Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa
File:                     c9e18a32-4601-37f5-94a7-644a3acf1734.roa (raw, json)
Hash identifier:          mWwcDOrNu3JblO/Ao/zhWNOX6gTrnzFaUwwRZB+JRLg=
Subject key identifier:   82:5D:D3:9F:CD:33:76:B8:CD:76:62:DA:B0:2D:CB:D6:44:83:04:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D73756210722DBFCD45C74
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     212238
IP address blocks:        166.88.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:37:56:21:07:22:db:fc:d4:5c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=23a6a34d-9352-46b5-80fc-6f4dc2ab6d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:ee:eb:b6:86:89:12:e9:b1:0d:d9:a3:93:
                    47:55:db:74:0d:b3:9c:62:6b:33:29:42:7a:b4:d0:
                    4e:11:db:58:3e:5d:ce:fa:48:2a:39:d1:83:45:e3:
                    db:65:8b:c3:8a:33:0b:ea:dd:1f:d4:6f:ff:c8:65:
                    ea:01:0b:09:d5:fb:2d:2c:a2:3a:0c:58:63:ac:aa:
                    09:f7:24:df:11:b5:73:78:65:52:23:65:d7:ed:e7:
                    05:61:b3:c7:3d:20:8a:d9:5c:bd:37:48:2c:03:02:
                    3c:83:1c:0e:1e:c7:73:d5:d5:14:27:e7:26:d5:b5:
                    8b:2c:e4:23:5f:14:b0:a5:75:bf:21:4d:12:39:11:
                    73:ae:5f:42:14:23:2f:7e:f2:00:a8:2b:2d:01:96:
                    5c:40:8a:d8:cb:05:5e:72:3e:a1:53:e0:90:b1:eb:
                    ce:16:c8:49:bb:51:b0:73:bd:e3:ff:fb:b8:d3:0c:
                    62:c0:0b:6e:bc:40:b7:22:9e:76:7a:85:fb:39:16:
                    33:a9:9c:86:f6:19:c6:ba:a8:69:1d:c0:2b:31:08:
                    9f:5f:77:16:07:55:fe:67:21:95:a9:62:05:60:bb:
                    6d:f8:a2:1c:8e:f8:eb:7d:51:b2:20:a8:3b:2c:2f:
                    c4:64:14:6d:2b:da:ae:76:77:29:a0:c5:e2:98:92:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:D3:9F:CD:33:76:B8:CD:76:62:DA:B0:2D:CB:D6:44:83:04:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:28:69:e7:75:0b:03:c8:ad:77:59:b2:bf:c4:64:79:fd:31:
         6a:b7:d1:a5:e1:eb:57:c8:f7:2d:00:9e:54:e5:34:31:13:57:
         24:1d:83:35:83:3f:1e:7d:70:53:66:d3:9b:45:c7:c0:43:35:
         b6:1a:73:ba:eb:6a:26:c6:2a:4f:82:db:9b:3f:6e:d3:cb:f8:
         78:a5:c0:df:ad:ed:a0:40:6f:82:e7:07:18:bf:b8:99:ad:0a:
         0b:f4:63:95:5b:1a:a4:7d:4f:fc:5b:f1:b8:8a:f1:7f:ca:66:
         a3:4a:90:c7:14:47:ed:2d:3b:9f:f8:7f:37:2f:7b:6f:17:86:
         53:d1:77:b0:32:e7:a2:44:10:26:3e:98:db:56:da:5a:94:32:
         2e:9a:ab:0c:7b:62:ab:5d:8f:6b:e0:54:db:0e:95:26:92:f5:
         d4:bb:a5:02:d4:cf:d5:5c:37:97:ff:a3:1f:c5:5d:ad:a9:7d:
         d8:5a:07:ba:4e:d5:24:47:54:fd:d4:e8:7a:ca:db:5c:3c:5c:
         a4:46:1e:78:9d:eb:db:83:a8:9a:33:bc:af:9e:ff:44:c1:45:
         d3:6f:c8:90:c2:e2:eb:d3:2e:2e:4e:5e:30:7b:48:2b:a0:ae:
         3a:4f:ea:28:f9:fe:ce:fb:0f:f4:4e:1f:08:d2:67:3e:b9:78:
         2d:0a:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:51 2025 by rpki-client