Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/40f79698-7811-3a30-9947-0986bf9e1784.roa
File:                     40f79698-7811-3a30-9947-0986bf9e1784.roa (raw, json)
Hash identifier:          NluOToKv31rjuGKCzwkuaCoIcK4IqA7GxLRcQyt2EVc=
Subject key identifier:   68:E5:95:FC:00:48:9A:9C:C2:4E:4C:D1:54:B9:61:CA:FF:E2:AC:83
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AC5AB891459E027FB001BCDC0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/40f79698-7811-3a30-9947-0986bf9e1784.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     53667
IP address blocks:        167.88.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:89:14:59:e0:27:fb:00:1b:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=7c1cf8a3-d19c-4f95-9b8f-bbbc9c708702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:80:34:eb:e0:cc:73:0f:9d:22:81:ac:80:
                    1f:97:04:27:7f:da:b6:e6:fc:5f:fa:91:96:77:8b:
                    ed:3b:13:fd:70:0a:37:f1:78:af:db:de:7e:52:0f:
                    42:23:19:1c:1f:10:52:88:c5:29:46:13:86:e2:6d:
                    c0:dd:ad:0d:4d:d8:86:7e:90:20:67:e6:f2:d2:20:
                    7a:1a:0b:d4:5e:7e:ae:34:2d:6a:01:72:f2:d9:50:
                    dc:e8:75:74:61:fb:18:dc:40:aa:1b:ef:03:fa:20:
                    d1:05:eb:74:ed:58:f8:21:aa:3e:c4:47:3f:9b:a3:
                    f6:98:89:64:53:4f:68:f2:62:26:88:5f:55:cf:1b:
                    f2:7e:9b:35:64:2d:f3:4f:75:61:35:7c:48:42:b1:
                    51:3b:6d:27:9a:b3:3f:c4:02:02:de:ba:83:d4:5c:
                    cd:53:8e:ba:14:26:ba:31:2a:e0:22:87:b5:61:02:
                    98:29:99:a6:40:f5:7c:ba:61:8b:b8:1c:b2:44:dc:
                    32:fc:f0:03:db:7f:ac:56:d4:10:91:96:0b:63:88:
                    b7:36:be:64:ea:7c:f0:31:e4:80:1f:86:e1:62:d6:
                    88:bc:ce:8f:43:ac:b4:f3:e3:a1:22:88:94:59:bd:
                    44:50:27:52:55:69:3e:41:50:23:00:e1:9d:e2:b2:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:95:FC:00:48:9A:9C:C2:4E:4C:D1:54:B9:61:CA:FF:E2:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/40f79698-7811-3a30-9947-0986bf9e1784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:e9:60:da:ef:3a:b3:e0:57:99:ed:32:c1:d8:83:e9:95:
         41:57:f5:be:a0:2c:57:06:73:de:c9:36:43:e0:96:e9:4d:87:
         0c:4a:12:a4:9d:46:6f:9a:0a:51:ea:ff:8a:b4:7e:d8:a1:14:
         d2:95:9e:84:18:69:a4:22:1b:ab:ab:19:fb:6b:89:8a:df:c8:
         8f:c9:03:53:48:a1:58:16:f3:26:92:84:25:cf:33:9a:5a:90:
         ac:91:64:24:a0:48:db:81:8e:cd:e4:56:e3:0e:29:61:a9:7d:
         4c:fe:5b:61:fa:22:2d:08:4b:16:58:23:ba:71:09:48:12:b2:
         c4:3e:5d:98:1c:12:af:19:cc:67:dc:92:cb:8d:f5:7f:8b:3f:
         db:fa:af:7b:73:86:15:2a:fe:23:29:cc:ec:e4:a7:4e:1a:5a:
         34:30:33:23:8d:9a:af:fc:de:9d:c7:91:27:57:0a:46:46:18:
         88:80:80:39:ad:25:26:6a:cb:e6:c3:52:6f:8b:fc:c2:58:12:
         47:d3:44:68:01:af:1f:1a:49:52:b4:67:b6:cb:b3:91:9c:b7:
         2f:9d:a2:ad:a7:ee:f4:60:7e:3c:51:5a:08:7c:20:35:94:4a:
         53:62:57:47:c5:c9:e7:14:f8:c4:e1:4d:22:bb:ee:cf:9d:d6:
         4f:ac:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:07 2025 by rpki-client