Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ad06a0ca-a7e5-3ad4-9729-ea163bd05218.roa
File:                     ad06a0ca-a7e5-3ad4-9729-ea163bd05218.roa (raw, json)
Hash identifier:          b2xvJCHWCog++FscB0DpM88z8dWHOHQQPKisAuD/rNs=
Subject key identifier:   F9:76:01:2A:B2:43:00:91:8C:BA:01:05:2E:EC:1C:49:71:A4:DA:FC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB57F5DB5FA50FCB363200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ad06a0ca-a7e5-3ad4-9729-ea163bd05218.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:57:f5:db:5f:a5:0f:cb:36:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=d98bf713-55b4-4866-a593-47fca38423d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:44:fd:3b:8e:40:c0:02:b8:9b:f1:e7:61:
                    9b:22:ac:2e:83:4d:39:71:55:d1:fd:cd:8f:a8:d1:
                    9a:ed:b1:e3:d0:7f:56:97:2f:ef:c3:fe:fd:68:c1:
                    e7:c1:44:fa:15:2a:6e:5f:a2:40:30:43:b7:b9:63:
                    fb:32:53:45:6c:b6:86:10:de:4f:d7:25:44:72:21:
                    53:58:11:93:1f:fe:ff:1b:c5:25:38:93:1b:fd:2c:
                    6b:6c:82:11:6e:c9:bb:a8:de:a8:4e:ec:dc:91:dd:
                    e1:f8:14:82:8f:07:a3:33:a2:dc:14:04:27:12:27:
                    ce:a7:f7:50:f2:d4:30:a8:8c:6c:7c:f1:07:77:b2:
                    e1:f3:05:07:d6:24:d8:c2:86:76:c9:9a:89:59:c5:
                    ad:3a:8b:21:41:68:b7:18:78:d1:3d:b7:46:ce:ee:
                    7e:b9:12:49:7e:69:87:d5:c6:cd:6c:c0:9f:e5:61:
                    23:ab:b4:f2:bb:f7:c6:62:a1:c9:18:4a:b8:56:9e:
                    c4:61:06:76:fd:a6:da:1a:da:bf:ca:16:2f:f7:2d:
                    28:61:39:96:87:7b:6f:9e:20:d1:38:da:d5:af:af:
                    6b:b6:c7:1e:e8:3d:89:3c:b6:ab:66:3f:cd:5c:dc:
                    4d:56:3a:ee:8b:41:0a:bb:20:3e:d9:56:7f:ae:7d:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:01:2A:B2:43:00:91:8C:BA:01:05:2E:EC:1C:49:71:A4:DA:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ad06a0ca-a7e5-3ad4-9729-ea163bd05218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:75:0a:48:b5:b1:d5:45:a6:5c:7d:c3:7c:56:19:83:33:
         93:50:b7:9c:e3:1c:b6:c5:4c:62:80:3b:a9:5f:4a:a6:5c:6c:
         46:52:a1:27:19:96:b0:bb:4c:bd:b2:d3:04:29:35:06:bf:a4:
         c9:d8:92:eb:dc:fe:4d:c0:e3:3d:01:44:35:a5:ba:0f:2e:af:
         7b:f1:1d:d6:97:cb:93:b8:a8:2b:2b:63:46:99:51:26:58:6e:
         13:10:78:64:13:81:5b:81:ec:a6:91:39:d1:6e:65:0f:16:7a:
         64:b9:bd:c8:03:d5:93:f5:68:b2:92:c2:c3:4b:ed:ba:70:2f:
         70:e8:ac:bf:ce:40:96:35:ad:17:d9:10:d0:25:03:67:fd:43:
         82:8d:8a:e2:ee:19:c0:aa:df:a4:52:49:09:3f:c2:68:36:91:
         cc:df:3d:e3:bd:a5:22:84:70:6b:21:f3:ff:88:0f:95:df:d5:
         2e:49:02:e3:aa:a4:16:f5:3a:8e:bf:eb:b4:d4:e0:59:8d:c4:
         b6:b8:d8:0e:c5:74:ad:3a:5e:b7:d5:36:ee:d7:53:fc:88:34:
         c3:02:91:a6:ed:77:58:14:b1:60:23:f9:59:c9:4c:fd:31:19:
         f0:6b:4e:4f:9e:48:00:19:1e:c8:b7:dc:e1:e5:8f:ea:c3:66:
         42:dd:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:24 2025 by rpki-client