Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa
File:                     b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa (raw, json)
Hash identifier:          IlC0lw82koDUpUoEKfWXb20IqT7asJ1POOWUqnPuKYc=
Subject key identifier:   CB:73:C8:EE:79:45:DB:3A:F7:64:8B:F3:69:82:A6:D8:74:A2:1D:96
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AF951507F07E38A984CDABDC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     5650
IP address blocks:        166.88.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:50:7f:07:e3:8a:98:4c:da:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=a5d7cf06-ece0-4136-ab0b-d90ea25005fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:8b:b5:2e:6d:12:75:f8:8f:bd:94:4d:5b:
                    c3:c2:eb:8e:aa:f6:a3:c9:1d:5e:be:96:8c:15:53:
                    45:75:2c:22:05:9d:11:98:8e:b4:76:b2:67:97:cf:
                    74:0b:64:ff:b7:5d:a1:b3:b0:b4:60:04:51:23:78:
                    5f:4f:af:6b:ca:67:fb:15:a1:50:7d:aa:8c:2f:77:
                    35:30:bd:e4:56:f3:d3:38:7f:19:d2:7c:4c:1e:a3:
                    77:3b:2c:31:ae:fa:77:5f:27:93:0e:bb:ea:ef:9f:
                    13:38:80:6b:77:b2:6f:5a:69:bf:5d:d8:d7:f0:9d:
                    75:1d:9f:ac:5c:b0:31:10:0c:7f:9c:ff:91:58:c2:
                    39:eb:80:f6:81:00:3a:5d:a9:80:3c:96:86:a4:58:
                    8e:fd:6d:55:3d:72:83:61:57:f2:24:bb:48:57:95:
                    8d:dd:1b:5b:14:a3:a9:37:5a:89:9e:ef:d2:e9:e5:
                    75:61:b1:5c:0d:62:29:0b:48:2e:71:9a:6e:64:aa:
                    9c:05:1e:e6:72:60:8b:87:4e:85:86:a3:1b:ce:df:
                    aa:4d:69:ed:bc:74:a2:17:dd:49:97:90:44:97:1d:
                    43:4e:a7:7c:eb:ab:b9:d9:02:47:1a:1e:af:96:d6:
                    dc:c4:cb:b7:b9:d9:05:6d:3f:95:80:3d:5f:26:ed:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:73:C8:EE:79:45:DB:3A:F7:64:8B:F3:69:82:A6:D8:74:A2:1D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b48e54f2-63aa-3411-a668-a2e692a6f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:e6:f0:95:ca:20:50:01:79:21:26:76:03:7b:31:05:e6:
         c5:42:8d:d3:d1:01:39:70:1b:5f:32:31:bb:f3:9e:d4:12:55:
         f9:5d:2f:a9:11:c7:09:47:27:7c:7e:0a:7c:61:fb:dc:35:08:
         c8:53:3a:eb:e8:0f:a9:9b:ca:e3:cd:6e:61:67:73:9e:b7:7e:
         af:14:ca:66:e0:b6:50:cb:f1:f0:0e:2e:6a:5c:8b:e0:57:0d:
         bd:2a:12:24:c7:79:1b:b9:16:43:0f:87:d8:61:b9:12:37:72:
         82:22:8c:f7:e8:88:32:8e:ec:cd:81:6b:a6:fc:60:98:c3:7d:
         8b:b2:5e:cf:c5:c5:3f:24:8d:41:7c:2e:66:49:bd:65:b7:e9:
         5e:7b:a5:72:7e:76:19:3c:df:8c:45:5a:19:e6:79:ed:99:54:
         4a:a6:01:04:b5:be:32:37:59:eb:4d:dc:ba:77:df:92:86:02:
         b8:43:69:e3:c4:b0:fa:2b:8b:bb:b3:26:c0:bc:3f:3a:ff:57:
         e5:46:5f:52:3c:ff:62:0a:a8:53:96:18:21:aa:d7:0d:e0:e3:
         56:52:df:e6:af:3b:35:32:9b:37:fa:b0:2b:6d:e0:68:75:b3:
         97:ac:1c:7a:f6:f4:bf:d2:fc:8c:87:07:f0:34:ce:1c:b7:29:
         c5:12:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 18:05:26 2025 by rpki-client