Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c98d6b4-27d5-3dac-a2cd-f7919552b197.roa
File:                     4c98d6b4-27d5-3dac-a2cd-f7919552b197.roa (raw, json)
Hash identifier:          hSAs8UdtF2eU5DUTNQVmOcPaHhqVP1Cy67Rvet/Fyc8=
Subject key identifier:   44:01:38:AB:78:FB:BD:49:3E:56:E7:17:47:A5:A9:D2:5E:C1:AE:94
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A761B68DD0C665A4BA4F92C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c98d6b4-27d5-3dac-a2cd-f7919552b197.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     149440
IP address blocks:        166.88.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:68:dd:0c:66:5a:4b:a4:f9:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=c407e721-3a95-4853-ad59-d18ac51dcc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:7a:5d:69:7a:07:d8:bb:d2:28:8a:77:cb:
                    f1:8e:40:1f:27:ac:f5:b3:7d:b7:23:e5:23:e8:7b:
                    87:06:d0:5f:a2:e0:1b:c7:94:f6:07:19:49:03:2b:
                    be:3a:03:10:d1:8b:49:fa:02:f2:93:07:9a:65:bc:
                    99:c6:67:20:af:f9:cb:0d:c3:2e:22:86:16:31:7c:
                    ff:4d:21:21:e8:71:54:67:9f:3b:f8:46:8c:22:0c:
                    41:73:50:02:3c:d9:05:8d:6a:98:7c:28:2d:a9:3d:
                    21:d3:40:a0:a2:7c:49:c0:56:14:a6:1c:87:98:cf:
                    5e:ef:46:73:b2:c1:5c:a6:87:8c:29:85:bc:ec:67:
                    1f:d0:1e:32:39:a9:f1:56:f6:90:2d:e9:b0:8e:f5:
                    71:c3:ef:af:cc:b5:0c:7b:ab:93:1b:7e:e9:ea:d1:
                    d1:72:09:38:fd:82:bb:5e:52:75:40:56:4f:44:ac:
                    6e:e0:10:2b:40:89:98:2f:86:b5:1f:33:f7:50:f5:
                    1d:5c:20:44:26:99:a7:2f:25:3f:4a:15:f5:11:c4:
                    4f:c1:7c:5e:b6:c0:4a:f2:8b:f6:71:b0:6b:4c:70:
                    fe:43:a9:bd:a8:43:c3:99:f1:bb:35:f4:fc:34:86:
                    0d:7c:c4:99:7e:ff:04:68:5d:32:d6:20:10:2b:20:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:01:38:AB:78:FB:BD:49:3E:56:E7:17:47:A5:A9:D2:5E:C1:AE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c98d6b4-27d5-3dac-a2cd-f7919552b197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:80:b8:6a:89:db:93:0c:06:e6:0a:ae:69:64:4f:20:83:41:
         33:34:67:54:5c:5a:72:36:95:0a:b9:86:26:a0:ef:1d:51:63:
         34:8b:83:4d:56:c8:69:26:ec:db:b6:ba:89:7e:2c:46:4d:16:
         77:9a:d4:5d:db:61:a1:b9:98:24:87:84:4a:ab:87:7d:51:f0:
         69:1d:df:53:93:7d:a9:fa:dd:3d:88:8a:66:05:ab:ed:61:78:
         a9:c9:b5:e2:ca:7c:98:f2:5c:0f:c1:1e:f5:4d:9a:33:97:53:
         7e:da:e6:1f:cf:cc:f2:4b:a2:46:5b:6a:0b:f6:40:77:bf:a9:
         36:23:9c:2b:ce:21:b5:13:7c:56:3d:4f:46:6e:15:9b:a0:87:
         e6:e9:f0:3c:d2:1b:c5:5c:c6:c2:2c:4b:40:e7:5e:ea:ec:ee:
         52:72:7e:e4:ec:e6:83:f2:79:cd:92:3f:3d:86:ec:68:34:51:
         46:da:e6:7c:6d:fc:75:a4:9b:4d:a7:fb:c0:9b:63:ec:ca:3b:
         65:e5:1f:da:ed:ec:47:2b:0f:13:93:2e:52:f4:6a:c2:08:42:
         db:f8:22:71:48:f6:8f:47:f6:45:d3:d5:7b:58:ee:7a:04:84:
         08:96:3e:aa:56:ff:f8:e9:f3:4e:d0:35:4a:1b:04:23:83:81:
         ce:18:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:25:20 2025 by rpki-client