Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2484a8a2-0c52-3d75-9527-8720cf6a7e9f.roa
File:                     2484a8a2-0c52-3d75-9527-8720cf6a7e9f.roa (raw, json)
Hash identifier:          Phw7T85o8a0vk/FDGSojDda3LH/MpzpOoLC+/hi7ZR8=
Subject key identifier:   79:AD:72:84:4A:49:71:91:C4:28:E4:93:A7:60:60:29:6A:1E:81:C1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E64A5FE9F48C317BDEC2100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2484a8a2-0c52-3d75-9527-8720cf6a7e9f.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     18779
IP address blocks:        166.88.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a5:fe:9f:48:c3:17:bd:ec:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=46b609c5-cdc0-474d-a8a1-d0aca41de409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:73:38:e6:d2:13:76:ef:3b:91:3c:39:e8:
                    5c:f5:b4:93:19:5d:c6:73:39:dc:7d:93:da:bf:34:
                    fa:f5:b6:82:30:b7:92:bb:b4:64:ce:33:46:71:b1:
                    b2:66:c4:1d:08:b7:bd:6b:1e:10:f7:9d:c0:1e:f3:
                    cd:01:aa:74:52:20:b8:47:15:eb:29:35:bb:54:4d:
                    bf:b6:4b:72:f9:39:0f:54:ba:cd:ff:0b:7e:6e:9f:
                    94:bb:0e:b1:7d:17:5f:48:40:d6:7e:a1:75:86:32:
                    c5:43:14:a8:74:7c:1a:0e:b8:ee:53:04:02:12:1b:
                    34:8f:a9:83:0f:ab:1d:1c:34:a4:2f:ff:07:90:1c:
                    af:c0:53:aa:b0:0c:91:34:44:bc:4e:83:86:da:e4:
                    2a:ab:29:20:05:76:b4:f4:3c:45:f0:c9:b6:69:76:
                    af:85:bb:a2:67:cd:e7:92:99:11:b5:16:c6:0b:ae:
                    47:fd:97:b6:37:ae:f8:92:f0:69:31:11:1b:d7:5c:
                    80:76:cf:6d:e6:a0:81:d1:5e:75:80:57:83:22:2f:
                    3d:bd:ad:71:bb:da:b9:08:e6:41:9d:78:5c:f6:84:
                    64:50:bb:30:5f:2f:44:cc:48:d3:e5:38:25:70:1b:
                    53:ad:ee:3f:53:78:f5:6c:03:00:ec:2e:f2:e5:03:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:72:84:4A:49:71:91:C4:28:E4:93:A7:60:60:29:6A:1E:81:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2484a8a2-0c52-3d75-9527-8720cf6a7e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:14:73:74:2b:fc:89:27:9c:fc:25:08:af:9a:b5:80:c3:57:
         b4:04:ec:63:a0:db:67:b5:0b:ba:54:0d:88:b6:0c:16:6e:01:
         47:4b:79:59:9c:57:1f:41:89:b6:2b:14:94:ca:f4:83:8d:d4:
         30:02:d2:cb:1b:22:79:cf:3d:3e:70:75:5e:5b:47:7e:44:4f:
         bd:4d:30:72:a1:ad:7a:56:4b:7a:ee:4b:05:94:23:39:9a:dd:
         0b:7b:9d:e5:b8:3d:22:9e:fa:67:49:7c:ee:f4:35:70:f4:c2:
         12:1f:a4:e4:7c:16:2c:80:6f:1b:f4:65:84:32:04:e6:21:8f:
         06:ac:09:59:a8:11:c6:d1:d8:db:89:5c:a6:fe:97:0e:8a:4a:
         4f:d9:b1:66:01:74:2e:c8:fc:e6:c0:39:4b:78:86:c7:ac:08:
         49:d2:f3:b0:05:8d:ab:1f:bc:b7:e2:63:8e:2f:ed:dd:eb:be:
         ad:f5:32:7f:de:84:95:63:38:07:77:dd:13:b1:6c:74:bd:6f:
         7b:b5:e8:e5:9d:a9:ec:63:12:ea:97:f1:f8:2f:a0:c4:4e:c5:
         3c:ca:b6:b6:b1:ac:f2:1d:d2:84:9c:8b:8e:48:68:db:52:0f:
         55:6c:9f:c7:c2:4d:90:f0:8d:d9:f0:b4:9f:fa:fe:4e:50:dd:
         6b:8b:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:24 2025 by rpki-client