Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39ecf12b-2c85-378b-9cac-bd1a8ef7bb36.roa
File:                     39ecf12b-2c85-378b-9cac-bd1a8ef7bb36.roa (raw, json)
Hash identifier:          +/gaX3S0J22AMaockXOpiHif2ZvLncwWJufgSboT298=
Subject key identifier:   6F:C8:BA:6F:49:E1:4A:81:F8:A9:43:85:9E:06:68:A2:9C:17:4C:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5292F4CBAB4572C7AA4F3680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39ecf12b-2c85-378b-9cac-bd1a8ef7bb36.roa
Signing time:             Thu 26 Jun 2025 19:33:09 +0000
ROA not before:           Thu 26 Jun 2025 19:33:09 +0000
ROA not after:            Wed 24 Sep 2025 19:33:09 +0000
asID:                     11404
IP address blocks:        166.88.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:92:f4:cb:ab:45:72:c7:aa:4f:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 19:33:09 2025 GMT
            Not After : Sep 24 19:33:09 2025 GMT
        Subject: CN=bb8e17cc-6757-4500-80e3-27a8951e701c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:52:08:52:6e:86:71:eb:a4:4d:9f:b6:2f:
                    18:7b:28:0b:24:02:32:cf:a9:09:a7:72:ab:56:fb:
                    ba:ce:d2:71:f3:88:70:54:c6:21:5f:fa:15:fc:5b:
                    3a:7c:5c:02:23:20:a4:be:f0:74:81:f5:7e:a4:18:
                    fe:0e:dd:91:e0:b8:24:a8:c0:e1:af:c9:ba:71:a6:
                    9a:ae:fd:e3:91:26:9d:63:88:7a:e0:f1:8d:e6:15:
                    f2:d2:3d:35:99:0b:69:15:b6:6d:1e:4e:90:cd:35:
                    1f:d2:85:e7:fc:83:06:58:a1:84:91:27:82:ac:a6:
                    03:88:f7:1f:32:5a:a4:73:a7:98:3c:0c:1a:e2:58:
                    50:5e:14:c6:f2:d0:dd:d4:05:56:07:57:14:3b:db:
                    ab:b6:f5:04:7c:6f:41:64:f9:65:39:d5:ee:e6:28:
                    64:84:3c:dc:c1:09:13:ec:e7:ca:ba:3b:c1:fe:1b:
                    80:a7:54:cc:9f:ae:61:e4:57:90:fb:29:55:3a:c5:
                    05:3b:a4:87:8d:f2:e4:49:04:16:42:97:86:9d:c9:
                    30:dd:2c:68:6d:23:9e:bf:13:9e:de:42:c3:61:b5:
                    5f:c9:59:40:86:41:69:11:fc:2b:aa:42:e5:a3:76:
                    71:1a:10:a3:88:b3:42:e0:c8:a1:8c:98:6e:59:e6:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:BA:6F:49:E1:4A:81:F8:A9:43:85:9E:06:68:A2:9C:17:4C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39ecf12b-2c85-378b-9cac-bd1a8ef7bb36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:77:d4:5f:33:d2:3a:2d:a0:d9:35:dc:26:02:da:28:31:
         13:01:a9:f1:16:d9:3a:0e:b6:c9:13:2d:35:ac:61:58:cd:6c:
         d3:ab:ee:4c:d1:60:14:aa:54:b4:e2:89:d7:5e:f4:9e:ec:0b:
         78:33:05:37:99:86:12:fb:73:49:9f:81:42:27:01:29:89:55:
         20:bb:fb:b2:5c:43:a8:fc:89:6e:b2:96:1e:1b:6f:c9:5e:75:
         66:67:a6:ec:9e:72:fe:8f:24:b3:06:af:aa:ed:65:e3:a9:fb:
         b1:f6:9c:4b:f9:44:cf:82:7f:58:0f:48:69:c8:08:cd:55:86:
         7d:6d:4b:da:64:2f:c8:28:e8:6a:1b:cd:48:90:87:79:8d:4a:
         ba:d7:5a:c4:99:04:3b:89:00:1a:96:4a:e8:e4:18:e2:ee:f7:
         45:a8:a9:df:cd:52:1b:74:9b:81:08:6a:f6:0d:c7:28:c6:49:
         3e:ca:85:30:a4:f9:24:6a:e6:6a:63:e0:52:ee:cd:77:50:fd:
         6d:b4:b6:a3:b5:5b:75:cf:e7:70:6a:45:b2:c7:b8:ad:3f:12:
         68:1c:a2:c6:90:c2:fb:b6:c7:96:b1:b3:5a:42:4e:3b:01:c4:
         11:6f:e6:3c:cf:4b:bb:95:5a:dc:43:49:5b:9e:6a:59:60:5c:
         d8:e4:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:51:03 2025 by rpki-client