Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4956f3af-ed31-3aaf-b6de-243fd62edcbe.roa
File:                     4956f3af-ed31-3aaf-b6de-243fd62edcbe.roa (raw, json)
Hash identifier:          9XJ4p3NK9PrEJN0tGgbGUWiRgDxt9DWYRIsdWKLgcOc=
Subject key identifier:   0E:CE:68:2D:B8:36:89:8A:C3:C0:7D:B8:C7:3E:B7:0D:5E:83:8E:D7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849B67EF1990BA2CB05EB972280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4956f3af-ed31-3aaf-b6de-243fd62edcbe.roa
Signing time:             Thu 01 May 2025 21:46:43 +0000
ROA not before:           Thu 01 May 2025 21:46:43 +0000
ROA not after:            Wed 30 Jul 2025 21:46:43 +0000
asID:                     401152
IP address blocks:        166.88.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:7e:f1:99:0b:a2:cb:05:eb:97:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 21:46:43 2025 GMT
            Not After : Jul 30 21:46:43 2025 GMT
        Subject: CN=ae66a258-fb69-4c42-bd4f-ad9b4f53d36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:c2:7a:f6:10:8d:41:89:99:ce:e1:3a:6a:
                    5f:d5:39:01:e7:36:2f:d9:c9:d9:1d:2e:b8:df:32:
                    90:e8:7b:83:ba:82:85:67:95:eb:5e:1a:ed:8b:25:
                    1d:ad:78:78:80:6c:76:64:7d:aa:f9:e8:f7:c8:86:
                    5f:9c:fa:9c:74:2e:d0:42:6c:d4:b4:84:38:d8:90:
                    94:51:a7:81:01:70:0a:53:92:a9:b1:f3:e1:8b:22:
                    ac:62:fb:ec:85:8b:7c:fb:69:d9:de:8a:ef:98:92:
                    bc:db:2b:31:ae:b9:ac:eb:0b:7b:e6:a1:f2:9f:2d:
                    77:88:29:e1:75:3b:fc:ff:9e:d2:15:33:de:54:e5:
                    f8:1f:6d:45:db:fb:8f:e4:b2:c1:ad:38:c9:d1:d8:
                    01:f7:3e:14:be:71:47:23:79:02:08:12:5d:22:ce:
                    64:28:9e:ba:12:83:ca:28:bb:dc:16:f8:14:2e:9d:
                    00:16:6e:31:d1:40:26:e2:1d:eb:08:59:e3:15:da:
                    5c:16:06:c4:71:c2:39:9c:c3:f2:2a:88:55:46:df:
                    96:02:77:72:59:c3:99:b5:bd:9f:78:40:56:ce:b6:
                    48:82:a7:5f:6e:c1:19:1b:04:84:bf:14:fe:2f:70:
                    2d:8d:15:80:e0:f4:ca:04:ed:2f:d9:28:da:f1:0d:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:68:2D:B8:36:89:8A:C3:C0:7D:B8:C7:3E:B7:0D:5E:83:8E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4956f3af-ed31-3aaf-b6de-243fd62edcbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:86:e4:7c:b8:30:2b:05:93:49:e9:8c:8d:46:2f:fd:0d:
         6d:72:f5:73:fb:18:a7:56:c0:06:26:d0:7d:6f:b3:88:2c:1a:
         7e:08:83:ba:aa:8e:b5:3f:d5:8c:fb:a2:6c:f3:56:bb:96:b2:
         52:de:22:93:9d:78:7b:f5:31:f7:5c:2f:e6:dc:99:06:72:1a:
         40:02:05:78:03:47:1b:3d:db:5a:ed:fb:32:2f:1d:64:4d:98:
         f7:a7:fd:dd:b8:0a:d4:30:c2:c0:0b:74:67:3f:67:e6:26:dd:
         f1:f3:8c:ba:82:a2:e4:f3:f2:63:60:54:22:b9:91:6e:0b:d2:
         92:09:60:57:82:21:4e:90:c3:d9:41:12:06:a5:7d:5c:2b:24:
         7f:73:81:3e:5c:42:e9:59:11:dc:65:0f:37:5c:59:b1:60:f1:
         67:a8:af:b6:5b:4a:55:54:f8:9a:59:76:1d:14:50:f5:85:67:
         ec:42:79:76:3f:e7:88:66:54:df:a9:bf:bb:c5:28:2b:27:41:
         3e:1c:c1:10:00:75:93:8f:3f:ad:71:72:6e:5d:20:cc:a0:d8:
         ea:48:82:00:49:2c:07:d8:94:42:de:0a:6e:99:dc:ca:e1:eb:
         de:1a:19:82:4d:e8:70:58:0a:89:1d:34:93:45:ad:53:40:70:
         12:b2:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:03:53 2025 by rpki-client