Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa
File:                     6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa (raw, json)
Hash identifier:          nJNCzyiL8oGmy8tQ8u+lpU1uSvia4UmBjnThvz6q6Qk=
Subject key identifier:   83:78:20:DE:B0:46:8F:29:B8:CA:B6:87:D0:A6:4E:C3:41:31:48:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D73641278BC8AB7630A800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     212238
IP address blocks:        166.88.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:36:41:27:8b:c8:ab:76:30:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=03cfc6a1-42cf-436b-8d86-6bcc80064e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:e0:8d:7d:a2:49:70:8a:f9:01:06:53:24:
                    17:11:88:43:fb:36:03:e3:b7:93:4a:44:05:80:70:
                    27:c3:49:52:d7:c1:18:f8:4c:a2:64:d3:6c:1a:fc:
                    3b:33:96:3a:7b:77:ca:6f:32:5d:57:56:af:61:82:
                    6f:09:fb:5d:66:06:18:f6:78:c1:6d:b9:84:db:b9:
                    b5:c3:6b:d5:bf:a8:20:09:ba:d3:17:10:c2:7c:fb:
                    68:d5:de:6d:b4:88:a0:88:f2:ea:56:35:24:2b:87:
                    5c:7f:2f:ec:db:72:c4:78:b3:2d:e0:95:04:f8:fa:
                    f5:bd:22:a9:72:bb:6a:89:26:b7:e4:a5:94:df:53:
                    de:02:bb:49:97:9f:28:41:21:5b:73:38:5b:cf:b3:
                    6d:28:fc:a8:86:ab:9d:be:7c:c7:f2:73:10:d2:f9:
                    8f:1d:27:85:08:c9:24:d9:05:53:b6:c3:cc:4e:75:
                    3f:39:fc:40:27:4e:fb:9a:dc:29:15:56:ae:13:62:
                    3a:5c:4e:0a:61:b4:3f:75:64:36:5c:19:f0:2d:08:
                    32:98:b6:54:93:3a:85:54:b7:56:21:3b:c8:50:a7:
                    4d:d6:db:08:bc:60:b7:c1:1b:e1:4d:df:55:83:84:
                    ae:c8:3f:fe:32:18:03:dd:11:c3:14:42:73:f1:09:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:20:DE:B0:46:8F:29:B8:CA:B6:87:D0:A6:4E:C3:41:31:48:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:ba:81:0d:d3:ec:7c:0b:60:e4:03:bb:8e:2b:25:7b:0b:
         e0:5c:03:64:c8:a2:39:ad:5d:55:13:c5:ae:52:c6:29:a7:db:
         99:cd:e2:bc:7e:60:2c:57:24:f3:d9:4b:b3:e9:49:fd:02:c3:
         c4:18:25:0e:6a:f6:0d:6a:56:b2:de:c3:7f:ac:d0:69:8f:93:
         05:ed:e8:a0:ef:8a:74:9e:ac:d1:a5:6c:ed:cf:83:46:ed:2d:
         cf:bd:cf:d6:56:6e:e7:95:3f:df:f5:b7:05:22:d4:2c:9a:76:
         14:0a:c7:ca:51:2f:a9:64:8e:23:1c:bf:57:7c:f4:96:bc:6a:
         03:2d:e5:65:6a:b2:bd:11:6e:08:64:4c:18:c3:f7:1c:66:26:
         da:53:a8:f8:94:d5:26:66:58:95:eb:61:34:89:80:66:ca:38:
         9c:bb:2e:73:33:26:7e:20:4b:5f:10:ea:4c:96:35:c7:55:4c:
         64:04:27:df:b4:08:be:cd:9e:d1:e3:c0:60:a0:d1:54:e1:9f:
         ab:a3:30:bb:45:31:d0:0d:3d:7e:d6:6d:c2:17:a1:b8:08:13:
         e8:f2:2d:6d:73:d2:0d:9b:17:58:14:0c:37:e2:37:69:91:80:
         73:c6:5e:3f:75:ae:e1:4c:cb:76:f1:22:c4:ce:f1:63:42:40:
         b5:96:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:17 2025 by rpki-client