Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa
File:                     fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa (raw, json)
Hash identifier:          jRSc0B1WEAvV/Q+uVpbOMFI0mRvjdbz8f+55hfZ5Xss=
Subject key identifier:   07:CE:FE:B8:E0:D9:7D:B0:6E:FA:5E:5D:28:14:80:FB:AC:1E:8E:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B6262240F8DFBBBE5EEA5E78
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        166.88.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:22:40:f8:df:bb:be:5e:ea:5e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=75cb0627-fd61-46f1-8b8c-253c106d591e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:db:ac:85:d1:13:57:c3:fd:fc:2b:16:15:
                    ed:22:cd:8c:ff:f6:4e:02:ca:00:5b:f1:fe:ab:59:
                    e4:7b:97:53:1d:31:ab:ae:d0:e3:45:be:87:1d:dd:
                    80:b4:be:6d:b7:06:f2:fb:f0:3b:6f:01:5e:cd:ac:
                    a9:0a:75:f6:b7:d5:0e:16:b9:ba:5e:dc:7a:a8:1e:
                    2b:35:aa:5c:75:b2:af:da:7a:ea:80:c8:65:73:cd:
                    ad:af:1c:6e:0b:4c:12:6c:23:ba:e1:9a:c6:1c:e0:
                    d5:14:6d:10:f4:95:bf:4a:8e:a9:ed:a8:86:7e:1c:
                    b9:d3:a7:86:4b:87:8e:2f:a1:27:25:98:4f:9f:23:
                    3a:c6:60:9e:2d:39:84:d2:0d:50:1d:9d:37:eb:19:
                    6a:34:4e:89:94:fa:64:ec:8b:05:86:d3:d1:99:81:
                    cc:e9:70:35:2e:09:ae:3d:f2:7f:82:2c:b0:10:35:
                    cb:41:6d:5a:fc:0a:e2:7c:49:33:31:38:eb:c1:ff:
                    07:e1:55:15:35:6c:c5:20:9a:2b:8c:ff:b1:6d:03:
                    46:23:dd:ba:b3:bd:fd:d1:22:fb:c9:96:11:56:39:
                    e9:da:61:3d:e4:fa:19:07:7b:fb:ad:15:dc:11:01:
                    7d:ea:8e:93:e5:f1:c7:e8:a3:06:ff:d8:5e:5d:fd:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CE:FE:B8:E0:D9:7D:B0:6E:FA:5E:5D:28:14:80:FB:AC:1E:8E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:67:c2:f2:a5:77:f6:c8:61:0c:85:6e:e7:57:1e:ca:c0:
         15:6d:6d:e9:ae:97:87:3e:c0:da:df:f7:e2:da:08:3e:d9:f8:
         48:0f:53:79:bc:b2:e5:8b:64:1d:08:10:e1:df:ec:5a:5d:77:
         66:bd:44:56:2e:e3:62:b8:81:d5:e9:03:f1:b4:49:f0:cf:84:
         83:f1:4b:81:c2:f4:cf:45:a1:ef:1f:11:ae:65:f7:87:36:d1:
         e2:f3:ac:73:db:4d:c5:44:b2:02:8a:01:34:02:46:7a:6d:42:
         20:cc:9b:60:64:62:c4:1c:ea:2a:5a:3a:b1:94:61:f0:f7:ec:
         32:a0:6c:af:65:83:e8:6d:3d:c0:90:b0:22:48:f0:78:9f:f3:
         e3:02:d8:c4:87:81:72:e6:5a:e3:d9:c2:e3:f7:f2:42:87:43:
         d5:2a:83:1e:18:3d:50:3a:fb:2e:9f:97:02:1b:a7:5b:47:14:
         64:27:cb:c8:91:33:b8:a5:a7:e7:12:a0:9f:0b:d3:8b:f0:f4:
         a0:1b:09:25:79:e2:d4:41:03:ad:53:75:57:47:ca:e4:6a:e3:
         82:65:43:73:0d:95:00:92:c4:db:10:c4:fb:e4:b4:a3:d8:56:
         1d:ea:1c:53:a0:32:fc:d1:e3:51:30:db:4c:cd:6e:80:57:a5:
         00:6f:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:54 2025 by rpki-client