Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/380896ef-a98c-36f4-8d6f-a58e8fe4771a.roa
File:                     380896ef-a98c-36f4-8d6f-a58e8fe4771a.roa (raw, json)
Hash identifier:          NN4/kg1+TzavXkDkZ4nVvMsB2YlxH3WfHFXRFpbOXdQ=
Subject key identifier:   9F:F2:99:91:F5:CA:04:79:E0:F1:5A:BC:FF:1A:11:26:87:EC:43:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858489D05EF5BB7653BFBE8F51880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/380896ef-a98c-36f4-8d6f-a58e8fe4771a.roa
Signing time:             Tue 21 Jan 2025 02:00:39 +0000
ROA not before:           Tue 21 Jan 2025 02:00:39 +0000
ROA not after:            Mon 21 Apr 2025 01:00:39 +0000
asID:                     9312
IP address blocks:        166.88.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9d:05:ef:5b:b7:65:3b:fb:e8:f5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 21 02:00:39 2025 GMT
            Not After : Apr 21 01:00:39 2025 GMT
        Subject: CN=e22a6114-bbac-4785-966d-81ecd895d766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:08:b9:56:d3:c1:92:4a:b3:55:e8:8c:db:
                    0f:45:ec:11:75:8a:c7:64:f2:a3:39:48:c1:23:59:
                    34:02:ab:fc:1a:fe:18:61:b7:e8:4d:30:54:c6:af:
                    7a:00:af:31:87:d4:0a:f6:29:f5:bb:e0:db:eb:57:
                    6b:80:5e:4b:c7:e3:81:03:d1:bc:60:77:5c:5c:08:
                    03:e6:ce:91:ca:86:3b:61:3c:74:54:0c:7b:e9:e2:
                    9c:bd:fe:57:d6:d7:33:32:38:1e:b4:97:73:57:fd:
                    9f:20:e2:09:95:a9:10:b8:31:b2:00:c8:e9:37:7a:
                    d8:1b:4e:57:df:ad:ed:e4:e4:6a:e3:09:59:87:76:
                    f7:e3:56:19:e6:a1:8c:11:72:b6:28:2b:9e:52:e1:
                    b2:2e:83:61:ac:c8:c1:38:4f:09:cc:c9:e2:2b:a1:
                    62:28:a3:36:ad:ab:df:13:51:59:af:9b:03:cd:58:
                    88:eb:4d:b6:4b:45:c8:ad:e5:05:7a:8d:e7:35:d0:
                    db:d6:f0:74:42:b1:43:53:6d:01:7f:50:70:f4:fb:
                    6c:b6:22:1f:6a:d4:6e:2e:5d:93:94:42:17:30:e6:
                    71:a2:1e:71:71:08:a8:28:81:18:f3:38:77:91:29:
                    57:49:5d:0f:99:a6:3f:6d:51:38:3e:5b:e3:b9:ff:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:99:91:F5:CA:04:79:E0:F1:5A:BC:FF:1A:11:26:87:EC:43:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/380896ef-a98c-36f4-8d6f-a58e8fe4771a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:19:82:b1:5f:6e:58:fa:54:18:92:db:08:30:55:97:6c:
         56:62:b3:be:71:13:95:6b:9a:3a:1f:81:ec:fa:b5:73:ea:54:
         c1:04:30:0e:fe:9b:17:a7:69:58:72:49:0a:76:1c:e6:42:62:
         ae:20:48:68:6e:2b:9f:58:54:2b:ce:e9:d6:7c:cd:5f:b8:e8:
         21:9f:cc:12:32:99:af:72:d1:eb:1d:77:58:6b:5a:7f:9f:76:
         fa:d7:1f:a8:69:18:e7:0d:04:4d:23:6b:e1:1d:e4:57:75:d9:
         d0:b8:ee:b0:c9:53:45:00:43:de:40:c7:08:4e:49:7d:f9:4e:
         62:89:31:9e:49:8c:6d:4c:83:a1:cc:51:c4:f4:dd:96:0a:35:
         95:eb:15:7c:39:1f:7c:d3:3e:9f:b1:3b:9c:4f:f6:4a:2e:ef:
         79:be:a8:ec:ce:1b:7d:c3:c3:21:6c:3f:92:7f:7c:89:5d:70:
         90:ce:fd:9a:72:25:72:7d:26:56:72:15:9d:d2:6f:29:1f:f7:
         01:e5:aa:e6:f0:d6:8b:9d:ce:f6:e5:84:29:e2:9a:26:a5:6a:
         75:2f:dc:7a:78:8b:2c:ff:97:e6:0f:2e:7f:4b:20:d6:c8:bb:
         19:cc:9e:e1:75:6f:d1:12:41:1b:3b:c4:e6:02:b4:37:b4:31:
         87:8b:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:51 2025 by rpki-client