Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/770d8dea-00c2-31c0-8d4e-6d5630084b6f.roa
File:                     770d8dea-00c2-31c0-8d4e-6d5630084b6f.roa (raw, json)
Hash identifier:          6hO125M8MbYfMym3nZF22enApCdczqafWsNFSNqlvWA=
Subject key identifier:   F2:46:32:B3:95:97:B3:D2:88:BF:E8:AD:7D:7B:D9:8D:CC:B0:1E:9C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499294AE9A54CAD1A736B5A700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/770d8dea-00c2-31c0-8d4e-6d5630084b6f.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     209854
IP address blocks:        166.88.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:ae:9a:54:ca:d1:a7:36:b5:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=8c83d554-3084-4ef5-bb91-ab81e0d2bd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:13:bf:2a:1d:f9:b0:33:66:b6:64:22:0f:
                    8f:d5:47:2e:09:e3:98:a4:e5:13:9e:39:b7:f8:cf:
                    45:31:20:c4:e6:71:ec:6e:03:a3:e9:1f:94:8b:ce:
                    8e:ed:26:96:06:e7:2e:ed:eb:bd:65:17:b9:19:46:
                    f6:c4:4d:a8:ab:35:c9:9f:d9:00:b1:bf:59:d7:99:
                    f5:fa:8c:23:65:86:9a:24:9a:15:71:68:af:09:01:
                    53:f3:72:b8:45:68:15:04:fe:67:22:ec:62:a3:f8:
                    90:5e:00:72:f5:c5:6d:73:df:32:8a:c9:4b:43:d9:
                    9c:41:d2:d2:a7:8b:b7:94:4b:70:14:75:c9:f3:cb:
                    01:3b:c9:36:24:e5:27:00:e9:c0:d9:ce:da:c2:9f:
                    44:a7:57:35:27:28:a6:77:de:bc:b2:a5:9e:89:10:
                    66:65:fe:d0:aa:be:77:30:f6:64:bd:70:07:7a:4d:
                    62:e3:64:27:ce:e9:10:e3:16:19:ce:6a:88:2e:b9:
                    53:c4:7b:28:6d:f1:2f:ee:f9:e9:e0:fd:40:de:44:
                    41:f4:d8:35:50:56:74:c4:e3:5e:fa:84:f4:b1:6a:
                    4d:4f:62:cb:b2:db:f1:e7:b3:ef:38:72:d7:94:a0:
                    c0:c6:b9:1e:65:24:4c:ae:7d:20:48:5a:22:e7:d4:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:32:B3:95:97:B3:D2:88:BF:E8:AD:7D:7B:D9:8D:CC:B0:1E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/770d8dea-00c2-31c0-8d4e-6d5630084b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:92:c5:4c:0b:f3:21:ed:89:cd:fa:85:97:fa:d3:c9:95:
         b6:0e:c4:ea:56:a8:18:65:1c:61:4d:9b:85:bd:c5:bb:85:a0:
         8f:79:cb:bb:80:37:90:89:1c:cb:c2:3b:8b:26:93:30:9f:9a:
         0f:e5:e4:78:21:f6:f1:77:19:05:ed:13:8d:dd:33:e0:7d:a6:
         3d:37:5c:33:e7:01:8b:8c:d0:a7:e6:b5:24:9a:b6:3c:c5:28:
         0a:3c:b0:2b:3c:81:f0:20:da:2a:29:73:1c:bb:9e:ff:5c:37:
         18:4f:35:41:fc:13:7f:7a:3d:24:73:9c:cc:78:86:cd:0d:7d:
         3b:08:5a:67:29:fe:98:69:5e:c6:c3:36:c9:ce:c4:2d:03:9c:
         fd:7a:80:e8:77:6e:a9:16:7f:07:47:96:1f:54:05:65:f4:c4:
         b2:f5:bf:b6:a3:a4:e0:fb:10:15:c5:5f:2a:f2:d9:36:42:c6:
         31:6a:c0:ec:d4:7e:e5:ce:2c:3a:51:88:27:b0:27:5c:86:90:
         28:43:96:b6:2e:19:c8:15:e7:cc:ef:c3:51:b8:e2:35:2b:f9:
         f3:32:78:9b:32:a0:26:50:63:f4:38:ed:d5:a2:3d:5e:9e:a9:
         06:db:c4:df:00:53:44:f2:26:9e:5c:f7:a0:9b:28:0e:f4:f0:
         ff:d1:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:13:12 2025 by rpki-client