Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d0bd11-c0b0-3566-8862-ebc008462b68.roa
File:                     65d0bd11-c0b0-3566-8862-ebc008462b68.roa (raw, json)
Hash identifier:          Vz+OZg2xccpfUaq6wl1ZHZiOa4SxJpyYtG+E3+YhIw0=
Subject key identifier:   5F:79:E4:3B:6F:52:76:8F:35:BE:22:CB:E9:9A:33:C3:3D:A9:ED:D3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB608F4F0B9D1543E68300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d0bd11-c0b0-3566-8862-ebc008462b68.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:60:8f:4f:0b:9d:15:43:e6:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=ff2b2ba8-ea2e-4f83-ac54-413222c6a0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:02:38:b2:bc:e2:a9:5c:0e:f3:6c:d6:82:
                    58:33:97:a0:76:7f:bf:f2:83:ba:65:f3:93:f7:ea:
                    03:9c:66:b0:cb:31:f4:85:4c:91:1a:9a:0c:28:65:
                    3c:97:cf:04:1c:d8:f0:be:26:cb:2a:0c:f5:79:11:
                    2d:24:ea:bc:65:29:5a:f9:52:f9:ef:51:e2:01:df:
                    34:30:3d:1a:c0:72:50:63:42:cf:f6:57:60:42:3d:
                    d3:a9:89:df:37:26:7b:0b:e0:40:18:72:60:4b:e4:
                    c1:7b:f1:42:1e:ef:16:2d:f1:a7:35:b5:3c:0a:0f:
                    fb:93:96:b2:32:bd:95:c2:59:d2:7b:0b:91:34:75:
                    71:29:0b:38:61:52:71:bf:24:86:9a:57:14:43:f8:
                    23:ce:42:7b:b6:7a:02:53:9f:89:29:d7:4b:0f:af:
                    8d:6d:10:68:46:62:35:e3:5f:d0:60:6b:28:42:63:
                    48:61:1d:92:02:6c:24:e9:c4:2c:74:be:34:e7:d4:
                    83:9c:a9:a1:41:d2:58:42:35:4f:01:f7:e0:45:6d:
                    27:31:72:74:9a:b9:28:2e:97:91:97:e5:cd:f3:54:
                    86:1c:34:6c:55:9a:25:be:0c:98:97:b2:b7:db:a1:
                    6f:4f:4c:50:04:be:68:72:3a:c4:12:87:21:3b:e7:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:79:E4:3B:6F:52:76:8F:35:BE:22:CB:E9:9A:33:C3:3D:A9:ED:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65d0bd11-c0b0-3566-8862-ebc008462b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5b:83:d0:4f:8a:f2:41:a7:f6:4b:0f:b3:18:35:ae:d7:c7:
         47:bd:a5:98:7e:da:4b:0c:b4:4c:ea:68:b8:8f:ef:e9:f6:c3:
         e4:05:6f:ee:c3:fc:7a:b2:17:a7:9b:5a:da:b9:09:f7:cd:08:
         17:00:1b:7c:9e:43:da:0e:d8:c8:3e:51:75:e6:a8:a1:3c:89:
         d9:54:9f:4f:9c:b6:54:b3:53:f8:a0:49:7a:18:94:90:6d:c6:
         81:6c:da:b4:10:a2:4d:69:fc:14:5f:18:a1:b1:bb:79:ff:b8:
         55:14:fd:1b:85:47:c7:05:de:f2:8c:74:c3:cc:f0:9d:0d:3b:
         d4:0e:54:03:cf:20:09:e9:15:76:cb:53:ba:bb:5f:b0:9e:22:
         8d:f7:7a:c5:28:df:c9:58:8d:09:ae:b6:bd:45:7e:b0:c1:f2:
         60:1c:6f:1a:4b:af:38:ca:24:52:20:79:3a:cc:fc:5e:6b:9c:
         80:3c:3d:ad:2f:a0:1c:58:3b:95:10:86:a1:c5:8e:25:b7:95:
         1b:88:fb:19:72:b3:64:ab:36:24:08:ad:f0:80:2f:73:c8:c7:
         fc:87:77:d4:d5:0a:ad:88:ba:7c:11:9d:74:46:91:61:b7:72:
         32:ad:0f:34:62:fd:a0:37:80:1b:fe:54:82:82:2f:4d:fa:3f:
         16:e4:18:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 20:07:13 2025 by rpki-client