Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d859eafe-97c7-345f-b3d0-ae1d105f2204.roa
File:                     d859eafe-97c7-345f-b3d0-ae1d105f2204.roa (raw, json)
Hash identifier:          7UN/5aWatgZZqLBYFD5TigllzyAOte4A2FKPKvVae+4=
Subject key identifier:   43:9C:5C:5A:F3:7D:AD:F2:43:3D:D8:1B:B2:FE:C2:F9:71:DF:B7:89
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8AC7A4DEB3E38AE96C100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d859eafe-97c7-345f-b3d0-ae1d105f2204.roa
Signing time:             Tue 15 Jul 2025 20:26:59 +0000
ROA not before:           Tue 15 Jul 2025 20:26:59 +0000
ROA not after:            Mon 13 Oct 2025 20:26:59 +0000
asID:                     44559
IP address blocks:        166.88.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:ac:7a:4d:eb:3e:38:ae:96:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:59 2025 GMT
            Not After : Oct 13 20:26:59 2025 GMT
        Subject: CN=d92314ef-557f-4d5a-bfb8-97aaad807d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:89:9d:9e:a0:a3:59:48:3f:4f:39:e5:c7:
                    f8:1a:82:90:74:0a:ea:8e:7a:43:e3:ea:c9:09:f0:
                    f2:c1:16:43:81:7a:d7:91:9c:29:8c:38:ed:36:10:
                    f0:eb:5a:15:75:1b:f0:dc:02:84:62:e4:87:18:c7:
                    d0:df:5e:0a:7e:4d:55:d6:30:58:97:bf:be:80:b5:
                    63:db:da:83:99:b1:60:1e:75:98:c9:8c:2b:93:3a:
                    6e:c9:a8:1c:49:01:91:51:7d:ae:ae:4d:30:ee:00:
                    f6:46:10:ed:87:dc:e6:5a:c6:8d:43:c2:8a:9e:aa:
                    4d:3c:74:e2:30:82:85:fe:1d:b2:0f:23:49:37:25:
                    9f:5f:3c:6f:51:93:23:2b:a0:d0:a6:78:87:06:ef:
                    39:5a:1f:32:38:1f:1b:57:c2:d6:e2:34:96:27:0f:
                    14:53:37:b6:2c:c0:0c:af:a5:56:72:5b:53:ed:31:
                    b6:bf:1c:72:72:96:db:b6:f1:bb:be:b4:a9:47:c0:
                    b2:fe:d2:f4:d5:dd:9f:db:0f:b1:72:b5:c7:65:d3:
                    18:0f:64:75:ea:c3:d6:47:f3:3c:38:b5:42:63:89:
                    89:df:9d:37:64:25:0b:d2:6e:8f:41:9b:a2:14:40:
                    cc:13:3d:2f:a4:79:e7:19:f8:db:b0:21:b0:f8:39:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:5C:5A:F3:7D:AD:F2:43:3D:D8:1B:B2:FE:C2:F9:71:DF:B7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d859eafe-97c7-345f-b3d0-ae1d105f2204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:29:63:45:70:16:29:f3:20:27:97:43:9d:8f:4d:74:ef:
         a5:0c:e0:18:8d:59:b9:47:ae:f6:95:b7:cf:73:a8:92:7e:b2:
         b2:9d:9e:2d:a1:a6:95:5b:5e:de:59:44:fb:d8:7c:f9:43:32:
         5d:f6:3f:52:fb:77:73:26:d1:07:e2:72:ed:b8:1a:30:86:7b:
         3a:49:a3:4b:f3:06:f2:ff:d6:93:3e:9b:3e:37:50:6c:e6:c2:
         be:bc:2b:15:b2:ee:7c:a8:e3:32:4c:33:93:a0:69:57:61:27:
         b0:b1:34:4b:f6:43:6c:ec:ea:cd:8f:22:3c:74:77:d1:05:83:
         f7:b8:87:f4:59:30:00:bf:8c:13:4b:21:20:d0:b5:75:59:55:
         1b:ff:fb:61:61:62:b7:72:7c:88:90:b8:0b:a2:12:59:fe:d1:
         e0:97:0b:cd:83:1b:d1:61:ed:db:52:43:c3:48:55:ca:0c:8f:
         96:a5:d8:7f:2b:cb:ff:9a:02:6c:51:03:15:bb:45:12:bd:0e:
         19:21:84:0e:76:3d:dd:9c:cb:f3:28:bb:40:ae:6b:d5:01:24:
         d3:2d:0e:73:be:4c:37:13:66:1e:40:bc:1d:13:81:f9:e5:f1:
         43:b6:52:00:1c:1d:53:1e:1b:ae:44:51:de:66:ad:76:d9:c5:
         0b:1d:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:56 2025 by rpki-client