Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed41cd49-11f8-3c2d-b59d-d5dc16b0e9dd.roa
File:                     ed41cd49-11f8-3c2d-b59d-d5dc16b0e9dd.roa (raw, json)
Hash identifier:          tdlQf99UAxP5KU2dtVoUY9M94qeyfPaeG/A+EWD3bHo=
Subject key identifier:   30:6E:DF:5B:1C:29:AF:F1:99:46:DA:21:16:8B:62:4D:D8:91:9F:64
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5E3C140C5F974D193080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed41cd49-11f8-3c2d-b59d-d5dc16b0e9dd.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        166.88.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5e:3c:14:0c:5f:97:4d:19:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=9173748e-9d04-4f8b-a47d-d457d315475e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:27:0c:22:86:08:ba:a3:53:33:c0:76:c9:
                    f9:7d:03:2d:71:f2:d7:1a:97:18:18:4e:a1:0f:fe:
                    aa:28:bc:99:4d:fc:3c:e5:35:75:38:a1:82:26:82:
                    a9:ce:4b:d7:9e:77:81:84:b5:20:f1:be:fd:33:2c:
                    da:60:a2:a5:ba:4e:96:b2:e7:ed:49:23:1a:fa:01:
                    a0:1b:02:a1:0b:22:bc:36:ae:98:96:ba:07:63:f5:
                    23:4a:48:f7:e0:f3:94:cc:11:40:3c:9f:a9:1f:a3:
                    00:c5:38:a5:5b:ee:d5:dd:83:5e:6e:43:34:7e:22:
                    1b:74:79:a2:2d:73:68:d7:75:88:39:a9:31:34:c9:
                    26:ca:05:71:64:7d:6f:1c:2f:9c:60:4d:e1:54:79:
                    c8:3c:fe:48:3f:a9:59:b9:37:e4:86:22:7e:d9:99:
                    ef:11:7d:c0:c2:e9:c4:25:ee:9b:c4:9d:28:2b:3f:
                    21:53:ba:03:72:3d:8f:7b:cf:d7:30:1a:ef:af:66:
                    e2:8c:a0:7d:77:9f:d2:19:ee:e1:56:3f:eb:bf:63:
                    68:4f:76:65:88:66:d7:ea:26:70:22:48:27:40:f9:
                    0a:84:af:06:21:9d:8b:64:87:b9:22:ce:a0:99:e5:
                    dc:fb:e6:0d:8b:c3:4d:7a:51:44:2c:6d:c0:d6:8e:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6E:DF:5B:1C:29:AF:F1:99:46:DA:21:16:8B:62:4D:D8:91:9F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed41cd49-11f8-3c2d-b59d-d5dc16b0e9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:10:4c:f9:92:b3:35:b6:96:3c:a9:20:e5:a0:f5:b2:5e:
         81:da:ae:3a:e8:fe:80:fe:a8:11:37:48:d1:c6:23:d9:0a:59:
         5c:ba:72:11:73:6c:ed:c1:d1:a6:88:a9:3a:61:f4:1a:2a:dd:
         4e:0c:fd:d6:bf:28:1e:ba:50:56:42:22:40:ad:92:37:5f:f3:
         94:fc:65:4a:be:cc:f6:2d:9e:25:b7:6d:26:23:38:f3:b6:60:
         8e:5b:e5:a1:99:54:a4:e6:d9:2c:ad:e2:56:52:11:17:69:c9:
         e8:82:05:89:9f:ea:f2:dc:3a:a8:86:8c:b4:0f:57:a1:13:da:
         ea:ac:57:89:36:51:54:c1:78:ee:26:42:3e:7a:43:20:24:a2:
         e7:1a:d3:5f:d0:41:d3:c7:5e:60:8b:c4:0b:fb:66:c7:97:be:
         64:10:fd:3f:56:1a:a2:f1:84:22:45:98:d6:22:c8:0c:d6:c7:
         2f:51:cb:20:cc:0d:79:ef:da:82:f1:b7:e5:d9:5d:87:1c:ea:
         5e:28:46:2c:91:f2:4b:d2:37:9a:2a:7f:a1:97:1e:b6:15:e7:
         1b:b4:b8:6a:cf:35:9a:88:6c:79:61:92:5c:93:f7:a3:9a:2a:
         3a:78:0c:5f:f2:a0:13:b2:4b:09:bb:88:2a:82:67:70:58:e6:
         ac:b2:58:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 16:26:54 2025 by rpki-client