Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96122443-4f7b-39f8-b084-9c0559afd990.roa
File:                     96122443-4f7b-39f8-b084-9c0559afd990.roa (raw, json)
Hash identifier:          pRtzf4IOyID+fm7/tnvqzHei6fpJ7wsMbXsmYFUtAnw=
Subject key identifier:   FE:AA:D6:FB:64:5F:77:09:E3:F5:36:62:34:2B:04:1C:85:53:9C:49
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A55130C01F32A43AAB97D1A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96122443-4f7b-39f8-b084-9c0559afd990.roa
Signing time:             Fri 27 Jun 2025 17:02:51 +0000
ROA not before:           Fri 27 Jun 2025 17:02:51 +0000
ROA not after:            Thu 25 Sep 2025 17:02:51 +0000
asID:                     7018
IP address blocks:        166.88.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:13:0c:01:f3:2a:43:aa:b9:7d:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 27 17:02:51 2025 GMT
            Not After : Sep 25 17:02:51 2025 GMT
        Subject: CN=c762f2fb-5f7c-4dd9-be9f-a67dfe9a7bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:36:d3:6b:be:65:26:c3:3f:2b:d1:97:1c:
                    6c:60:73:e9:06:5d:74:1c:57:ae:df:28:df:5e:90:
                    93:b4:81:7c:ad:a0:ad:01:fc:bb:00:9b:ef:a8:66:
                    c9:f1:e7:64:78:70:0a:2f:7d:b0:bc:93:6e:45:e3:
                    94:62:c9:97:8d:40:a5:9c:73:f8:32:1e:72:28:bd:
                    2b:5e:4b:f8:f8:fd:dd:8b:63:28:fc:0e:21:4f:ad:
                    82:75:b7:cf:44:54:d0:d7:24:b8:6c:fd:99:d5:8c:
                    06:ea:26:7a:ee:24:d9:b9:5b:1d:a1:dc:fc:a5:59:
                    13:e1:aa:5b:e9:c2:8e:57:07:d5:dd:61:47:a7:64:
                    89:68:e9:7f:07:fa:5b:4d:df:37:8a:c4:ec:07:c3:
                    39:66:86:af:0e:5f:47:0f:b3:e2:9b:87:47:bd:ad:
                    49:e8:61:e5:41:10:5a:fe:08:da:28:d7:53:9f:d7:
                    a0:45:40:30:80:e0:8d:dc:47:4d:62:7f:6d:0c:af:
                    d1:f9:1b:de:31:c8:73:8e:75:86:df:7b:15:c4:c3:
                    72:b6:7d:03:81:91:e7:1d:d6:1f:63:2c:57:56:f2:
                    7e:6b:9a:a8:ba:43:81:9b:5d:77:d4:f5:68:98:76:
                    e2:1c:4c:53:1d:24:25:09:9d:ae:cd:89:a9:c3:d8:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AA:D6:FB:64:5F:77:09:E3:F5:36:62:34:2B:04:1C:85:53:9C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96122443-4f7b-39f8-b084-9c0559afd990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:ad:a1:d7:e3:4b:10:89:bd:95:93:1b:e9:a8:d2:b5:a9:
         84:b2:59:c2:0d:a6:4b:3e:4a:b6:f8:19:09:04:f0:be:c5:19:
         b9:84:2a:cc:2f:73:d0:52:af:45:b9:56:4a:07:43:8d:54:1c:
         73:6d:5b:2f:4c:01:ed:96:b6:11:d5:6b:f2:7a:55:99:2c:57:
         e9:33:5c:bf:0c:22:d5:f0:6c:b7:23:a1:0a:10:53:e6:37:03:
         c7:f4:a1:e1:ab:e8:22:04:72:2e:70:7d:89:19:b9:61:22:6a:
         05:01:e3:e2:85:a7:bb:00:48:96:97:b9:4d:45:d5:16:0e:83:
         c1:08:e4:4b:ee:80:36:18:43:33:bd:fe:44:6c:a0:4c:7f:2b:
         34:16:8d:d8:e5:a5:b0:f9:8f:0b:74:c8:94:7e:90:9b:fc:99:
         4b:9e:74:8a:e1:9f:0e:76:ba:0c:f8:76:2c:e2:77:53:57:48:
         b8:f0:48:19:b4:a6:bd:5b:2e:df:9d:05:65:37:50:18:b6:2a:
         57:42:72:cb:41:47:49:14:64:b1:db:5e:aa:60:03:52:e7:1f:
         df:15:55:42:87:73:35:7d:95:4b:28:53:9a:9e:68:43:cb:95:
         01:68:16:fc:ef:6b:00:9e:98:74:79:4f:c4:af:05:91:fc:dd:
         2a:28:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:55:46 2025 by rpki-client