Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f81a23d8-2e62-3ffe-a693-ee3c6ba4097c.roa
File:                     f81a23d8-2e62-3ffe-a693-ee3c6ba4097c.roa (raw, json)
Hash identifier:          I5BFdeHwwjG2WOFIprkKDnAN5d2qtXKKbUrpL1GGSI0=
Subject key identifier:   3F:5F:65:98:0A:25:02:4A:9B:79:34:78:C2:D6:E2:CF:47:5D:F9:05
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4D9AAE300CDED9D938980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f81a23d8-2e62-3ffe-a693-ee3c6ba4097c.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        166.88.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d9:aa:e3:00:cd:ed:9d:93:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=0b7959de-44e6-4695-b113-41c3a41a566b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:21:9e:f8:13:1c:c6:6a:c0:d0:53:b2:7b:
                    62:bb:f1:0b:4e:3c:cd:ed:45:92:a8:c7:0a:df:78:
                    0b:8f:3d:91:35:3d:9d:dc:a9:5c:57:ad:bd:10:a3:
                    b7:6e:94:37:c5:d5:94:a0:0a:f5:f7:fb:f0:4c:16:
                    c2:bc:35:16:1a:7a:39:b8:a7:68:5c:83:0b:6d:6d:
                    69:5f:83:04:1e:35:70:7c:80:de:71:d2:a8:56:a1:
                    30:bf:80:fa:69:96:33:f3:37:4a:83:70:8a:1f:ab:
                    9f:c9:04:db:34:52:97:6e:dc:63:6f:7e:b8:ef:b7:
                    33:3f:53:5f:15:69:dd:a9:77:b4:ab:f4:75:51:79:
                    e8:10:9d:1c:fc:cb:a7:83:8f:7b:03:9f:9d:3c:90:
                    6f:64:15:d9:0f:83:a5:ec:d4:75:8c:b5:05:8c:66:
                    69:54:24:b9:f3:8d:51:c6:1b:bb:56:90:4b:de:bc:
                    83:5e:7b:25:2e:18:51:41:28:9a:cd:1e:d4:04:aa:
                    df:9b:69:0b:15:3d:b6:4a:59:77:63:bb:9d:4a:8b:
                    01:30:29:0a:89:cd:48:37:06:43:04:49:47:f4:39:
                    37:cf:b2:57:59:b4:f9:0c:b6:ad:2c:e9:63:ac:9a:
                    ad:33:37:00:c4:8d:e6:e6:bd:18:e2:04:87:8c:76:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:65:98:0A:25:02:4A:9B:79:34:78:C2:D6:E2:CF:47:5D:F9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f81a23d8-2e62-3ffe-a693-ee3c6ba4097c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:0f:23:43:0f:25:c0:97:ab:99:c5:71:52:8d:9e:d4:00:
         02:8a:76:cd:e8:6f:88:48:22:17:cf:80:66:29:c6:70:ed:d6:
         09:fd:ce:2d:81:09:90:2a:a6:ef:8d:a8:cb:38:73:a3:8f:49:
         90:06:f8:01:2a:4a:80:a1:c7:9f:ba:d5:3f:93:55:4e:f0:72:
         f1:f2:4e:95:84:b6:b7:00:9c:f4:b2:36:a7:e2:24:83:3d:1b:
         94:9d:f2:82:de:41:e9:77:0e:24:e5:03:27:55:96:e1:4d:60:
         dc:c1:54:14:e5:2f:00:0b:ee:47:18:f8:f4:91:ca:25:42:13:
         2c:20:42:dd:6d:84:7c:37:ad:cf:80:00:bc:e0:b4:32:b7:40:
         03:ef:d4:8c:31:74:58:dd:d6:f7:48:f3:ef:93:61:35:96:3c:
         9c:a6:11:17:dd:1c:d4:b9:60:0d:3a:1f:8b:10:e1:9b:c9:80:
         35:78:38:4c:75:a0:db:34:9b:75:dc:39:1f:8a:42:bf:35:e6:
         a6:62:e6:c2:23:57:a7:86:eb:af:d2:30:26:ad:86:4a:64:2b:
         06:99:fa:93:26:e9:0c:a0:c6:3d:a7:78:ba:2b:d7:e8:d9:57:
         83:27:b5:70:65:24:ce:3d:45:58:2e:b0:1c:cc:94:79:cf:84:
         12:a9:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:59 2024 by rpki-client on console-fra.rpki-client.org