Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa
File:                     06b1c120-81f7-34d6-8061-d254c264df23.roa (raw, json)
Hash identifier:          K3Gzr28r5SvbPJiL1AvFcuwfO5LEmW6ipysVq9MhDQU=
Subject key identifier:   8C:92:68:B5:6B:27:CC:62:53:22:07:D0:54:12:6B:AA:80:36:7C:3C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849DB2A31D0D489933F53206B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     134351
IP address blocks:        166.88.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:31:d0:d4:89:93:3f:53:20:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=6158676c-c4ef-41e4-9ad4-b46506cbc979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:54:a9:55:0d:04:61:e6:b9:a6:49:03:59:
                    3d:95:1e:1a:cf:95:fd:2e:50:8c:05:3e:36:14:8b:
                    2d:bc:7a:51:b2:d0:62:79:7d:d0:1e:22:f5:7a:ef:
                    e8:b0:ad:ab:b4:13:dd:b4:98:f3:17:8a:71:b9:a8:
                    ce:fe:05:dc:f0:0d:a4:88:aa:03:a8:6d:93:0d:45:
                    3c:c7:b0:ca:fa:4d:0f:92:2b:fc:e6:6c:6d:d7:82:
                    c0:aa:32:75:e3:6e:8d:b0:a3:e9:5b:3d:3d:4a:09:
                    98:03:f8:b6:20:17:e6:ab:ac:38:57:ec:34:86:5d:
                    e3:01:10:f5:b9:5e:3c:16:23:0b:de:f2:ee:68:5e:
                    d0:ab:02:5f:5a:c9:1d:e3:e6:07:cf:54:5d:06:d6:
                    36:35:cf:3b:1a:a5:ff:a7:e3:56:41:7a:28:15:a8:
                    9c:57:c8:1f:00:a6:64:ff:ea:6b:da:20:a7:fa:13:
                    30:9a:92:46:07:2b:10:41:85:92:23:13:9f:f9:5b:
                    e1:16:11:f3:e7:d6:3c:0b:6e:c7:a6:18:07:3a:7f:
                    f3:81:81:00:99:6c:74:66:86:9e:6d:eb:03:b4:a2:
                    20:24:eb:ae:d8:ec:33:bd:d3:59:2e:64:fb:3b:6c:
                    09:da:cc:2a:05:2a:13:c7:3a:67:ac:fb:ca:e5:31:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:92:68:B5:6B:27:CC:62:53:22:07:D0:54:12:6B:AA:80:36:7C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/06b1c120-81f7-34d6-8061-d254c264df23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:cc:c6:7a:ed:17:11:3e:d6:ff:6d:a9:fa:e0:61:e0:31:
         c2:71:01:06:f3:1f:33:62:9c:da:c1:30:6d:0c:73:38:14:55:
         c2:a1:5b:c4:e0:96:bf:ea:e7:3c:4d:53:17:04:4a:04:56:13:
         be:73:87:af:ce:42:be:b9:82:56:c8:ae:f9:98:16:9b:d1:00:
         82:46:6a:8e:74:11:25:90:b9:d6:52:c8:28:b6:3e:ee:0a:dd:
         46:a1:d5:83:fe:e5:43:7d:7d:11:3f:d2:0f:72:4d:13:22:46:
         ec:c3:67:f7:25:1d:b7:47:ca:82:4c:48:4e:b2:4b:4c:de:74:
         a9:61:6e:b8:79:02:15:3b:a3:29:ed:04:96:af:5d:2c:ac:28:
         dd:07:4b:76:f1:be:87:66:16:fc:c4:16:04:70:0c:5b:81:ea:
         c3:f8:2b:ea:a5:18:97:81:d9:0b:3b:53:34:4e:10:6f:93:3b:
         8e:d9:05:1b:3a:ec:9c:9e:e1:ee:17:b4:38:ce:09:06:ff:54:
         b2:47:50:10:d5:5f:1d:ab:87:90:f9:1f:17:80:af:6f:48:29:
         0c:f6:f0:1c:22:5c:ab:ad:fc:b2:e9:53:3e:7f:fc:c2:03:11:
         72:c7:fb:bf:6d:8b:f2:22:7d:32:2b:bb:a6:89:7a:89:73:fe:
         a2:b3:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:11:58 2025 by rpki-client