Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa
File:                     f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa (raw, json)
Hash identifier:          BPQugk+lYVQSBm5uzHIwnACN2Q2wV8mSnpHtQwijYyE=
Subject key identifier:   C5:52:BA:8A:56:93:2E:6A:67:CB:1D:85:01:0B:A6:50:0A:A2:DD:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4E772FE513E4B85FFB472D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        166.88.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:2f:e5:13:e4:b8:5f:fb:47:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=2a44eeae-5330-436e-8913-fbdc012b64c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:a5:9f:a7:1f:7d:0b:c4:5d:b7:06:8c:1a:
                    a6:47:6b:d8:01:fb:2b:96:1c:d8:09:ca:f3:60:3f:
                    0b:da:1c:3f:e0:61:9c:b7:da:0d:cc:4c:b9:83:5c:
                    83:0a:1b:ed:2d:02:87:a5:7d:fc:52:63:8b:4a:d4:
                    db:49:c4:fd:ee:54:21:06:ee:42:a6:b1:d1:84:15:
                    a5:88:6a:5a:3c:75:82:9e:8e:fd:ea:68:7a:7b:6b:
                    28:37:2d:b5:d8:5d:26:af:9b:78:10:4b:d4:66:24:
                    7f:2b:63:a2:1e:88:46:3b:22:0d:39:b2:8b:f5:e5:
                    67:1b:3c:17:f1:5a:af:42:ed:b2:85:29:9a:34:dd:
                    12:c2:c8:79:f4:43:58:94:13:ed:da:7d:24:cc:56:
                    c9:8f:c1:8d:e1:9d:75:15:b7:a8:27:df:95:68:5a:
                    e5:ff:9a:96:10:44:5a:3b:c1:ea:9f:42:8e:44:3d:
                    66:9b:f7:ab:ec:d8:43:39:81:a6:da:bc:48:ac:c8:
                    bc:c1:d5:b8:c3:1b:ab:79:4f:36:af:ab:54:a9:75:
                    e9:31:8b:b4:da:48:8a:0d:0a:1c:17:02:18:40:fc:
                    38:f4:28:99:07:82:9b:74:eb:be:41:a8:e7:4d:4e:
                    60:cd:ae:ae:5a:23:d1:e3:2c:f7:43:9e:c0:50:d7:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:BA:8A:56:93:2E:6A:67:CB:1D:85:01:0B:A6:50:0A:A2:DD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:db:8b:88:ca:fb:29:cb:4a:20:6e:7a:34:10:2d:2b:0b:e4:
         a7:8f:9d:12:22:8c:2f:b6:c9:04:27:92:18:e5:a9:d0:f5:9d:
         7f:f4:d1:5d:b1:55:00:c7:f4:2a:4c:f3:13:64:22:d9:63:86:
         7c:e1:ff:11:b2:b0:a5:9e:47:d6:c1:4a:05:04:eb:44:1a:df:
         fb:49:d4:c8:a2:fc:c9:51:1d:e5:46:80:00:86:f1:ba:63:8f:
         04:b7:82:bb:6e:1c:06:71:95:05:b0:b2:b8:61:3d:5e:51:45:
         f7:65:8a:85:73:0c:46:a1:2d:45:31:dc:77:f4:79:e4:ce:8a:
         71:ff:eb:33:c1:f1:0c:73:10:22:3b:17:c7:bc:4d:77:67:82:
         fe:5c:c7:8d:a8:cf:91:fd:af:52:30:48:41:88:3f:f1:36:65:
         75:06:73:fb:b2:c0:c5:16:bd:5e:3d:97:06:b3:2a:93:3b:d8:
         2a:a3:0b:0e:e3:09:01:0b:e4:26:a7:fb:f5:b9:de:bc:4f:42:
         bd:85:51:b4:af:d2:d9:ae:35:c5:5f:29:3a:8e:e3:ff:b8:1e:
         b8:9c:c1:96:13:82:2b:d0:61:a9:67:4b:03:07:0a:44:bc:77:
         21:cb:f2:43:d0:71:39:ca:ae:a9:f4:6b:85:95:64:4f:62:ab:
         77:3c:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:42:57 2025 by rpki-client