Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa
File:                     36a6681a-5e49-3f2e-b5af-4b56292fb840.roa (raw, json)
Hash identifier:          EqxphSyq27v5VmHxlKKYo1PuEb9NTk0fK/KY4+oAA8Q=
Subject key identifier:   6C:D3:0C:16:E2:03:46:08:66:2E:71:2F:15:95:A3:2D:71:5A:80:22
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A71EB5A9FDC3BC1E7318FC420
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        166.88.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:5a:9f:dc:3b:c1:e7:31:8f:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=7d004c7d-657d-43cb-ba06-eb9fc84a8c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:ae:73:94:4e:57:9f:62:77:4a:aa:f6:ae:
                    74:cf:62:72:92:db:f3:6c:39:a0:20:41:b3:db:ac:
                    dc:0f:fa:f2:c8:a5:c4:bf:1e:d4:1f:fd:83:e1:2e:
                    c7:f8:96:f7:08:d2:1b:0e:fe:34:73:ba:d5:d8:2b:
                    34:5d:68:94:60:41:b5:5b:9d:54:1c:1a:e4:61:90:
                    03:56:1a:02:4b:90:8f:f7:93:ca:28:f1:8c:63:78:
                    b7:4a:8b:de:f8:78:0d:0e:7f:e5:ff:c0:bc:2f:f0:
                    86:89:11:17:af:17:4c:fa:38:d3:9d:73:32:9b:ed:
                    42:40:1c:8a:80:7c:a2:c8:e2:0f:70:e8:15:ef:8c:
                    40:42:54:d7:ef:5d:e1:f9:80:b3:c1:aa:08:89:8c:
                    6f:7f:1e:83:f9:d0:cc:d2:24:21:0f:03:fc:86:86:
                    2e:97:da:ab:d7:84:87:5c:2d:c2:c8:ae:21:78:d2:
                    ff:06:c1:43:f0:98:5b:7c:01:af:c6:71:1d:bb:ee:
                    3d:b3:64:ce:92:ff:0e:96:2d:4b:24:0d:0f:00:f8:
                    4d:1d:35:93:83:5e:52:f7:17:d3:b8:47:c1:c3:e6:
                    25:0a:eb:91:9a:14:e2:e9:9b:f9:cf:8a:6f:56:49:
                    2e:2b:90:ac:f7:e3:0d:c6:3f:4f:28:c3:6d:b6:85:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D3:0C:16:E2:03:46:08:66:2E:71:2F:15:95:A3:2D:71:5A:80:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:e2:36:ea:6c:de:7d:25:80:a5:ef:12:d5:aa:5d:15:22:
         9d:2c:61:28:5b:d7:99:4c:47:32:4d:4b:42:19:ff:7e:64:01:
         08:07:a1:23:f1:db:92:d7:0c:c8:13:1e:90:70:8f:48:56:80:
         51:47:dd:dd:a5:3a:eb:da:57:b8:a2:c6:a2:75:ac:98:92:37:
         2c:aa:47:18:c0:f2:4d:9a:b9:e9:31:d2:22:5f:07:fe:dd:ca:
         55:c0:e0:96:a5:d8:2c:47:e3:c7:df:de:74:0e:23:cc:ec:4c:
         df:93:04:3b:d1:2c:ec:19:68:98:02:a3:2a:9d:4b:82:7d:ad:
         ae:7f:b1:c4:3f:99:4a:d0:44:32:20:44:c5:5e:eb:82:ec:f7:
         68:0c:b1:e8:5a:fd:e2:08:fe:51:2b:a7:72:b9:55:12:33:a1:
         79:26:63:5f:f4:15:f3:d1:51:f2:08:08:ab:3a:a4:71:c0:f1:
         03:ab:8c:9a:6e:7b:67:0f:19:79:e2:06:c6:1a:05:52:53:1d:
         e3:0c:dd:31:90:bb:b4:9d:e3:79:93:74:f3:41:61:ce:0d:3d:
         47:50:97:55:2e:41:d2:54:a0:74:47:23:b2:75:86:4d:ab:88:
         93:8e:46:df:cc:24:d0:14:8b:30:0a:2d:4a:d9:8f:e3:db:41:
         d3:8e:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 17:23:56 2025 by rpki-client