Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f84116e9-f27b-3aec-b203-5171d9ac407b.roa
File:                     f84116e9-f27b-3aec-b203-5171d9ac407b.roa (raw, json)
Hash identifier:          MkxAt32Vj0vlJEdiU17BVCiEklkMJPmnnNtgoJL7bSw=
Subject key identifier:   39:ED:2B:CD:DF:97:F2:28:A6:72:F2:8D:34:C5:A1:A5:70:95:36:1D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B5E48AA2D937D2E01343DE500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f84116e9-f27b-3aec-b203-5171d9ac407b.roa
Signing time:             Tue 30 Sep 2025 17:00:06 +0000
ROA not before:           Tue 30 Sep 2025 17:00:06 +0000
ROA not after:            Mon 29 Dec 2025 18:00:06 +0000
asID:                     7029
IP address blocks:        166.88.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:48:aa:2d:93:7d:2e:01:34:3d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 17:00:06 2025 GMT
            Not After : Dec 29 18:00:06 2025 GMT
        Subject: CN=e6d419a5-cd7f-4753-b201-76d7ac908871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:cc:63:55:50:3e:f5:08:19:e8:c1:3c:c1:
                    1d:78:ac:d1:4b:36:da:f5:34:2a:66:a9:59:88:ea:
                    5b:21:7f:ca:d4:ed:96:9c:6d:f3:f4:4d:52:c9:7f:
                    93:7f:7e:f3:a5:7b:d7:1b:ca:70:4a:39:68:0c:ac:
                    d3:e1:74:11:8a:e0:c6:d6:23:35:a9:20:39:99:80:
                    bb:3e:84:ff:c0:71:79:05:06:20:d1:fe:b4:96:ca:
                    ba:d0:36:c5:7d:f8:4f:01:bb:6c:c3:df:d7:4e:90:
                    5b:07:2d:87:5b:38:7a:fc:de:69:2c:4f:58:2d:59:
                    ff:3c:25:34:e5:ea:ce:cc:56:05:3e:27:38:8f:58:
                    5a:89:d9:6a:02:25:18:27:cb:54:a9:f5:a3:61:ac:
                    c9:09:e1:bc:0c:9b:b8:23:c7:2a:bf:2e:2b:46:7f:
                    c5:04:40:03:3b:f1:3a:4a:a2:65:66:c8:95:53:bd:
                    e2:89:b4:c9:80:da:e4:ac:c6:18:39:a6:83:45:35:
                    08:34:9a:78:d8:06:b5:8e:53:e6:b8:6a:41:4d:a8:
                    8a:d7:f9:74:31:60:23:bb:16:4c:41:36:2f:dc:8b:
                    9d:11:07:5a:d6:ce:87:19:db:09:4a:d9:f0:ce:7c:
                    76:01:92:80:3f:ca:c3:84:f8:c5:cd:5a:37:d1:ad:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:2B:CD:DF:97:F2:28:A6:72:F2:8D:34:C5:A1:A5:70:95:36:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f84116e9-f27b-3aec-b203-5171d9ac407b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:0c:e1:39:41:ad:c6:4a:e4:23:ca:51:60:1c:d2:ff:a7:
         cf:89:00:1e:2e:69:02:6d:32:ed:09:a0:2d:62:f8:03:84:13:
         f3:4c:5c:03:c7:44:4f:08:88:a4:2a:6f:08:62:fc:c7:26:59:
         9a:05:ce:b9:fe:d7:bc:0e:66:74:c7:ee:b6:86:a7:34:58:7e:
         84:44:93:5c:64:7f:a6:54:21:5b:f3:b9:aa:c3:32:06:c2:c5:
         e4:30:78:5a:c7:87:79:4f:fc:14:dd:37:39:39:d2:bf:93:2f:
         6a:35:b8:07:5f:cb:2f:26:55:2f:70:ac:18:ff:2a:18:c2:a3:
         ac:0f:49:de:74:dc:2b:40:38:9f:d7:cc:ca:b9:b0:82:0b:a2:
         e6:b1:9a:42:f9:b3:f0:59:62:cb:0e:f1:24:82:40:48:67:eb:
         85:90:ad:65:27:fe:03:3e:54:04:74:bc:74:8a:e3:3f:b2:ed:
         93:74:2f:8d:e8:b9:f7:11:ab:14:19:d1:80:0d:55:1f:89:e4:
         64:96:9c:ce:84:a4:14:e7:ab:70:91:eb:94:a1:b6:79:07:a5:
         6a:f8:5d:1a:38:2f:95:14:19:84:0a:cd:ca:08:6b:2c:a4:e1:
         f3:6d:78:89:66:04:39:50:5a:50:bf:bf:97:25:a7:b8:86:d9:
         9a:ff:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:00 2025 by rpki-client