Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/94fb18e6-e7ec-324f-87cc-70652381780e.roa
File:                     94fb18e6-e7ec-324f-87cc-70652381780e.roa (raw, json)
Hash identifier:          D1MrEDKXxMZHIS86/CTLjURo2MHkPpJ0xoCENs8fnMA=
Subject key identifier:   F0:91:B1:44:21:72:15:7B:05:64:38:1D:D7:F2:81:2F:08:28:69:F2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B031697D8DF42338875D6EB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/94fb18e6-e7ec-324f-87cc-70652381780e.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     26548
IP address blocks:        166.88.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:97:d8:df:42:33:88:75:d6:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=f7504ebe-c20c-4ed2-8e34-84d0e871df3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:41:08:59:d4:56:52:7b:0e:7f:b9:0e:8d:
                    10:83:07:1d:3c:15:08:06:39:b1:fb:fa:00:c7:d4:
                    15:11:88:78:ad:36:ae:c0:23:a3:70:25:56:67:cc:
                    b6:91:0d:fb:ba:4a:32:51:41:a8:68:24:7c:37:18:
                    9f:96:3a:48:4a:43:f2:65:e8:d4:88:3a:56:a4:1f:
                    37:4c:8e:40:83:98:f5:5a:4c:c8:66:54:50:0d:ea:
                    9b:80:64:81:ea:a8:1a:e5:53:d6:99:73:4c:75:65:
                    8c:7c:e9:e0:68:ab:d6:92:eb:6f:49:24:ab:33:9c:
                    63:50:31:3e:82:4a:a0:5d:ce:57:21:33:27:bd:3c:
                    de:9f:4d:46:06:2e:d0:5c:dd:57:c9:fc:53:5f:e5:
                    a3:18:69:e4:b0:42:d2:16:5e:6b:c8:a3:dc:83:18:
                    33:9a:12:8f:d0:0a:d8:13:d4:f2:ef:1d:48:c8:73:
                    ed:2e:61:04:34:39:45:bc:3d:ac:ff:7d:fc:2f:a0:
                    58:c9:aa:58:7b:cf:74:6e:76:f7:6a:6d:88:41:5a:
                    27:a7:f6:c8:c2:ec:b1:4d:0d:e1:59:c4:4f:94:f9:
                    83:aa:a5:a4:cc:d5:53:fa:6f:15:49:11:d4:b3:b5:
                    06:45:fe:69:f7:3f:15:18:33:1d:88:46:5c:7d:aa:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:B1:44:21:72:15:7B:05:64:38:1D:D7:F2:81:2F:08:28:69:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/94fb18e6-e7ec-324f-87cc-70652381780e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:27:41:db:55:9d:b6:97:d3:56:c2:0c:fc:df:9b:f7:1d:
         81:e0:d5:63:fd:1e:8a:93:7c:29:e0:ec:b2:9a:df:95:60:bb:
         f2:1a:09:2a:f3:b5:30:0e:16:67:86:20:77:ed:47:1c:9c:18:
         68:a4:a6:9e:20:e5:95:10:f7:22:72:8b:2a:f4:1d:d5:e9:b4:
         fc:21:10:50:0a:62:c7:83:08:e4:08:17:77:d1:24:a3:29:ba:
         4d:88:1d:a7:d9:8e:e3:7b:c9:03:cd:f3:e3:20:96:24:51:3d:
         c5:6c:93:d8:db:41:74:be:42:fb:be:5a:90:3f:07:a6:15:c0:
         a3:bf:84:27:70:a1:68:16:7c:56:92:2b:de:b7:71:2f:90:c5:
         94:7e:b0:9b:fe:78:79:73:44:8e:1c:ca:8c:7d:2d:2d:9f:a3:
         1d:70:57:15:4a:f1:8f:32:0f:14:77:74:c8:77:15:3b:2c:82:
         a6:00:1e:e4:02:80:19:f3:c9:b0:c7:a6:82:36:d9:25:4c:00:
         86:f1:ea:f8:f2:80:7a:48:b5:cd:4e:8e:c3:f3:a6:ad:7f:92:
         d7:9a:b6:3d:11:44:20:81:9b:ec:f2:8d:ac:50:94:56:42:38:
         1c:51:16:bc:18:e6:1c:b3:1f:3b:51:2f:56:9c:fd:83:b1:d1:
         cb:84:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:05 2025 by rpki-client