Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f02af046-9259-3e6a-9b3f-b5d802ba06e7.roa
File:                     f02af046-9259-3e6a-9b3f-b5d802ba06e7.roa (raw, json)
Hash identifier:          kci/BS7EabxJN6rEgJB4heWWMviRToUWHhOggPg9NIc=
Subject key identifier:   73:8C:B9:1F:0F:FD:CB:4C:34:F6:E8:65:94:E4:D7:3E:04:EE:32:B4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849B4149B1DF48E41EA23441100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f02af046-9259-3e6a-9b3f-b5d802ba06e7.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     400536
IP address blocks:        166.88.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:9b:1d:f4:8e:41:ea:23:44:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=e6085e2b-147d-4861-b2ab-7a255f6d2180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:b4:0b:c1:8a:2b:aa:e2:b4:42:f3:4f:b0:
                    4c:17:21:cd:fa:ba:20:b5:af:ab:55:91:3f:7b:56:
                    fa:9e:28:11:e6:15:13:ee:a5:74:3b:61:19:a9:6a:
                    e9:7a:d8:73:39:49:22:b2:a3:0c:e7:1e:95:75:c0:
                    74:01:f8:f9:1a:2f:9d:59:bd:18:f9:aa:18:a3:f8:
                    33:1e:78:f8:4e:ba:7b:b1:c6:b5:5e:9d:18:45:28:
                    df:2a:53:57:bf:67:5b:4c:55:e9:ae:7b:37:2c:3a:
                    e5:d1:2c:6b:ea:25:64:69:97:cd:c7:8a:36:69:c1:
                    69:81:4e:56:23:cc:c3:0f:9b:cd:6b:13:fa:fa:e8:
                    52:30:ac:88:3f:c3:04:a2:12:72:1a:b2:ce:36:63:
                    38:a7:47:ca:1f:9a:fe:88:92:44:e7:95:e6:1e:06:
                    ad:96:a9:59:d5:93:7b:17:bf:a2:e4:48:31:8f:5e:
                    65:6b:c8:ee:f8:8a:50:f2:cd:ab:79:ff:24:78:51:
                    4f:6d:7f:8b:d3:4e:d6:95:bc:15:03:7a:a1:1a:5e:
                    30:11:e8:78:36:8d:f3:04:4e:29:a7:0d:f7:da:60:
                    99:bc:f5:5f:3b:6f:34:a7:37:1f:fc:9b:84:db:c8:
                    74:16:d8:87:ed:ea:3e:04:7d:61:87:e7:b7:31:93:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8C:B9:1F:0F:FD:CB:4C:34:F6:E8:65:94:E4:D7:3E:04:EE:32:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f02af046-9259-3e6a-9b3f-b5d802ba06e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:53:10:bf:a0:2f:da:e1:08:78:cd:cb:bc:9a:12:8f:5d:
         b0:03:b4:d7:eb:aa:62:05:05:de:f6:89:52:90:cc:61:5d:ce:
         fe:82:43:1c:fe:e6:30:b5:97:4f:9d:21:ad:0f:85:fa:af:cc:
         64:07:d3:e0:f7:d5:f4:37:c9:ea:c3:39:b6:5c:4b:97:6a:86:
         5c:9c:0a:17:88:6b:8d:ba:46:d2:b2:66:97:3c:aa:c6:f3:b4:
         e3:ec:87:56:65:7b:3f:0e:eb:1a:0a:ac:44:06:19:cc:5c:6d:
         be:8d:f3:43:99:bd:2d:5c:71:69:e1:f2:a6:0e:53:d9:19:58:
         cd:b9:cf:52:fd:de:bc:59:b7:56:e1:69:0b:78:0d:8e:24:f2:
         99:cb:f2:46:cb:88:53:e9:54:ff:31:99:98:f5:d5:d2:fd:27:
         c0:a8:c5:24:78:a7:e1:fa:5d:0d:bb:24:79:92:d1:08:30:98:
         4f:02:3f:01:72:f3:69:43:da:d3:27:45:e1:ab:f4:4f:e7:86:
         58:bd:62:90:90:cd:98:33:b9:12:4a:a2:5c:fe:3e:c0:07:69:
         7e:f4:26:e8:13:6f:30:c4:0a:18:ac:d6:17:ec:47:4e:4e:2c:
         c8:94:a6:1c:cc:2d:23:a8:39:9b:a2:9c:fe:f5:b7:48:6c:e1:
         1d:ae:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:50:52 2025 by rpki-client