Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa
File:                     36a6681a-5e49-3f2e-b5af-4b56292fb840.roa (raw, json)
Hash identifier:          7RsWCMLC9AAG6QiDZSprYrWt0T5UJbY+boCBG0FIeyA=
Subject key identifier:   06:6B:E6:0E:52:07:1B:D5:FA:43:FE:52:CD:2D:AF:1B:94:6A:8E:8C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499294AE534931185398C34228
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     209854
IP address blocks:        166.88.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:ae:53:49:31:18:53:98:c3:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=ecc71f1f-508f-4785-9a9f-f33076be4c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:22:8a:6e:6e:e6:c6:0b:83:2f:6c:7d:43:
                    05:14:8c:9e:8e:b2:51:10:c3:33:1c:6b:bc:b6:53:
                    83:3d:5d:5b:7a:65:14:1f:29:bc:45:ab:44:65:9d:
                    94:e1:f6:b4:7a:24:9f:6f:da:c7:35:58:b5:3e:3c:
                    ec:b4:52:4b:24:a3:45:9c:4d:d4:f6:16:67:c5:b2:
                    2a:ad:81:2a:ab:16:79:49:0b:e3:82:d6:be:d5:9f:
                    1b:b7:ac:39:a0:d7:8f:ff:9e:54:5a:1b:b1:06:d9:
                    d0:b3:d2:92:5e:37:3f:0a:6a:2b:4c:55:24:be:2b:
                    67:54:c9:7f:a1:83:c1:0a:b1:16:4a:89:83:b5:a1:
                    7e:05:a0:bf:f4:e8:57:fc:e2:5c:f9:40:21:5f:ec:
                    11:04:b5:e1:ca:f3:cc:98:28:1d:97:4f:3d:73:a2:
                    d8:bd:98:aa:50:cf:58:b4:a0:a5:9f:29:e1:69:04:
                    77:38:d4:06:1f:5a:0b:2d:0e:74:16:ae:e3:e7:e6:
                    3d:be:1c:bd:9f:3c:a0:ef:8a:63:a7:64:38:e7:56:
                    a3:d0:a4:9c:97:50:d0:8a:9c:6a:b6:16:a0:75:76:
                    52:77:a9:26:ec:44:0d:7c:36:35:fd:a6:e6:c4:39:
                    98:40:38:2d:81:13:93:0f:a6:0a:a5:79:fe:3a:69:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:E6:0E:52:07:1B:D5:FA:43:FE:52:CD:2D:AF:1B:94:6A:8E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36a6681a-5e49-3f2e-b5af-4b56292fb840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:45:58:fc:d2:3e:0a:71:d5:f3:4e:af:2d:af:a5:07:60:
         0c:24:a4:26:39:77:b0:ce:1c:59:70:23:9e:5f:71:c5:41:3d:
         4d:3b:82:78:b4:f5:ad:99:03:c7:6d:72:6d:07:94:21:85:aa:
         ee:30:41:46:f3:62:77:d7:55:e2:9a:00:32:5d:4f:51:e2:c8:
         09:8e:22:7b:4c:4a:fe:63:af:a1:70:3d:ab:de:af:98:21:a9:
         a7:b5:ce:34:f4:27:59:5b:04:52:93:c0:24:58:a7:f7:b8:67:
         d3:ab:72:a9:68:ff:2c:0e:7e:08:02:8b:44:29:3d:bd:b7:ad:
         51:7c:14:d6:5f:2e:94:1b:0f:bd:3a:b9:a7:43:73:f0:cc:fa:
         e3:c2:49:d1:86:11:a9:c9:1a:ba:4d:3c:4f:70:0a:10:54:40:
         78:3c:8e:16:57:c6:16:97:95:e9:47:a5:ed:14:03:27:66:a4:
         af:35:1e:3c:78:1c:aa:da:53:f1:5a:3d:33:a8:b2:12:7e:b9:
         57:ac:59:6f:6c:19:27:dd:d2:11:e2:b0:06:7a:ae:39:91:7c:
         0d:45:1c:b6:43:b1:c3:d4:43:aa:17:4b:cc:1c:70:42:4f:cf:
         9b:d7:63:44:a8:d9:ff:78:52:ba:c1:42:09:49:67:b1:00:ee:
         8b:61:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:46:20 2025 by rpki-client