Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa
File:                     f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa (raw, json)
Hash identifier:          7yeteaRTJcXm6W1JoPL/2hDqFn5jncqOaUF9Cw0+fds=
Subject key identifier:   03:D5:D2:11:68:22:CA:E2:79:83:A5:9E:BB:37:E5:88:34:0E:5B:80
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858495ABEDFBEA2E58A3395C36D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     149440
IP address blocks:        166.88.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:df:be:a2:e5:8a:33:95:c3:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=c58f3d82-ce74-4d4c-b77c-8efeb267f057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:68:ae:c8:1d:60:32:d0:73:33:a3:21:69:
                    1a:15:be:19:93:f6:54:33:a8:a2:b1:7e:cf:c2:49:
                    da:41:1b:74:0f:38:9e:a0:1b:fb:ac:18:79:24:09:
                    31:3c:7a:f8:32:3b:eb:61:95:6a:a8:e6:bb:e9:ac:
                    2b:24:4f:0e:33:60:eb:ef:9f:2a:3f:d7:07:0c:ef:
                    b6:b4:74:c9:f2:ec:de:71:2a:36:b8:1a:01:fb:b1:
                    bb:8c:08:55:82:8c:83:e4:83:c4:47:4f:84:ff:c9:
                    32:36:fe:4b:88:e0:c2:a6:f4:df:da:76:44:95:8b:
                    90:7b:2c:cc:de:6d:d6:32:da:f2:ec:1f:6e:14:b0:
                    f9:26:3d:82:8d:c2:63:d1:e5:79:b5:08:c7:65:b8:
                    1d:fa:27:19:c0:37:1e:3c:46:34:ed:95:55:13:6b:
                    fb:48:a2:db:47:0c:98:c7:30:2d:f9:1f:fa:e3:c2:
                    18:a1:d4:89:18:2f:01:b1:fd:a0:31:c7:6a:c9:54:
                    cc:95:23:f1:77:9e:b1:16:4a:be:7d:9a:d3:8b:3d:
                    c6:27:56:8b:00:42:38:06:9e:5b:11:94:a8:41:c2:
                    bc:6e:31:ab:3b:e0:f4:a1:85:90:39:e1:3d:86:7b:
                    ae:69:3a:e4:e6:01:22:ac:70:d5:a1:9f:2b:87:a1:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:D2:11:68:22:CA:E2:79:83:A5:9E:BB:37:E5:88:34:0E:5B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:34:83:2b:71:50:7e:ab:7d:2d:e0:17:d5:b7:59:6f:e9:c8:
         f8:eb:a7:b5:f8:36:0a:72:c7:77:cc:2c:59:86:ae:87:5e:b6:
         bf:b1:a2:7c:4e:92:6e:69:4d:f5:a0:f1:91:f0:54:5c:27:28:
         af:55:c5:4a:16:d8:68:32:2e:f0:d1:39:c9:b8:82:fa:53:49:
         c2:73:d1:35:72:95:b0:d1:15:a0:a3:87:20:59:76:55:d0:eb:
         f1:fa:b4:51:4a:6b:64:de:6d:4a:39:56:69:fd:95:3b:c7:4b:
         eb:14:6e:8a:25:5d:8e:39:7f:34:b1:a6:97:61:1c:15:66:0f:
         5e:be:b3:7a:72:dc:30:20:94:9a:2a:b5:49:1b:f3:89:2d:62:
         94:83:d8:a1:01:26:e7:d4:b7:d9:e6:91:2f:7c:11:81:22:45:
         80:39:0f:2f:da:fe:58:26:f4:90:28:ba:50:84:03:3b:db:0e:
         52:05:87:0b:2f:ea:f1:d9:54:5b:a2:61:03:3e:b9:83:59:15:
         05:2e:21:7a:75:27:33:f5:7e:49:34:aa:04:3f:3c:57:78:d0:
         95:80:0c:d3:6a:87:01:9c:ec:99:48:1e:63:01:64:16:61:7a:
         4c:81:47:32:1e:91:80:06:07:1b:3f:c5:39:95:97:e7:6e:93:
         8a:d1:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:18 2025 by rpki-client