Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa
File:                     5ffd159f-4992-32fc-a662-70d42206aa8c.roa (raw, json)
Hash identifier:          L/HpzAm4RupAThEeWx8rkelq5Oc99hXX2S0Jxb8GejU=
Subject key identifier:   B4:3C:62:51:73:85:05:D4:50:37:C3:DC:22:B3:36:F3:E8:22:BA:4C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A497078E411A3ECCD24976300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     149440
IP address blocks:        166.88.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:78:e4:11:a3:ec:cd:24:97:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=9248ca61-8984-4f20-8371-0dd92f0bff44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:d0:ac:e7:70:26:ed:3f:c9:58:ba:fd:6f:
                    98:c6:64:86:83:71:5a:94:44:8e:c7:ed:b3:2a:e4:
                    f2:80:66:34:88:b6:73:ed:8d:f3:24:00:44:c5:77:
                    8b:2f:ab:9f:c0:5d:a4:e4:d3:8e:3e:83:f8:31:f9:
                    51:0e:9e:60:6c:c5:1b:4e:04:3a:37:42:37:5f:12:
                    76:f2:39:87:b0:3c:18:16:6a:b8:16:5e:c5:7b:27:
                    36:b1:72:f7:be:ab:47:40:23:fd:c9:5b:8e:68:40:
                    6f:cd:df:2a:fb:2d:4c:7e:78:ef:c7:fb:36:32:70:
                    91:de:9b:45:6c:44:a6:a3:3d:b9:ad:ab:4e:a4:68:
                    27:06:04:fc:4e:77:2f:82:da:04:8c:c2:9e:2b:a3:
                    2a:a9:0a:45:3f:0e:98:a9:87:9d:a0:f1:f3:4e:57:
                    95:68:ef:1b:93:a3:36:c1:8d:4c:bf:2e:61:00:de:
                    75:5e:15:cd:94:db:93:b3:33:3f:d0:0d:c1:fa:3f:
                    cc:20:31:7c:44:af:42:df:49:d7:e1:26:24:8b:46:
                    56:d9:be:9f:c3:c4:5e:a6:47:38:95:d4:99:ad:12:
                    ed:83:76:0a:09:97:34:ae:88:e3:fc:e6:89:e9:af:
                    8a:89:db:53:30:7c:e8:fa:23:05:d0:b3:97:97:a2:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:62:51:73:85:05:D4:50:37:C3:DC:22:B3:36:F3:E8:22:BA:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:a8:d3:96:39:0b:cf:bb:6b:58:67:94:51:15:f3:94:ef:
         e4:d3:55:70:25:f0:da:d1:2e:38:97:1f:c6:7b:20:65:16:cf:
         2d:f5:1c:1a:bb:4c:ea:da:89:ca:1b:d3:02:1e:19:92:a9:e9:
         47:ed:fb:9d:04:df:d8:b9:08:41:ec:f1:48:7d:6f:80:06:e1:
         c2:99:cc:2c:eb:0b:a3:7e:fd:5e:e7:fd:8e:83:be:93:86:8e:
         e1:2b:5f:f8:e8:07:ef:8d:24:7f:8c:d9:ac:36:61:07:f0:c8:
         ea:45:5d:f0:60:7f:d3:bf:e4:4f:3e:ab:12:2c:2f:6b:03:03:
         f1:75:58:db:30:a5:a4:eb:f8:66:bd:89:1e:22:93:e2:4c:6b:
         ea:2d:08:55:62:93:15:d6:a0:1e:a0:d6:61:8a:a2:3c:3d:77:
         36:54:a9:c1:a8:3a:d1:85:e4:74:bd:e7:6e:b3:4f:9d:47:45:
         4f:39:06:ac:84:0b:79:12:36:71:b1:ab:26:bb:08:c2:64:fd:
         60:43:4f:bc:a4:14:ef:6a:c3:a7:41:15:94:84:5a:20:71:8f:
         74:75:2a:c3:f3:f5:45:e1:69:23:05:6d:63:d6:fb:ae:34:b0:
         a9:be:d9:4f:61:b2:fb:0c:e4:86:32:50:7e:ec:55:32:d0:c9:
         d6:63:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:24:57 2025 by rpki-client