Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d115741e-af19-394e-ae28-3a40a4279bc8.roa
File:                     d115741e-af19-394e-ae28-3a40a4279bc8.roa (raw, json)
Hash identifier:          5bPIGPHmrib6+em5PHPxK+MTA68i78WkZ8gTDOe4c4E=
Subject key identifier:   FA:70:DF:28:A7:6F:69:E0:E7:8F:03:97:A0:69:3A:D2:E8:D3:B3:EA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8AB84B4733E9144D6ACA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d115741e-af19-394e-ae28-3a40a4279bc8.roa
Signing time:             Tue 15 Jul 2025 20:26:59 +0000
ROA not before:           Tue 15 Jul 2025 20:26:59 +0000
ROA not after:            Mon 13 Oct 2025 20:26:59 +0000
asID:                     44559
IP address blocks:        166.88.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:ab:84:b4:73:3e:91:44:d6:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:59 2025 GMT
            Not After : Oct 13 20:26:59 2025 GMT
        Subject: CN=5db11e81-6880-4a11-9d1f-343013bf0692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:de:2e:84:51:9a:61:91:bf:e6:b9:76:81:
                    70:c3:51:12:c9:a7:8d:c0:f2:b1:73:a5:84:8f:ed:
                    21:3f:b9:50:1f:7b:b7:4b:6e:f0:db:58:46:8d:16:
                    da:3c:c6:bc:37:f9:b1:c8:9f:0f:76:7e:30:20:b5:
                    7c:d3:68:e0:78:86:73:e8:8a:46:f2:82:f5:f1:45:
                    ce:d1:83:b4:60:29:dd:58:32:2f:51:c5:f6:59:26:
                    11:92:58:5b:0c:bb:77:35:ba:f8:d0:a0:02:8c:79:
                    c5:3f:40:e3:94:dd:d9:04:1f:3f:ec:27:30:ec:37:
                    65:b2:85:90:1b:e4:ab:56:04:cb:08:55:0e:fb:c7:
                    1e:d4:b0:65:ef:a4:3a:14:c4:4e:2c:d4:b7:9b:63:
                    5c:17:69:dd:30:dd:db:8c:58:33:c1:b2:c8:a9:e2:
                    78:20:1c:11:92:24:23:59:81:48:f4:6d:e2:ee:51:
                    5c:da:c3:47:3f:07:f3:66:cd:65:2e:2a:47:cb:39:
                    3b:61:f9:56:c5:04:bc:a5:87:f4:aa:7d:28:4c:91:
                    7b:c1:17:27:2e:ca:83:dc:42:44:c0:9e:43:54:95:
                    58:59:47:1a:5c:06:b9:85:5a:4d:ce:f9:2f:b6:48:
                    03:60:f0:76:ca:9c:a1:93:aa:9e:e7:45:26:fa:6c:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:DF:28:A7:6F:69:E0:E7:8F:03:97:A0:69:3A:D2:E8:D3:B3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d115741e-af19-394e-ae28-3a40a4279bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:51:95:1d:96:46:dc:70:a7:34:fa:e0:32:d2:6c:cb:84:
         78:ba:80:16:78:27:06:10:75:39:71:2d:66:af:cb:b8:13:53:
         b2:80:a2:3e:15:a4:c0:43:bd:ac:8d:10:b1:bf:4b:26:00:40:
         20:bb:e0:21:72:7e:13:e3:74:e5:b6:03:b3:1b:3e:cc:38:bb:
         7b:ae:54:65:13:6f:fc:26:df:aa:a6:0d:d2:f8:e1:ae:17:2b:
         22:ce:3d:46:4e:70:2a:ca:a5:1b:5b:71:17:21:f2:38:b9:4a:
         51:e8:9a:0e:97:64:4d:cb:ca:db:d1:c6:44:b7:dc:65:17:a3:
         24:a8:be:bb:bb:23:c9:db:4e:45:cd:e7:8d:4c:e1:ba:7c:e0:
         c1:e4:23:5b:2f:41:dd:80:b3:9d:e4:fd:74:7f:90:10:29:af:
         68:cf:0e:8a:da:f3:d1:73:c5:df:10:39:90:a1:d4:0e:fa:96:
         22:de:42:80:c6:a1:b8:f2:d3:38:b1:ce:3f:49:79:c9:a3:56:
         5a:f2:d4:24:f0:ac:bb:0a:46:7c:8e:72:c0:2b:46:29:59:76:
         2c:fa:31:c1:c6:16:cd:06:09:b0:98:35:2f:87:8f:b2:e6:29:
         2a:d3:a5:ca:26:0a:8b:2c:c2:65:bb:f8:53:a0:9b:ec:75:0d:
         99:93:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:55:11 2025 by rpki-client