Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de3fd926-aeaf-3605-b9a6-78718ebc8ea6.roa
File:                     de3fd926-aeaf-3605-b9a6-78718ebc8ea6.roa (raw, json)
Hash identifier:          FM5yn9TWa4cVAzuYTxEe2BVMulxJ8Pu6qdieDKUcyfI=
Subject key identifier:   75:E9:78:41:4A:B6:D6:60:96:85:EA:FB:88:31:60:75:BD:BD:CB:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A761B6742AD37B8FCFFA55D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de3fd926-aeaf-3605-b9a6-78718ebc8ea6.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     3561
IP address blocks:        166.88.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:67:42:ad:37:b8:fc:ff:a5:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=e6255925-ce70-4bb7-a6ad-eda705a64a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:13:e6:e8:3a:26:22:c4:e5:f7:19:4f:89:
                    de:43:79:7c:0d:12:99:91:f4:23:7c:7a:14:78:94:
                    a9:96:a8:05:63:0d:ca:ef:f3:26:55:4e:f5:f9:03:
                    c1:6e:4d:67:c5:dc:03:20:4e:93:fe:c6:de:94:a9:
                    f2:7f:11:1f:30:6a:43:92:8f:4f:79:b0:e8:d0:47:
                    26:46:e1:4e:ea:ca:40:da:28:8e:5e:2b:aa:c0:f8:
                    ba:7d:10:67:21:0b:4d:2d:e9:2b:65:f8:ed:bb:87:
                    f1:08:fa:cc:b1:1e:b2:1f:fd:84:58:83:7f:af:43:
                    de:26:fc:91:68:c5:87:53:36:67:56:d8:5b:f5:51:
                    f3:06:62:40:1a:9f:46:9d:46:5f:95:78:0d:7a:5c:
                    d8:0d:c5:60:c0:47:d4:5e:11:3b:93:e1:f3:9d:5f:
                    84:22:a4:96:d1:ba:73:aa:f1:b9:dc:20:1e:4a:37:
                    69:73:c6:01:ae:ae:bd:74:5d:12:20:b3:74:fd:57:
                    5d:85:9d:4e:bd:a2:99:6d:e4:cf:7c:61:c4:1c:73:
                    a5:01:54:c9:3e:68:ce:03:e4:44:e2:22:94:ed:50:
                    44:f2:2d:2a:f9:54:a8:c4:62:37:b7:43:d7:76:30:
                    0e:5c:ba:78:e7:23:4b:ba:fc:94:f9:46:82:7c:ff:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E9:78:41:4A:B6:D6:60:96:85:EA:FB:88:31:60:75:BD:BD:CB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de3fd926-aeaf-3605-b9a6-78718ebc8ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:75:13:33:80:33:69:d0:5c:78:b7:93:0d:7f:b9:df:2c:ae:
         58:3a:12:0e:39:7d:48:d1:30:17:4b:0f:04:ec:07:a0:4c:fa:
         2f:2d:bf:54:67:4c:c0:58:b9:2b:98:f5:3c:96:3d:fd:0b:fa:
         1f:98:ef:fa:05:35:05:6c:91:80:0b:2c:17:48:90:a7:bf:ec:
         06:0b:87:20:e4:19:26:1f:74:2f:24:51:d2:26:bb:44:82:b3:
         66:98:c4:a7:7c:a6:97:1a:2a:28:fc:00:29:3a:99:66:d1:d6:
         f3:bf:30:bf:5c:f3:08:f5:c5:90:b7:d0:63:0b:16:9f:ad:87:
         fe:1c:b5:d6:13:83:f8:06:61:0a:ed:29:bd:df:c8:3c:bb:c0:
         56:f6:89:78:94:3d:fa:f4:cc:31:8f:7d:2b:ea:9f:d8:72:4f:
         fe:11:47:e8:df:b9:59:bf:f4:a1:67:44:0a:de:15:c9:3f:a9:
         b9:ce:f9:ac:74:d8:8c:07:23:8e:b0:fa:de:32:f0:39:27:d0:
         90:46:0d:4c:69:09:30:46:74:01:c0:3b:c1:7e:c1:95:b8:03:
         d3:91:bb:b7:a1:76:cc:6c:b5:dd:1a:0c:f6:fe:c7:21:3a:f3:
         17:68:cc:f2:92:21:1a:d8:39:67:15:72:92:ff:5b:54:14:3f:
         d4:60:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:47:26 2025 by rpki-client