Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f85a5c3-7f4f-356f-a04e-944a3951203c.roa
File:                     5f85a5c3-7f4f-356f-a04e-944a3951203c.roa (raw, json)
Hash identifier:          mfTvYMFeHJX7NeejNxsDin9qyi/AkhV1uQtydC2n+CU=
Subject key identifier:   78:52:D4:6F:32:6A:E0:B1:FD:30:FA:79:D9:C8:C1:8F:C7:1E:54:35
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B6797FE4C140A9F6ABAFCA520
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f85a5c3-7f4f-356f-a04e-944a3951203c.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        166.88.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:fe:4c:14:0a:9f:6a:ba:fc:a5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=be57c305-080d-4692-ba58-93c06f76d217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:97:fb:cc:69:f5:c8:88:a3:2e:e0:9c:df:
                    9f:3b:d8:26:9c:0d:37:cf:42:5f:ca:ab:c9:00:d7:
                    06:dd:29:bf:f8:fc:ac:b2:0e:6b:38:80:53:22:3c:
                    87:95:7d:f2:93:9d:17:fa:c8:7f:f7:22:64:f9:f6:
                    04:2f:1b:34:26:6c:c6:c5:8b:ac:b3:04:60:15:f2:
                    a5:2a:2c:21:3c:77:a0:55:be:87:62:46:c0:ba:f9:
                    17:60:68:7f:23:51:d1:46:c1:a4:1b:8a:3e:e6:a4:
                    c6:ed:65:ed:c2:7c:d7:57:b4:58:85:71:ec:c0:48:
                    b6:60:b1:79:5b:e4:ba:a6:ab:64:7a:17:30:7d:52:
                    59:b5:36:11:81:d9:3d:79:b0:54:ea:f8:bf:f7:36:
                    ef:bc:42:56:32:95:f6:20:63:9d:40:e1:7d:04:0e:
                    a8:45:6f:b2:e6:ad:5f:c4:ae:5d:46:84:21:e0:2c:
                    e6:f9:76:78:02:a4:57:64:fe:35:7b:3b:92:23:ff:
                    15:e6:39:96:09:7c:1e:1d:df:fa:2a:55:3c:0c:16:
                    9e:ed:73:ef:42:df:7f:de:dc:48:96:6d:3e:c4:42:
                    71:91:1b:61:b5:de:88:06:43:52:9f:26:d3:b6:2f:
                    43:bf:c6:2b:13:0d:ce:79:7c:50:b6:2a:bb:4f:e4:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:D4:6F:32:6A:E0:B1:FD:30:FA:79:D9:C8:C1:8F:C7:1E:54:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f85a5c3-7f4f-356f-a04e-944a3951203c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:24:c2:b7:c9:f8:4a:2e:66:f8:f0:b0:14:28:57:c9:67:5d:
         15:0e:4a:4f:0b:1c:f0:a0:18:0a:91:57:e9:74:ba:31:da:be:
         d0:50:73:ea:f5:38:e0:1d:34:f4:5b:97:d9:e8:7a:e1:2b:3d:
         59:63:58:bf:93:a4:2e:eb:75:bc:9c:97:54:bd:a0:26:5f:7f:
         aa:59:2a:7a:8b:4b:cc:9a:f9:d6:8f:52:79:52:62:19:a1:72:
         47:51:5a:bc:a1:5e:f9:69:b5:20:51:04:0a:9b:07:cb:7d:7a:
         34:b8:73:1a:ff:e4:5a:c4:69:25:4a:50:d7:f2:e3:15:eb:aa:
         be:bb:ac:59:8f:da:a2:13:72:37:6e:c1:73:7b:f0:59:fc:32:
         44:e8:66:23:d5:20:2e:63:4b:db:4b:40:8f:fd:f2:57:a9:fa:
         44:23:99:ac:e6:9b:a0:58:0e:ae:09:e7:33:6e:9e:94:27:fa:
         6b:ef:5d:de:ef:90:24:4f:e9:80:c4:a0:24:fb:27:e1:78:4c:
         36:8d:53:63:2a:87:86:1c:5a:0b:f2:db:78:72:57:7e:d4:57:
         9b:de:d8:f5:fb:37:07:23:b7:4a:3d:dd:3d:26:97:64:48:55:
         c5:ca:3d:24:c7:1a:c3:bb:04:c0:a1:50:6e:80:0a:b8:46:c7:
         c9:50:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:04 2025 by rpki-client