Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31223f36-c6f8-3719-a079-e1366a4c34d4.roa
File:                     31223f36-c6f8-3719-a079-e1366a4c34d4.roa (raw, json)
Hash identifier:          niiLeAYC/gaZKslMbyvbNdJ/GBqDT8W+rQTIVdFIz0w=
Subject key identifier:   02:FD:7D:66:52:9D:04:A2:15:BE:C2:E6:D7:37:C0:B5:92:7A:1E:65
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CAD0D226CBCC06AC22A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31223f36-c6f8-3719-a079-e1366a4c34d4.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        166.88.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ad:0d:22:6c:bc:c0:6a:c2:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=98246677-b024-4bf4-83e5-140928756f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:14:7e:48:13:d6:4d:d3:05:9c:b7:d2:ff:
                    09:39:9a:38:2c:7e:89:9f:61:f2:72:16:7d:c6:3d:
                    97:c3:67:96:b3:61:ae:df:26:2b:8c:98:b0:fc:ae:
                    36:0f:42:75:08:17:62:f7:0c:61:7e:a8:9c:48:b0:
                    1d:77:e4:8a:84:3e:49:3f:a9:58:71:47:78:1c:79:
                    05:6f:9f:80:d1:22:de:e9:c6:7e:24:03:79:cf:9a:
                    b3:69:7a:92:4f:e6:11:3f:9d:ea:69:16:67:a4:e5:
                    9c:51:21:34:b8:1a:88:2d:be:02:e5:dd:b6:77:05:
                    48:06:dd:07:7f:c9:f4:82:70:cc:b0:1d:5d:f9:c7:
                    ef:bb:0e:10:aa:f0:81:ba:8f:15:f6:14:1b:18:4d:
                    5a:12:b0:b9:09:4c:01:55:e9:b4:c6:db:25:61:39:
                    0c:a6:13:18:e8:5a:8b:35:e9:dc:48:81:00:27:5d:
                    ca:73:64:ae:bd:dc:f7:7d:0f:0f:af:d8:be:77:8e:
                    06:25:75:fa:91:39:2e:24:61:16:a1:07:17:61:a5:
                    ce:71:53:2f:1b:0f:5b:cd:07:22:91:78:1e:f5:2f:
                    25:c0:54:bc:3c:64:53:dc:a6:fe:bf:6c:2a:f5:93:
                    af:c1:6e:17:46:69:41:02:c4:d1:af:aa:fc:1e:49:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:7D:66:52:9D:04:A2:15:BE:C2:E6:D7:37:C0:B5:92:7A:1E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31223f36-c6f8-3719-a079-e1366a4c34d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:55:91:ef:65:3d:7b:fe:47:fb:34:97:28:fa:e4:c6:a8:
         ff:52:d6:ae:e9:35:5e:5e:3e:b9:d9:8f:ea:ea:6f:74:67:ab:
         e0:a5:20:9e:31:f1:df:c0:62:b4:89:0a:bf:48:80:b4:d1:95:
         6a:71:d5:91:ae:40:bf:b9:a5:6b:d3:22:14:41:44:df:4f:ad:
         9d:76:f3:3c:e2:a3:8a:d2:ae:68:05:1d:50:bb:7e:a8:5b:cf:
         c8:d7:e9:b3:79:01:6b:c1:04:06:76:be:51:f2:df:d9:49:af:
         e4:66:b2:78:a8:4b:e8:9f:de:45:d6:45:8f:7b:82:d6:3a:d6:
         24:6f:0b:ee:df:f0:bb:82:21:db:2f:57:0a:86:b1:05:8e:ea:
         53:0f:45:b7:52:81:4b:6c:c6:24:1a:19:a2:96:28:54:ba:0f:
         2f:3f:a6:e4:df:f5:22:18:bc:d4:dc:65:e3:34:28:03:a9:f6:
         14:a4:5a:c3:d0:10:83:1f:b7:29:42:e8:30:4f:c0:b0:ec:7a:
         32:8e:2f:99:04:95:d3:4d:c6:f7:ab:6e:07:70:1c:b0:23:13:
         bd:6d:82:86:0e:f4:86:94:f3:10:2e:6e:1e:38:5b:c2:53:00:
         a3:c0:95:c7:fa:67:bf:f3:4c:4b:62:32:e2:c2:8e:3f:45:c2:
         29:56:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:43:00 2025 by rpki-client