Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ad036cc-fcfc-3237-9e83-796ede879489.roa
File:                     4ad036cc-fcfc-3237-9e83-796ede879489.roa (raw, json)
Hash identifier:          j0vd2GCggoIAgmxmAKjLHMda9B9TthhIEoAwZ1rjAm4=
Subject key identifier:   12:DC:D8:C0:4A:6E:25:7C:95:6F:66:57:1D:7A:2F:A3:33:7B:87:2B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499C5A151625B846EABD470300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ad036cc-fcfc-3237-9e83-796ede879489.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     26383
IP address blocks:        166.88.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:15:16:25:b8:46:ea:bd:47:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=2bb8aa89-befd-44a3-a71c-226c09f571cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:04:db:ea:c6:dc:bf:cc:1b:81:58:e4:55:
                    79:b8:db:9f:81:c2:8d:ca:64:c6:e3:95:8c:bc:0c:
                    95:c0:e9:f5:dd:cb:bc:d7:ce:7b:c9:dd:36:cd:08:
                    24:6b:df:c5:c3:80:50:b5:30:06:4c:78:5f:ee:e6:
                    d4:f3:c9:ff:b1:3c:e0:23:d9:1e:86:d0:f1:0b:d9:
                    cb:e9:95:36:a5:66:50:7e:81:97:5a:2f:02:b0:74:
                    42:8c:16:c6:92:7e:5c:90:4f:b4:9a:81:49:b8:80:
                    a0:94:1c:76:57:cd:cb:4c:48:da:f0:65:04:0a:a0:
                    b8:23:39:6d:2f:32:f7:50:96:82:f4:00:b5:69:2c:
                    b5:df:2c:11:48:06:07:7a:08:86:e7:96:f8:9c:31:
                    8f:27:24:4a:8d:4c:1f:2a:70:03:59:3a:5b:92:b8:
                    64:62:75:bb:83:97:1f:b2:d6:46:e6:a5:a9:7f:28:
                    b1:12:84:c6:26:68:df:dd:99:3d:9d:de:2b:c3:13:
                    37:1e:d7:76:7d:43:92:ff:c9:50:47:9b:d3:17:d7:
                    7b:9f:d9:b9:50:66:f6:e1:96:bd:51:66:65:1f:51:
                    58:f5:1b:36:17:fb:29:56:13:15:08:42:5b:98:1a:
                    65:06:f3:ec:67:0d:29:9e:c1:b4:57:fe:4f:a9:0b:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DC:D8:C0:4A:6E:25:7C:95:6F:66:57:1D:7A:2F:A3:33:7B:87:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ad036cc-fcfc-3237-9e83-796ede879489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:1c:01:55:2b:5b:58:fe:46:49:fc:24:ce:c3:29:01:fa:
         c7:4e:2f:c5:1a:e7:19:91:59:0e:f5:77:dd:e1:c0:14:56:d6:
         9f:d3:81:c9:68:84:90:55:d0:f0:61:7c:d8:6f:9b:29:6e:27:
         30:0e:ec:e7:d9:48:b5:7f:01:fa:44:62:5e:cf:57:4d:6a:b8:
         0a:4d:ac:ac:d3:54:d5:70:3e:90:ec:08:ea:4f:b0:88:2d:87:
         17:5d:cd:f5:a1:c0:72:34:fe:0d:e1:20:6d:14:12:35:ae:86:
         1d:06:02:16:85:e2:93:48:f8:31:c7:94:61:9f:f7:e1:c6:d7:
         d6:d5:29:03:39:ad:64:a4:39:0b:54:8e:c1:3c:ab:20:b4:ba:
         a2:9e:63:f6:71:e4:8a:e3:e1:50:7d:db:94:cf:34:e8:6e:9b:
         45:16:61:d9:1f:34:72:ed:bb:67:ed:77:34:2c:2a:38:e9:36:
         e9:9e:6f:b0:6f:e1:a1:7e:34:26:85:41:86:05:ef:aa:35:b5:
         46:c3:0a:42:c2:41:7e:c6:40:eb:f0:1b:51:d8:bf:16:17:17:
         20:25:c5:9c:a9:46:3f:1f:b6:c9:bb:73:ce:19:85:40:a1:de:
         88:13:70:78:86:20:1b:95:a9:a5:36:c1:ae:7a:e8:cb:05:f7:
         3e:ae:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:25:12 2025 by rpki-client