Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76773235-e31b-3df7-b1e7-b95d0d10108e.roa
File:                     76773235-e31b-3df7-b1e7-b95d0d10108e.roa (raw, json)
Hash identifier:          dYALm5DPzNMoflWQAnGoG0o1cctXRFO9K8gV3r5zuw0=
Subject key identifier:   48:80:BB:1C:8F:88:7C:3D:D4:86:37:70:75:BB:D6:25:0D:5E:69:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5863E7EE77383419ED00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76773235-e31b-3df7-b1e7-b95d0d10108e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:58:63:e7:ee:77:38:34:19:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=72e6f0d8-ddb5-4637-a916-cea383af73c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:29:e4:91:50:45:3f:8e:03:8b:43:fa:71:
                    3c:3f:59:97:29:a2:10:c3:95:6d:df:75:7f:c9:e2:
                    b4:4b:19:2a:d4:b8:6e:7c:fa:68:d6:a1:55:41:cd:
                    22:41:ae:52:ed:92:c4:68:0c:e0:51:75:01:54:c4:
                    e8:fd:ea:04:32:e4:ee:7d:d5:31:25:a5:ba:c4:2b:
                    18:61:8e:a2:4e:a9:54:06:ef:38:be:87:19:95:6b:
                    cf:97:ca:2b:dc:01:bb:11:7b:b8:63:b9:8b:ba:94:
                    6f:00:eb:47:25:d6:cc:44:88:5c:2b:47:b7:2c:ff:
                    e8:8d:f2:ca:c6:2a:e3:89:8f:9d:3f:a7:80:e1:48:
                    1a:db:38:9f:e7:bd:2d:a3:cf:1e:9c:29:e0:e8:af:
                    73:d3:ca:a1:af:6e:68:65:bb:0a:6e:61:87:64:ff:
                    f4:06:b1:e5:f1:a4:0c:a8:66:42:cd:d0:6e:af:6e:
                    b2:6a:a6:75:5a:72:60:2f:2f:62:ca:5a:16:7e:f5:
                    4f:2b:c0:42:85:6d:a6:5e:6a:99:f7:67:ee:2f:91:
                    79:eb:8c:d3:fe:52:8e:06:43:a0:c2:96:90:aa:00:
                    a0:1b:15:5d:5c:97:59:9e:04:58:85:7f:f3:ac:0e:
                    00:88:f5:c2:c2:1c:4b:a2:c6:95:3e:f3:22:e6:41:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:BB:1C:8F:88:7C:3D:D4:86:37:70:75:BB:D6:25:0D:5E:69:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76773235-e31b-3df7-b1e7-b95d0d10108e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:d0:0f:69:f2:03:a7:fd:4f:bf:0d:25:a5:f2:27:10:80:
         8b:1c:8b:e2:70:2e:9b:48:65:aa:7f:80:25:cd:6f:36:29:f9:
         38:d5:67:eb:2a:83:c8:75:7f:e3:35:82:4c:4c:72:10:b5:d6:
         73:42:20:5b:3a:ab:2a:5a:62:4e:36:b5:07:7b:06:0d:88:ec:
         f1:ad:d8:80:c0:4c:15:74:0f:fd:c2:f2:8c:d0:bb:52:fd:a7:
         36:bb:a9:40:a8:46:f3:bd:e5:3c:87:dd:70:39:94:4f:af:12:
         4a:34:0e:9a:87:cc:a3:2d:0a:6a:26:f8:c6:08:da:3a:d1:81:
         01:bf:b6:85:17:89:5f:9f:56:ba:da:07:d4:da:8f:68:a1:c1:
         7d:91:82:36:c0:b0:c4:cc:a8:38:3e:70:e5:6e:56:87:b0:d2:
         ba:77:c8:b7:a1:bb:9a:21:87:b9:5f:f1:fc:6b:11:40:47:72:
         05:68:5b:c7:d3:39:af:99:1f:98:d0:bf:c6:a6:f2:94:a0:e0:
         53:ba:a7:12:b4:90:d3:7b:9e:24:0d:20:09:bf:97:d6:23:20:
         af:d3:05:cb:15:ba:e4:30:56:1c:8d:c6:e1:16:63:6c:1b:59:
         d0:0e:7d:e2:57:0f:48:2d:27:99:48:d0:5c:39:d7:aa:fe:12:
         1e:09:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:20:09 2025 by rpki-client