Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/69c7f39c-135b-3c6b-bd2c-017901817259.roa
File:                     69c7f39c-135b-3c6b-bd2c-017901817259.roa (raw, json)
Hash identifier:          rTcuiegnY9GzcIGBDy6r6MNvJOFBJLTqEQovEwtlpXc=
Subject key identifier:   8A:55:67:07:11:8A:51:47:21:71:BA:C7:F8:4E:B2:05:88:2F:53:88
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B7E2FD7CCCE8CE4CE380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/69c7f39c-135b-3c6b-bd2c-017901817259.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     212238
IP address blocks:        166.88.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b7:e2:fd:7c:cc:e8:ce:4c:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=dfd58c03-2f82-4a13-bb75-9a74cf5f4c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:c8:78:68:fd:72:2a:6e:9f:65:a8:6c:07:
                    b3:5a:ad:f7:b5:7e:27:e9:d7:e2:b9:05:6b:a1:a2:
                    06:e8:b1:a0:74:28:32:a1:3f:b5:ba:52:e7:44:a5:
                    9c:c8:21:95:6f:fe:dd:22:d5:6e:0d:c0:9f:e2:68:
                    38:4d:43:c6:f9:c5:a0:fc:d5:f6:cc:f1:a2:36:06:
                    6c:68:a8:64:07:ec:e6:9f:e1:d3:31:56:bb:a6:2b:
                    e9:e7:80:5a:70:93:71:97:12:a8:50:f0:2a:de:36:
                    48:91:c4:d9:33:7f:48:b2:f5:b2:1b:09:e5:e4:d7:
                    5f:62:15:29:81:54:af:33:8a:1d:b3:d9:e7:fe:5b:
                    08:9b:33:29:fe:9e:22:18:2a:67:08:e7:36:c4:ed:
                    8c:08:9d:4f:45:c8:92:25:ef:4e:cc:79:7f:67:f0:
                    c5:a4:be:e0:83:0a:c3:eb:61:70:6a:21:2c:a4:c3:
                    3d:83:08:40:db:f7:e9:ae:ea:13:74:9e:8c:37:5d:
                    11:a4:23:52:49:23:64:d9:7d:ac:e6:29:4b:ee:bb:
                    3c:db:ec:28:69:42:ae:c9:f6:1a:10:7d:dd:42:3e:
                    81:8f:03:11:62:de:bc:ba:0c:53:21:d3:f4:81:97:
                    c4:4a:d3:4c:10:58:00:1a:2c:8e:28:40:67:69:dd:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:67:07:11:8A:51:47:21:71:BA:C7:F8:4E:B2:05:88:2F:53:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/69c7f39c-135b-3c6b-bd2c-017901817259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:40:cd:b6:6e:14:b8:aa:9d:bc:a9:09:16:21:1f:0b:ff:
         1b:cb:e2:ad:91:fe:d6:a1:3b:2a:42:d0:f7:e1:2f:6c:7f:cd:
         55:2f:b4:5d:ea:29:10:d8:08:86:fe:9b:70:c9:5a:7e:45:74:
         8d:5e:1f:36:dc:16:bf:72:b3:29:27:78:87:25:87:4d:90:fe:
         1c:fc:d0:c8:4d:19:a9:38:66:ee:68:ef:dd:2d:63:8a:b0:88:
         51:54:67:74:8f:b4:31:f4:1b:d6:f3:d0:07:06:89:c3:fa:66:
         8f:1a:3b:9e:71:e1:1e:78:1f:33:87:ff:01:b8:86:a7:a3:7f:
         0b:e4:03:95:b2:5a:72:83:83:66:80:e4:76:b5:83:77:1c:7f:
         7f:a6:7f:49:6e:c2:0a:9d:02:89:6a:63:fb:9f:89:89:1d:3d:
         17:25:74:19:31:f5:dc:61:91:a4:94:4f:6c:03:a1:7f:a7:44:
         d8:92:46:a9:65:be:32:22:7a:86:3c:0e:ee:bf:24:09:b8:3a:
         41:d8:68:3c:a0:c1:50:59:fd:29:35:dd:a3:fa:49:af:2e:ae:
         d3:97:25:4a:51:03:ba:58:eb:d3:b6:d3:47:21:f1:b8:1d:9c:
         7f:a8:97:6e:3e:cb:4c:fb:87:86:06:6f:c7:46:40:63:01:f5:
         42:fd:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:46 2025 by rpki-client