Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e62bded5-e736-322d-81f2-1e188928112a.roa
File:                     e62bded5-e736-322d-81f2-1e188928112a.roa (raw, json)
Hash identifier:          CH217fd+EbYxVL4Zdwh5ae1MKKbBl+8gAHVXbdDE+Yw=
Subject key identifier:   C6:F4:1C:2D:77:D4:C1:46:1D:3F:4B:53:EB:22:E0:C9:A1:0C:D1:CB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4E772B263B140D2422FA8100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e62bded5-e736-322d-81f2-1e188928112a.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        166.88.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:2b:26:3b:14:0d:24:22:fa:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=83984b1b-723b-46aa-aeba-7c0976005ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:a1:c9:7e:5f:9f:60:c6:8c:47:12:80:b3:
                    a8:c1:33:f5:04:b2:15:b9:c0:68:1f:1c:06:8e:8f:
                    0c:f4:a5:08:47:f8:23:9b:a4:38:50:a3:43:1d:e3:
                    1b:0d:67:51:ec:43:ff:de:62:ec:63:08:76:64:6a:
                    2e:fd:b2:4a:a6:bf:13:fe:57:0e:42:b2:7c:b1:da:
                    99:3d:31:66:de:67:52:01:b7:9c:71:16:ae:86:86:
                    fd:5d:65:1a:4b:f0:b2:86:d1:c8:25:09:07:89:67:
                    13:11:61:bc:50:c0:66:1d:0c:15:8c:b9:19:de:98:
                    10:26:34:37:e3:4f:93:3b:fd:9e:c6:72:36:ae:cc:
                    32:39:d9:cf:e4:73:41:c2:20:2b:9b:3e:f6:e6:b6:
                    aa:e3:73:46:29:53:b7:e7:48:b8:70:34:81:95:c7:
                    b9:88:91:d8:fc:ef:ad:93:25:6e:c7:96:a2:91:37:
                    75:1f:bb:55:88:2d:1d:6c:84:e9:2f:bc:1b:6f:60:
                    2a:09:69:b1:5f:da:a6:2a:ae:5d:c8:4a:24:34:a0:
                    ea:18:09:84:39:f1:cd:5b:01:4c:dd:4e:75:37:7c:
                    41:8b:92:d0:90:2b:75:3d:f7:90:4b:05:a5:18:05:
                    7d:5c:09:fc:53:84:c5:e3:3c:78:da:e4:9f:a4:41:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F4:1C:2D:77:D4:C1:46:1D:3F:4B:53:EB:22:E0:C9:A1:0C:D1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e62bded5-e736-322d-81f2-1e188928112a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:d2:fc:55:95:60:bd:ab:6b:b8:6a:73:ae:b9:d0:7e:dc:
         80:42:5e:c8:1d:7b:58:53:42:88:dc:b6:4b:01:7c:53:df:02:
         4a:08:d9:8b:c3:f2:00:06:d1:33:45:52:c5:f1:76:9a:6e:98:
         06:d9:2f:74:a5:6a:2f:b7:ff:7b:69:a8:87:9e:fd:39:68:2d:
         88:f9:bd:12:45:43:a3:8c:6d:74:90:d1:ab:e9:09:3b:52:4f:
         df:60:ab:df:df:e8:b6:64:5f:0c:56:f3:85:5f:39:b1:b5:cc:
         18:84:4a:a9:94:b1:b8:de:c3:41:c0:79:a1:19:7c:82:7e:7b:
         8e:7f:77:9f:07:b6:a9:24:bf:a8:52:fd:fd:81:8e:07:40:f9:
         e9:49:e5:5e:3f:be:63:b2:2f:ea:cb:d3:d2:ae:fd:11:ce:54:
         b5:76:fb:6f:b5:de:39:14:04:6d:81:f3:8a:cf:18:27:97:95:
         20:6d:55:cb:d1:fd:01:3c:11:d0:a7:4e:b7:26:c0:5a:2d:74:
         87:a0:73:90:9a:96:14:9b:68:5b:58:bf:31:83:14:2b:68:02:
         67:8d:4d:42:5a:75:bd:b2:3a:e5:90:80:e2:24:95:17:63:ea:
         14:15:49:1a:71:9e:bc:76:49:d7:d9:a4:9b:68:ab:1c:7d:9c:
         63:84:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:48 2025 by rpki-client