e7:1f:19:85:89:0b:c2:c3:3c:
         87:5f:ef:c6:30:21:0b:47:19:63:5c:f6:a2:fc:44:b5:cf:66:
         f5:aa:ee:04:e1:39:cc:11:2c:ab:b3:64:3d:5f:6c:99:3a:ac:
         92:2e:4d:9c:aa:4d:29:6b:aa:e9:63:cd:51:b6:6e:db:e6:cf:
         43:87:23:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCrlMlTs7HR8eRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MDU2ODk1M2MtZjAzNi00NmNjLWJlYmYtMzJjNDhhZTkyM2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LPTNxxLO74R0OcVquhH9pFWrB6FokmosAS8
oVXvWRjpBO60/N5lVMa77+OisJDs5NfG0zMFC4rsf8n9pftA2OGdC9Vab6cwU7JR
1b95dxt2zlqtQ5paQ24gaVar0g8UDYEyEB0e1owMF15MznOjbzPJuYp30GX8Qdum
3k6Yh9mcK54xltSttkWYmjfgw0M3y/dmsLN+18mga071JAtTVl9QUWjfHDt9wN52
XdB7lqx9MqAgKTliKJ5XFpOsy/b74EVbducm/vDPKwrIWPMeQY6WlLcPVvCw5E24
mc7/WvCkuvLcRZ7Vibmi4geKSARCBGnYcfyeVISH3uHciF4TjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmboSPFxk5YC3lxDTEXLS+YiWK1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2JiNjcxOTUtMzQzMi0z
YjA0LWFjZGQtZjA1YTdiYjBmYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBKZRE/fQr3XfpqEFGqGKUitta+6A9VJpp2KPPLXzm0yk196VXoE9+T
l53OqZdufBu9GwYlNiC+SLnUr3m3B564SI1XtoyJaIP+8ynW4tKhIQn95276AXWB
4qlIle5GwVOKoCEh5MM03CgdY1OsB+YyZhfCpiAY0LZbwZm3FypGQkA7DbHD3VgR
AfjJnugeV7rlxHlpWGiR/xUXzW+l3lz1W2SGTKIw50IQDeVbdv+NqgPjlprSfqeE
T6Gyu+cfGYWJC8LDPIdf78YwIQtHGWNc9qL8RLXPZvWq7gThOcwRLKuzZD1fbJk6
rJIuTZyqTSlrquljzVG2btvmz0OHI6E=
-----END CERTIFICATE-----
Generated at Tue May 6 15:13:46 2025 by rpki-client