Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f898089e-11a7-35fc-8a46-34989535a60b.roa
File:                     f898089e-11a7-35fc-8a46-34989535a60b.roa (raw, json)
Hash identifier:          Xg6FIB0mAxyN6jhysfS2/U/78HNY+pYG227TM1Ys0SE=
Subject key identifier:   5D:69:55:47:01:D2:F4:5B:9A:2A:F3:41:2B:F3:E8:77:A1:93:ED:06
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AF95150365CFBEF229B693753
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f898089e-11a7-35fc-8a46-34989535a60b.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     5650
IP address blocks:        166.88.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:50:36:5c:fb:ef:22:9b:69:37:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=fa7564f0-0f80-43af-86ca-c4e0872d7ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:44:1c:92:43:8c:34:54:e5:f6:90:23:00:
                    5b:1b:18:10:42:f9:e1:58:23:4f:b3:d0:d4:ed:09:
                    67:b4:1e:0b:fe:11:57:ca:3f:d1:48:9a:39:fa:79:
                    03:fe:6f:fa:7e:57:4d:37:7c:5c:6e:cb:db:5c:78:
                    85:3d:aa:f6:63:79:ac:dd:e4:3a:68:3b:9d:47:49:
                    15:a1:12:42:3f:a5:f6:1c:ce:f7:a1:69:14:d2:0e:
                    8f:7c:af:ff:f1:a5:23:94:d9:e2:7c:39:45:fd:b3:
                    8c:a4:07:e6:66:2d:77:c4:14:04:8a:f1:34:9b:aa:
                    85:1c:27:db:38:8c:39:8c:3d:95:0d:8a:9a:61:eb:
                    a7:20:22:4a:6d:93:64:7d:71:e8:5c:3e:b0:b0:42:
                    97:1a:e9:89:ff:ec:86:67:9c:ab:5d:26:dd:49:24:
                    5c:c3:72:7a:af:75:71:92:ea:11:18:df:6d:fa:72:
                    ef:53:45:19:54:ae:8f:0c:65:9a:12:fb:5d:18:3d:
                    9a:89:e2:94:aa:be:4a:c7:1b:2e:d8:f0:7c:fe:7a:
                    77:d1:f2:92:44:3a:04:90:64:ca:2c:19:ea:f7:13:
                    0b:fc:65:0b:35:75:64:f2:be:ee:21:23:a6:0e:31:
                    f7:b0:62:d6:e9:37:01:63:84:a8:f4:5f:ca:f3:a6:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:55:47:01:D2:F4:5B:9A:2A:F3:41:2B:F3:E8:77:A1:93:ED:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f898089e-11a7-35fc-8a46-34989535a60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:15:be:ae:46:a8:66:07:f4:6c:20:c5:ac:1f:a3:16:76:92:
         f4:89:09:fa:69:95:05:33:c3:77:2d:76:05:f2:48:b4:24:4c:
         7f:42:4d:24:01:d8:d3:6c:9a:f1:40:00:86:5e:64:a7:bb:50:
         99:cf:ba:96:64:e8:89:8b:19:a5:d6:20:3d:b0:86:f9:00:82:
         f0:b5:96:7b:6e:95:92:0a:dc:67:31:0e:17:2c:a7:fb:51:0d:
         51:56:f8:36:91:35:f4:33:a4:32:24:5b:35:83:48:f6:4c:25:
         4b:f1:bc:44:c1:3a:35:50:0b:27:66:17:a0:17:64:50:1b:3a:
         d9:05:58:5a:b6:8b:fd:1f:b3:45:f6:66:dd:68:16:d7:91:62:
         05:e8:7c:34:5e:7e:2a:00:e7:e3:37:e4:f4:64:19:40:e3:4f:
         a1:f2:76:7f:1c:b4:cf:a7:b3:d8:b8:58:9e:01:55:3f:8f:61:
         68:98:1e:9c:95:85:8d:10:02:47:a3:3b:44:be:5c:cf:d4:ed:
         be:ec:ac:f2:b4:42:3d:fd:3d:52:3b:7d:01:de:cd:36:b7:0b:
         51:f0:ee:41:2e:07:1d:79:8c:d9:74:93:55:c5:16:66:43:40:
         0c:ee:f3:39:c7:7e:06:40:52:ff:8b:57:df:f5:74:d1:76:6a:
         60:31:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 18:05:20 2025 by rpki-client