Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa
File:                     79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa (raw, json)
Hash identifier:          2TcSah0PRVaU6L2N6WS6CVKvFldNEvLk7p2cllGVXLo=
Subject key identifier:   AB:27:5F:9A:0B:BD:74:85:92:06:CF:4C:54:02:C7:0B:92:AC:37:66
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D73845C86014A6E8965A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     10557
IP address blocks:        166.88.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:38:45:c8:60:14:a6:e8:96:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=a7ae8bdc-6707-4fe7-8d4a-56a093cc2445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:d3:86:41:b2:03:be:51:3b:87:7a:be:08:
                    07:84:ab:a3:08:a0:26:62:1b:af:00:2e:cd:ce:79:
                    e2:40:0a:94:59:13:34:54:5f:d6:0c:ca:5f:8e:8b:
                    40:6e:61:8f:35:69:ab:90:83:e4:bd:9d:f7:28:8d:
                    56:3e:65:6b:09:b6:70:5b:b4:c6:71:5e:3f:88:e7:
                    5b:b3:bb:37:6b:61:1e:60:a6:d3:02:9d:46:20:c2:
                    57:47:0e:89:50:f1:5c:a4:13:8a:40:c7:e5:e7:3c:
                    46:f4:94:6e:69:09:fd:0d:03:3d:58:21:98:9d:a9:
                    61:38:e7:22:30:a6:a6:1f:01:d2:e4:16:63:44:00:
                    28:42:87:5b:bc:5d:ec:f0:00:8e:d1:b4:14:34:b2:
                    2a:5f:71:ba:1a:5b:fa:c5:f6:ea:71:37:38:2b:09:
                    9b:46:7c:2f:02:46:c0:b6:74:41:54:36:a8:32:64:
                    cc:e3:69:05:a9:00:8f:19:0b:66:6e:c9:1f:49:d0:
                    1c:8a:47:0f:16:87:95:fd:13:0b:d7:99:26:94:0a:
                    ef:64:29:bb:3a:f4:c5:65:60:1c:3e:20:c0:26:85:
                    d7:fb:1e:02:f3:2b:f7:59:80:95:2b:fc:05:48:d5:
                    57:63:75:c0:67:5d:63:2b:bb:f8:d7:1f:9f:1d:97:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:5F:9A:0B:BD:74:85:92:06:CF:4C:54:02:C7:0B:92:AC:37:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79cd4bd8-17f6-31fd-b5be-e3b64f9d9f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:bd:7c:67:9d:d4:fd:dc:fc:99:de:b2:4e:ee:c4:fb:1c:
         d4:a0:bb:99:aa:62:eb:6b:1b:54:a9:d7:c8:63:f2:b0:fd:ee:
         34:c8:af:1d:cf:b5:c1:73:2d:56:a2:e2:12:61:ff:e7:ca:a8:
         5d:17:f4:b1:eb:1d:22:69:c5:f2:85:8d:7e:63:be:6b:9e:58:
         10:db:55:20:df:b4:72:58:07:46:87:ad:bf:5e:43:10:48:a4:
         e5:67:e8:f2:7f:da:05:7a:8e:11:14:02:5d:e4:89:8f:97:62:
         58:5f:3c:b9:0e:25:14:8e:a9:e2:e1:f8:e3:b3:b5:df:0e:83:
         cf:09:b2:dc:97:b4:29:21:e9:fc:cb:2b:4e:e8:d8:c0:7c:d2:
         30:2e:a8:a6:8c:3b:7c:31:5f:59:88:4a:e0:1a:10:8e:15:65:
         97:fd:94:82:11:40:0e:05:cf:5b:58:f0:e5:43:93:fa:bc:53:
         6d:81:21:6b:82:11:3d:08:6f:53:60:6d:71:90:e7:80:9e:e0:
         27:a5:94:75:45:a8:d9:74:00:10:c1:e9:c9:f9:89:71:b6:2e:
         99:8b:0c:7c:11:07:83:70:79:1f:70:d0:0c:b6:8a:7a:65:de:
         68:3a:d3:fb:59:66:e6:15:f3:0c:68:65:76:e8:f2:b7:3b:b3:
         23:63:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:27 2025 by rpki-client