Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac960f3-379f-3f46-87fc-cac684ed4ff5.roa
File:                     cac960f3-379f-3f46-87fc-cac684ed4ff5.roa (raw, json)
Hash identifier:          FFeYdeUgyqfwqAbuNlnohx3tgoerWnnRs1w6MKJi1wo=
Subject key identifier:   CE:53:20:41:1E:8E:A0:AE:26:0E:8C:60:CC:A3:44:7E:9E:45:86:C6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A55130C0EEE1128496CE44E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac960f3-379f-3f46-87fc-cac684ed4ff5.roa
Signing time:             Fri 27 Jun 2025 17:02:51 +0000
ROA not before:           Fri 27 Jun 2025 17:02:51 +0000
ROA not after:            Thu 25 Sep 2025 17:02:51 +0000
asID:                     7018
IP address blocks:        166.88.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:13:0c:0e:ee:11:28:49:6c:e4:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 27 17:02:51 2025 GMT
            Not After : Sep 25 17:02:51 2025 GMT
        Subject: CN=6858503b-ea75-4929-b382-aea38c1aa5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bb:9f:2f:25:6c:a5:84:bc:33:d7:15:f2:17:
                    17:ab:d1:b6:ef:10:70:f7:99:45:80:74:e1:ad:b7:
                    7e:74:84:1a:15:74:f6:23:72:14:f9:17:a7:79:ed:
                    38:f5:fb:0d:f2:d5:9b:29:76:9c:ec:c6:d5:8a:28:
                    f3:e5:55:6e:f8:e4:cc:ac:ff:cf:95:9e:1a:34:20:
                    55:a6:d1:f4:91:16:83:aa:25:4f:e0:f9:a4:07:24:
                    4b:9f:c6:aa:2d:29:26:36:61:d8:e6:8c:92:03:22:
                    cd:eb:71:3a:12:f6:4d:f3:7d:f2:5d:f7:e4:00:47:
                    cd:54:08:1b:78:e5:18:a5:60:c2:a7:2b:d4:e0:09:
                    59:b5:1b:21:b4:19:da:60:2b:d2:8c:ff:bd:51:d2:
                    8b:3d:8f:b2:17:90:c9:bb:8e:cf:1f:ad:3e:6f:2b:
                    9d:f3:5c:32:cb:be:62:47:10:9e:d8:22:df:85:3d:
                    81:e8:2b:4a:2b:be:ae:33:38:a7:4f:7c:2a:6d:87:
                    61:61:a4:91:db:9e:1e:06:4c:5e:b8:ba:e7:3a:1b:
                    a6:f4:05:82:c9:3f:cf:8b:54:2c:1c:01:05:da:76:
                    20:47:c3:c5:74:47:72:b3:42:a2:c4:14:ad:45:2f:
                    3f:0d:64:f6:1c:53:7e:69:1c:79:a5:18:ac:e3:8f:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:20:41:1E:8E:A0:AE:26:0E:8C:60:CC:A3:44:7E:9E:45:86:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cac960f3-379f-3f46-87fc-cac684ed4ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:a8:a3:2a:b6:39:8d:38:a1:25:fd:74:9d:74:94:7c:1d:
         e3:76:99:95:53:f8:7d:9e:ec:cd:ea:46:e7:db:c6:3e:b6:78:
         d5:de:e8:b8:1e:a9:93:48:bd:c1:e3:a9:d3:be:1c:77:42:96:
         f3:66:23:20:99:39:60:36:45:96:b5:1e:07:3f:60:87:87:4a:
         57:11:e8:f7:44:d8:fb:6b:8c:9e:ba:64:bf:d8:de:bb:95:15:
         62:14:8f:52:8b:1e:df:b8:98:11:32:f9:09:6a:65:a7:6c:5c:
         a4:d8:67:9d:79:3f:cf:a4:ff:a7:1f:f3:1a:af:a1:84:11:b6:
         4f:72:72:92:12:88:f4:ae:11:2d:6d:a2:e0:77:51:a2:07:65:
         3f:30:ae:d9:5d:7e:cb:9d:4d:f9:7e:6f:e3:55:29:78:21:5f:
         51:8d:1a:fb:77:ec:60:8e:52:dc:95:1b:fa:cb:9a:7f:cf:e7:
         bf:b9:99:c5:da:e2:e3:c1:4d:82:a9:29:af:8c:bf:d7:da:b7:
         21:ac:83:06:51:a6:d3:3f:c0:69:e0:d4:a9:d3:cf:e3:97:b8:
         d8:4c:8b:05:d3:b4:f6:f7:23:52:6d:29:63:fa:4a:d8:ee:d0:
         12:40:63:f4:b0:f8:c1:94:a8:fc:5a:49:6f:78:66:08:32:b0:
         f3:b0:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:40:49 2025 by rpki-client