Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18abd803-27d3-38e4-84a4-f6c4d06e2299.roa
File:                     18abd803-27d3-38e4-84a4-f6c4d06e2299.roa (raw, json)
Hash identifier:          569JSEYQ3AkT7Bkx1wPqDMkCLvFdYBk+macG33AYnLI=
Subject key identifier:   B1:A4:65:82:98:6B:06:40:44:D4:FB:A5:A5:F4:A1:C5:28:40:FB:DC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B5E48AA60887C92A52DB16440
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18abd803-27d3-38e4-84a4-f6c4d06e2299.roa
Signing time:             Tue 30 Sep 2025 17:00:06 +0000
ROA not before:           Tue 30 Sep 2025 17:00:06 +0000
ROA not after:            Mon 29 Dec 2025 18:00:06 +0000
asID:                     7029
IP address blocks:        166.88.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:48:aa:60:88:7c:92:a5:2d:b1:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 17:00:06 2025 GMT
            Not After : Dec 29 18:00:06 2025 GMT
        Subject: CN=04e97d69-e8db-43bc-81cc-fac8039ff170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:fb:fa:03:57:49:b9:76:e1:51:3e:bb:6b:
                    2f:88:8e:88:69:77:32:a9:c4:6a:aa:fb:de:ff:19:
                    65:2b:98:3b:42:a1:eb:d8:2f:67:94:f9:d8:2f:d6:
                    41:1e:9c:ee:ef:7e:b8:84:ac:30:d6:81:af:1b:b6:
                    67:8c:10:b6:ea:ba:dc:43:b4:2f:05:9f:7c:d9:7d:
                    12:3c:f1:3b:47:0e:a3:fa:5e:80:95:e1:dc:4c:b7:
                    a9:28:81:e8:d0:65:b3:1e:c5:56:bf:a4:31:fa:40:
                    43:ca:a6:d5:26:37:72:35:bc:41:e8:f7:57:7a:48:
                    df:1d:ac:7b:96:2b:e6:94:2e:20:83:1a:5d:0e:c7:
                    50:c0:5f:a8:31:fb:3e:d0:ee:bb:87:74:4a:c2:51:
                    73:82:b9:55:ab:06:fd:26:b3:df:a8:66:b3:23:7c:
                    8d:a6:d7:50:4b:c2:f2:f6:70:88:59:54:be:85:4f:
                    84:cf:c0:51:5a:7a:c1:88:ba:ac:cf:66:70:4a:0a:
                    da:03:e2:59:8d:be:9e:98:fc:6e:92:77:96:d4:cc:
                    a9:58:12:49:91:50:62:07:7f:00:07:29:19:d4:cc:
                    f9:c7:d7:c3:24:d4:fa:17:95:25:17:94:0a:b6:53:
                    48:f9:9a:54:5b:12:3a:c6:6e:22:49:25:b5:6d:a2:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A4:65:82:98:6B:06:40:44:D4:FB:A5:A5:F4:A1:C5:28:40:FB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18abd803-27d3-38e4-84a4-f6c4d06e2299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:be:18:8d:7c:98:a7:7d:47:5c:5f:7a:81:1e:ff:b6:1a:cf:
         1a:b7:a5:9a:dd:2d:12:c9:58:89:52:99:78:6d:c7:8e:55:49:
         5a:ec:43:b4:2f:86:8b:56:71:1b:c4:3d:19:45:04:db:6a:ee:
         06:da:ae:c6:e9:0a:a5:e1:66:64:9f:25:30:81:35:6b:1f:90:
         26:c9:15:6f:20:57:ee:4e:c8:0d:1c:b8:65:ae:a8:e4:85:39:
         7c:2e:e3:be:dd:58:07:39:92:74:d2:67:b3:b8:cd:a7:3b:0d:
         df:ae:d0:a0:27:e8:40:40:5c:f7:b3:c0:6a:de:c2:2f:6f:54:
         80:d0:f8:c7:9e:e1:c7:11:f8:e1:c2:f7:f1:c6:d1:ec:78:58:
         ff:6e:3c:a2:92:65:91:ab:1d:43:42:96:ed:e2:57:0a:6d:37:
         d9:9b:e3:a9:24:b8:9c:be:5c:cf:96:05:df:df:ea:7c:ee:9d:
         7b:39:b3:aa:91:5b:70:c8:dd:f1:49:e9:4f:8b:a2:e1:09:6c:
         f4:a2:6a:3a:31:78:2f:ef:fe:3b:5f:71:4c:e2:31:a6:9b:ea:
         e2:d8:bd:97:bf:d9:8e:1e:a8:f5:73:3c:fb:da:b9:35:4c:53:
         92:b6:a7:3f:6c:28:0d:b2:01:dc:f8:81:70:e4:e8:ec:84:7a:
         9f:23:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:01 2025 by rpki-client