Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa
File:                     2d4f8043-29be-3a85-bf94-295cc860e108.roa (raw, json)
Hash identifier:          4vmfNnVTM+z7tU+kVE8sEKyJ1C6w1V41TT4z4BHF6vk=
Subject key identifier:   88:B3:9F:1F:96:B4:80:DF:7D:5C:1C:47:F0:9D:C1:0F:4D:44:B0:36
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B8D29A29AF53F7F8F6A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     3257
IP address blocks:        166.88.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:8d:29:a2:9a:f5:3f:7f:8f:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=a0723023-c953-497b-b738-6befc8013841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:f7:7d:65:78:05:26:e3:1d:12:8a:3d:3b:
                    8a:07:f1:45:d7:b6:6f:17:02:72:49:54:59:ed:f7:
                    ff:5d:aa:24:3e:76:15:80:0a:ca:b2:b9:d9:df:84:
                    c8:b0:08:f2:3f:ce:73:fb:04:43:fa:4a:f2:84:5d:
                    db:1f:00:f1:88:69:50:d2:48:30:3f:0b:c0:49:59:
                    9c:36:5c:0d:f2:c2:e2:3b:7c:29:4b:73:97:b1:b1:
                    15:95:ed:59:36:c5:f3:7a:87:1f:40:2a:cf:c9:17:
                    2e:1c:40:56:8e:35:d8:16:ce:2d:48:2a:cd:af:3f:
                    2f:8b:72:8b:69:a6:bb:d3:b1:a6:38:b9:72:ce:3f:
                    82:0a:f8:01:34:aa:84:e2:06:cb:bf:26:25:11:ea:
                    49:20:0b:82:d8:fd:d9:5a:07:ae:c9:c4:03:41:38:
                    6c:2e:af:58:6d:8e:30:2a:d0:fb:29:42:53:ad:ce:
                    e0:52:e1:4b:bb:b2:f4:cb:6a:49:54:4d:ba:84:3f:
                    f2:d9:43:d2:31:45:e4:20:a6:cc:0a:17:3f:c9:c9:
                    85:d6:c7:53:b2:91:98:4e:14:85:a4:00:0c:d5:2e:
                    13:1e:2a:03:b4:3c:4b:54:3f:c2:89:19:6f:b9:50:
                    45:19:92:33:e4:55:91:50:49:7a:e6:4a:ed:60:9d:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B3:9F:1F:96:B4:80:DF:7D:5C:1C:47:F0:9D:C1:0F:4D:44:B0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:5d:10:6d:1f:dc:e7:e3:bf:ea:0a:f1:58:16:7e:92:ac:
         88:ed:7f:c1:a6:bd:08:b5:19:d8:67:9f:fa:fc:dd:f2:bd:99:
         a0:fb:6f:3f:a0:a0:fd:f4:31:45:13:b2:d8:7c:6e:61:de:a6:
         55:36:fe:4a:2d:b4:ed:91:4a:5d:86:ff:b7:36:0a:ce:b6:b6:
         fb:da:be:16:82:ff:3f:9b:b5:93:de:db:fa:d5:70:05:e2:3b:
         a5:29:f6:a7:98:47:1e:06:13:7a:8c:af:f0:fd:dd:2f:ae:56:
         e5:fc:f3:97:a0:c2:af:7b:f5:39:e4:2a:42:e1:c6:9e:bc:3e:
         ec:ee:8e:62:d5:da:af:20:ae:7c:ac:7c:50:de:c9:5b:c6:2f:
         4a:ca:e7:f1:42:1c:c0:e7:e3:99:eb:df:3b:17:dd:2a:cc:e9:
         f6:5e:fc:0f:a3:34:35:69:af:bf:aa:a1:b4:89:7e:5c:65:dd:
         24:a8:1f:6e:b3:f6:7c:15:87:de:34:5f:e2:f4:04:6d:69:59:
         87:62:ad:3f:77:15:5c:a3:0b:2c:dd:87:66:15:8c:1c:b4:91:
         5e:0f:18:8e:d2:62:49:42:64:00:61:1f:18:25:01:a7:10:5b:
         b2:4c:71:bb:4f:5a:0c:fd:b4:f8:60:9d:58:b0:f1:67:4a:a0:
         97:28:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:32 2025 by rpki-client