Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17afece9-579d-33e3-aad9-3cf4fcf5b802.roa
File:                     17afece9-579d-33e3-aad9-3cf4fcf5b802.roa (raw, json)
Hash identifier:          lYTigvTJjPtXT88sKmZoTv2bC84TWdIpHX4FZGg2Sjc=
Subject key identifier:   C9:62:C7:79:9B:F0:8F:D5:DA:9F:F8:FB:75:9C:61:05:D1:FC:D5:56
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8AC4EED65C8AB4717E580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17afece9-579d-33e3-aad9-3cf4fcf5b802.roa
Signing time:             Tue 15 Jul 2025 20:26:59 +0000
ROA not before:           Tue 15 Jul 2025 20:26:59 +0000
ROA not after:            Mon 13 Oct 2025 20:26:59 +0000
asID:                     44559
IP address blocks:        166.88.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:ac:4e:ed:65:c8:ab:47:17:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:59 2025 GMT
            Not After : Oct 13 20:26:59 2025 GMT
        Subject: CN=a714413d-9be9-4451-b2be-f6f1a6fe9fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:ac:7f:d0:77:0f:0e:ca:ac:d1:1a:6d:5c:
                    be:d3:d6:5f:b5:94:39:86:e2:f7:c8:f1:c2:5b:7e:
                    44:8a:76:c5:6c:24:85:58:4e:f9:16:15:50:51:1e:
                    5b:42:23:66:b1:0a:78:1f:b0:6e:d8:49:fc:99:68:
                    9e:4f:70:16:cd:27:a5:20:89:64:36:32:88:b2:ad:
                    bc:38:04:9a:a9:81:36:f4:71:b3:ce:e9:3f:2e:bb:
                    74:57:f8:9f:48:a2:21:bd:53:03:51:03:3f:6d:ba:
                    61:f0:00:f6:03:31:61:67:ba:db:fe:0d:a0:da:11:
                    3b:ab:74:04:3b:ed:75:28:e2:3e:84:8f:e0:bd:b5:
                    77:b2:6e:6e:de:cf:cd:91:a6:92:66:68:29:98:e2:
                    d4:42:fb:2a:3e:68:83:b6:02:ce:d9:20:f4:fd:d2:
                    61:21:2a:1b:9c:91:c6:6c:6e:ee:b3:2f:0d:4b:d0:
                    9a:01:6a:7d:dc:08:37:f2:0b:1e:67:9f:20:be:67:
                    37:b7:77:f0:aa:57:d1:3c:ed:ed:56:74:88:77:c3:
                    d7:b3:81:b1:03:bc:89:ac:cf:18:a4:50:36:2c:25:
                    0a:81:8e:48:12:97:3f:96:a6:b7:58:04:c6:f1:c3:
                    b9:fe:2e:e5:e9:8d:5d:f0:83:87:58:df:75:3b:b9:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:62:C7:79:9B:F0:8F:D5:DA:9F:F8:FB:75:9C:61:05:D1:FC:D5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17afece9-579d-33e3-aad9-3cf4fcf5b802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:99:5c:5a:fe:ec:35:3f:36:2b:0a:87:42:c6:56:f9:2b:
         cf:b0:40:f7:bf:9c:d8:ff:38:3d:cd:f8:26:52:15:00:14:e1:
         14:3e:c4:4f:b5:79:af:77:eb:dd:93:06:0d:67:09:3d:f7:27:
         97:ad:56:0f:82:a4:f2:a5:1f:c1:1e:ac:18:da:b0:e8:68:bf:
         d6:f9:73:ea:cf:1a:ac:df:2e:71:2b:2c:cb:7a:ba:bd:91:68:
         7a:cb:4e:bf:b0:08:b7:59:7a:08:c0:14:1f:3d:6d:0d:5a:e9:
         43:32:48:bc:05:db:24:ae:81:59:1c:7b:b1:ae:9d:ad:3b:0b:
         bc:bd:8b:9b:e2:f7:da:7e:d7:55:98:ae:96:2d:05:eb:4d:4c:
         cd:2b:c5:aa:0b:80:aa:51:fc:37:ad:12:c8:f6:15:27:bc:ea:
         9b:0f:ec:54:57:76:0e:87:ad:8d:b0:ab:a7:46:e8:5c:53:54:
         d1:d8:90:f4:44:17:48:1e:00:62:39:56:ae:39:4d:f0:ad:92:
         04:b7:2f:4e:48:12:bd:7e:49:5b:0d:1b:41:52:91:a3:15:56:
         5b:56:13:af:b9:e9:b3:5e:61:91:be:e1:5e:de:ef:59:28:5a:
         25:59:74:2e:a8:ba:0e:b1:df:4e:e0:f3:8b:4f:ba:1e:48:89:
         8e:ab:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:33:32 2025 by rpki-client