Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb182e0d-8122-3000-bb0f-5a4b3a22c224.roa
File:                     eb182e0d-8122-3000-bb0f-5a4b3a22c224.roa (raw, json)
Hash identifier:          7KfbnR7Sxu/H/d23f/JD8cplOYWPEVfW+U5ilkAwwe4=
Subject key identifier:   C4:29:07:1D:CC:CC:CD:97:4D:E6:0D:8B:19:AD:68:89:D6:69:96:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849B67EF11432BB6585938CE900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb182e0d-8122-3000-bb0f-5a4b3a22c224.roa
Signing time:             Thu 01 May 2025 21:46:43 +0000
ROA not before:           Thu 01 May 2025 21:46:43 +0000
ROA not after:            Wed 30 Jul 2025 21:46:43 +0000
asID:                     401152
IP address blocks:        166.88.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:7e:f1:14:32:bb:65:85:93:8c:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 21:46:43 2025 GMT
            Not After : Jul 30 21:46:43 2025 GMT
        Subject: CN=15cd9c65-e9b8-429c-bab9-0118eb672e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:d9:7f:31:5c:ce:98:a1:0e:ff:ee:9e:99:
                    ea:04:a1:c5:3a:c9:ec:db:7b:8d:f0:18:c3:86:58:
                    4e:32:b1:b2:38:77:05:19:c7:18:e6:31:e0:ac:1d:
                    1e:2f:bb:ab:5f:3b:85:a7:6b:e4:8d:83:10:7b:bb:
                    1b:18:db:e9:7a:ee:27:75:bc:3e:eb:6b:01:d9:28:
                    cc:1d:6b:39:25:a2:14:6a:44:e9:df:b5:64:ee:ce:
                    4f:37:0e:b9:6f:c5:4d:46:76:96:72:49:e4:da:07:
                    eb:a8:fd:31:5c:ff:1c:f8:2e:3e:1d:81:b1:55:ec:
                    15:84:dd:12:c8:60:c5:e2:d9:7d:b0:a9:5e:e6:dd:
                    7b:30:cb:d6:6f:2f:d7:62:a3:aa:2b:80:bd:b8:78:
                    30:50:92:da:78:37:83:58:95:90:d4:ea:1c:ae:31:
                    0f:f0:e9:6d:a2:f0:74:52:e0:9e:3d:a9:5c:ef:99:
                    d6:7c:47:3f:bd:5c:1b:f4:d5:d8:b9:bf:34:da:1a:
                    c2:2a:41:d3:d3:25:1e:d2:8c:96:a1:9d:22:81:8a:
                    f1:61:53:a3:d2:26:66:18:b0:cf:bd:34:08:88:17:
                    cc:b8:61:85:b5:fc:1f:f0:1f:8d:c1:63:5d:59:43:
                    cb:92:a2:91:49:77:9c:11:48:66:29:d6:83:ce:57:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:29:07:1D:CC:CC:CD:97:4D:E6:0D:8B:19:AD:68:89:D6:69:96:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb182e0d-8122-3000-bb0f-5a4b3a22c224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:22:83:b0:8f:e4:d3:e3:0c:98:f3:63:e0:dc:86:2d:af:66:
         76:92:28:f6:78:31:4e:11:07:fd:71:94:ea:9f:14:9a:66:40:
         ab:97:cf:e6:11:20:03:9f:04:7a:31:50:97:de:b6:35:57:88:
         c6:69:6a:df:bc:06:f9:09:7a:13:27:53:ed:9c:b5:c2:7d:4c:
         f0:70:b5:0e:50:cf:a5:17:32:fa:55:8a:61:7d:04:57:f2:a0:
         31:38:d3:a1:77:1a:03:58:5b:31:1e:7b:44:46:4b:41:b0:fb:
         50:ae:fe:49:39:8c:bb:ec:84:7a:78:15:8e:a3:34:9c:ba:23:
         5b:52:81:17:35:84:4d:df:d5:6d:e6:d9:b6:1d:21:93:3a:0c:
         74:6e:dd:41:1b:f0:a6:28:11:60:3e:e7:e6:e7:13:93:2a:1e:
         2f:29:d1:58:c4:5e:75:9c:7a:39:23:77:07:cc:68:6b:06:e7:
         27:18:e7:35:b2:22:20:ba:8a:cc:94:5c:65:52:9d:9b:07:5d:
         f1:7b:c7:eb:1e:19:bc:ea:ca:44:54:1b:ae:09:c2:88:54:32:
         2a:77:90:4c:f7:72:0b:ac:75:ce:ea:43:d6:f7:8b:74:25:9d:
         74:48:d1:cc:4d:4d:91:74:e1:7a:f8:69:44:49:4a:ca:d9:f8:
         36:96:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:19:22 2025 by rpki-client