Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e6d9b8ed-bb3f-3d37-978f-c2f1d8ac9f2d.roa
File:                     e6d9b8ed-bb3f-3d37-978f-c2f1d8ac9f2d.roa (raw, json)
Hash identifier:          M/gd4cpRfwxM+ht4xle+faYv3SzVC7r6AXhzeDXtFyQ=
Subject key identifier:   A2:1F:50:CE:38:9F:A9:2D:24:8C:14:E7:8D:90:1B:EA:91:63:F8:FE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B0B76D7F9FFDF1D75CBF9A880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e6d9b8ed-bb3f-3d37-978f-c2f1d8ac9f2d.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     213990
IP address blocks:        166.88.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d7:f9:ff:df:1d:75:cb:f9:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=a8ff777d-c4fe-4b98-b344-7b13e7cc3a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:09:4a:48:a2:9b:46:19:44:c2:22:76:3e:
                    b9:b5:db:49:03:56:d5:f6:36:1d:48:d8:e2:8e:db:
                    90:bc:98:a1:f0:63:b2:b6:d0:ee:1b:c8:3a:bd:67:
                    0d:60:6a:75:81:ba:32:f7:a4:24:57:79:94:cf:37:
                    7a:f7:ef:43:d0:7d:11:8e:c4:af:08:0d:f1:b5:23:
                    a8:9a:71:37:65:56:4c:89:08:05:42:13:a0:6e:06:
                    82:f3:a9:87:f3:f0:00:66:e6:5d:ba:f3:dc:0c:59:
                    3d:29:a7:d7:ed:95:f6:e2:40:c2:d9:25:53:d2:4c:
                    66:36:c3:17:d4:76:05:3d:36:1e:59:c1:ed:1d:3f:
                    33:e7:18:07:46:82:8f:b5:34:df:32:0a:0c:03:02:
                    58:5f:0a:d9:5c:78:49:a6:ae:5c:89:20:08:b2:36:
                    6b:93:dc:68:c2:fb:de:b7:84:65:3d:24:76:75:14:
                    de:b4:85:b4:df:9f:80:61:eb:ec:e7:47:7c:9b:d4:
                    cb:c1:00:b3:94:7f:05:75:fb:66:1c:66:e6:68:69:
                    77:e9:ff:a4:29:2f:e6:df:c6:a4:30:a0:44:64:96:
                    fa:48:fe:76:57:af:01:fe:38:de:d6:cd:d0:b8:52:
                    4c:5f:7d:ea:6a:f7:09:26:55:7a:88:e7:32:33:da:
                    78:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1F:50:CE:38:9F:A9:2D:24:8C:14:E7:8D:90:1B:EA:91:63:F8:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e6d9b8ed-bb3f-3d37-978f-c2f1d8ac9f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c5:94:2f:d2:5b:f0:c9:df:fa:f9:ae:78:d6:a1:32:2a:8b:
         04:86:a3:a1:a2:43:1d:0a:1d:13:04:e2:f7:8a:10:17:56:45:
         5d:e3:a1:01:b4:f4:fb:5a:45:12:f9:82:14:b4:28:b9:2f:4b:
         e6:6e:b6:92:6a:4b:73:45:03:4a:f0:53:55:7c:f6:11:b6:45:
         ff:03:19:f7:e0:e7:e8:c6:56:a3:bb:d3:8a:ff:31:89:3f:73:
         c7:76:47:41:a5:15:a2:72:c1:87:4e:b0:04:5d:c4:84:6a:48:
         31:57:7a:00:f0:ee:72:1f:f1:53:df:62:f3:7a:64:4e:37:84:
         aa:d9:71:5f:32:ae:a4:cf:08:61:f5:a4:bf:10:91:09:1b:fa:
         7c:84:eb:04:b8:ad:02:87:c3:26:4d:72:2f:28:d2:10:80:4f:
         a8:e3:93:b9:c4:1d:5d:09:d5:47:7b:9c:be:b7:9e:6b:78:c4:
         b7:b6:ea:9e:d1:3a:c3:46:32:6c:ae:b8:4d:bf:3f:39:31:70:
         e0:f4:45:71:a8:d6:ca:29:56:8d:7b:e8:b1:ac:47:bd:e5:8c:
         9e:2d:f9:d5:56:dd:59:9c:24:ea:8f:56:d1:af:1c:2f:b7:a0:
         75:03:88:1a:2f:19:b9:a2:e4:1a:96:0a:fc:92:c2:c7:11:12:
         35:38:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:52 2025 by rpki-client