Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c888def4-71ec-3afe-8827-7c72fe62d03a.roa
File:                     c888def4-71ec-3afe-8827-7c72fe62d03a.roa (raw, json)
Hash identifier:          klgI/VufK15+OrU4OLrNKieInqp+AxMvYMjs/WxG/z0=
Subject key identifier:   A9:50:74:4A:8B:D6:2F:47:DF:81:6F:D1:64:C0:93:6F:D3:53:E6:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5B95A9DE2BE4CA159E1470F0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c888def4-71ec-3afe-8827-7c72fe62d03a.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     36829
IP address blocks:        166.88.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:a9:de:2b:e4:ca:15:9e:14:70:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=b71416ca-7720-4638-b68f-1e19e6961b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:eb:b2:f4:1a:4a:fc:6c:1e:d8:a1:14:d6:
                    25:7c:ed:a9:ef:89:10:d8:a0:85:a8:c7:be:3c:6e:
                    0c:04:65:4c:35:34:04:d2:13:98:dc:24:e6:f4:0b:
                    99:92:f9:6d:3d:a2:35:9b:97:35:6d:52:fe:0a:b7:
                    34:5e:cd:72:ea:5e:c4:c9:8d:eb:1f:e4:8d:53:81:
                    07:75:86:62:18:47:ff:54:08:fa:ff:e8:4f:3c:b5:
                    55:b7:e8:39:06:9f:54:14:76:5d:f0:88:04:d6:1d:
                    ce:e0:4c:1e:1c:2a:8d:20:83:98:1a:a8:e4:19:77:
                    77:75:b0:8f:31:40:e1:ca:87:98:79:55:a8:f7:51:
                    a2:88:2b:d8:05:ed:18:7f:ad:09:1f:79:67:f5:46:
                    9c:62:fe:f9:20:7d:8d:16:0b:d4:33:0b:f8:ec:4b:
                    c4:ab:31:2b:c3:43:53:ba:92:b7:b3:08:f9:65:7b:
                    55:5b:84:ab:6e:f9:c4:7d:2d:d7:af:a6:82:db:03:
                    3e:ea:b9:e9:ca:90:8b:4f:c3:25:aa:83:8c:2d:48:
                    dd:5c:57:22:6b:3e:d1:e1:a7:0d:50:38:b4:45:e0:
                    8b:da:e1:2f:79:06:f2:30:14:0e:85:fb:6a:79:5d:
                    be:6e:a9:fa:6a:b2:30:2b:20:5a:2c:3a:0e:69:09:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:50:74:4A:8B:D6:2F:47:DF:81:6F:D1:64:C0:93:6F:D3:53:E6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c888def4-71ec-3afe-8827-7c72fe62d03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:04:5c:af:b1:bf:4d:41:dd:35:1f:2f:6c:26:9f:48:c0:ed:
         03:40:1d:38:d7:c8:b8:83:07:22:cc:cd:26:9f:79:9f:0e:89:
         74:77:6d:23:f7:e9:82:bf:f4:9a:d5:66:1b:32:79:01:15:c1:
         f7:fb:93:f2:13:82:28:ff:8b:6f:16:9b:20:93:17:cf:38:f2:
         9f:a4:43:18:9d:a3:6d:5c:eb:a7:cf:86:a3:2b:fd:ad:4f:04:
         47:93:d1:55:00:2f:bd:50:45:98:31:3b:d0:a2:4f:56:e6:f0:
         cb:62:bf:6c:8e:2a:95:ca:6c:ab:1d:87:99:23:3d:01:05:2d:
         a4:5f:4b:c1:f7:ee:96:ad:35:89:d8:47:5d:ca:02:fb:ba:2b:
         ca:38:bc:ab:68:74:1e:16:5a:e8:5b:b3:2e:24:b0:ea:a0:2e:
         72:0c:70:20:33:bc:9c:0a:a6:a7:8d:fa:d7:d6:f9:a8:05:f7:
         e4:bc:4a:6f:94:8b:1c:09:ae:50:2b:50:3e:d6:2f:7c:ed:db:
         a1:33:5e:48:f7:95:e7:44:43:3a:2d:8d:cc:ed:cb:bc:58:3b:
         ec:75:02:52:52:2d:51:b0:cc:20:9b:75:60:4a:bb:8f:bd:16:
         42:38:ff:b9:8d:eb:9d:41:78:50:a8:46:c4:1b:b6:48:a0:e1:
         42:17:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:35:50 2025 by rpki-client