Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bcff8709-f8be-34ca-81f6-6ff9aed6bcde.roa
File:                     bcff8709-f8be-34ca-81f6-6ff9aed6bcde.roa (raw, json)
Hash identifier:          43A5hLb3cLTj0lShoie4hG0VVbPzU8vNaA4+2QPbYXw=
Subject key identifier:   9F:3B:6F:2E:1F:6B:10:DC:9B:2D:03:EB:F5:07:EF:44:AB:E5:D3:BB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5DA81AEB8EAAA5C5D980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bcff8709-f8be-34ca-81f6-6ff9aed6bcde.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5d:a8:1a:eb:8e:aa:a5:c5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=b5534942-fc64-4c75-aa27-b930647c3dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:c7:8f:03:10:fd:ad:77:00:ae:08:46:1e:
                    5f:d0:62:64:e6:4f:0e:c0:59:f6:02:8f:fe:df:b2:
                    51:63:8f:4c:f0:cc:7b:09:b9:ba:65:ff:a5:da:e4:
                    53:aa:82:95:09:54:55:5e:72:3d:14:7e:31:ad:08:
                    8f:92:fd:6c:4f:16:f5:fa:65:05:c5:a3:7d:b2:0d:
                    65:6b:bf:c1:57:4e:4b:36:22:c4:83:b9:30:fe:87:
                    ac:e5:a5:0b:bd:a4:34:db:6a:3c:68:55:78:45:81:
                    19:3b:dc:55:d0:34:cd:83:f4:63:fc:a7:bc:cf:79:
                    2a:bf:bc:5d:72:0d:ee:4e:f7:44:52:31:82:92:3d:
                    b8:58:34:e5:a6:7e:d1:40:8b:d1:d7:ae:d7:d9:27:
                    b3:87:10:a4:95:60:c2:77:88:b5:05:7c:6c:19:22:
                    76:44:77:cd:a9:60:86:88:c4:33:97:99:3d:04:2b:
                    0a:b8:c4:be:a4:ea:a0:ee:cb:f3:8a:c1:f3:13:23:
                    b7:ad:96:1f:d8:c1:68:51:f4:4b:8a:f4:50:4d:a5:
                    77:e0:9e:9f:22:d7:63:c8:13:2d:f8:03:ee:ff:99:
                    d7:68:7b:15:7e:0e:01:6e:ae:e9:43:1f:c1:20:35:
                    5e:cf:9e:7a:78:5e:c7:0b:ab:d3:7e:e6:f9:8e:59:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3B:6F:2E:1F:6B:10:DC:9B:2D:03:EB:F5:07:EF:44:AB:E5:D3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bcff8709-f8be-34ca-81f6-6ff9aed6bcde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d6:8c:6c:92:b9:36:04:eb:c5:78:13:cc:0a:62:1d:85:2a:
         98:17:b1:b4:14:0b:55:38:51:13:52:ad:01:ad:e6:37:12:31:
         04:7b:61:6b:0b:09:73:d8:66:f5:7a:58:55:58:28:fc:b5:20:
         2c:62:4d:62:2a:af:8a:1f:64:44:9d:df:2b:d5:bc:88:61:9a:
         19:0e:b9:f6:4b:72:ec:32:3e:80:c8:ed:d4:47:8e:0f:fe:0c:
         d3:46:f4:a0:a5:f9:8f:16:2d:71:de:e7:c1:03:f7:60:4b:2f:
         fd:e8:e9:6d:20:4d:0e:c7:18:88:50:53:c5:6a:8c:fa:7f:b6:
         c8:6e:d2:6b:e9:1d:80:13:6b:b5:15:a7:e8:e7:85:71:f0:e6:
         3e:21:8f:ef:94:ec:26:e0:39:4b:3a:99:80:44:91:e6:7d:16:
         84:93:64:11:35:06:7b:cc:fc:34:17:bb:ed:55:f2:48:d2:5f:
         5d:c6:80:c6:57:08:b3:80:3a:be:3f:d1:23:03:e2:06:4a:ff:
         69:bd:56:66:24:f2:ab:79:88:cf:e3:fa:47:84:37:35:fc:ce:
         25:d0:5f:fd:24:ff:23:8a:1d:02:6a:1e:37:8a:ed:0f:8e:1b:
         d6:71:c9:90:26:b8:46:e7:67:1a:a1:97:38:1c:3e:50:65:c3:
         66:57:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:20:51 2025 by rpki-client