Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa
File:                     9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa (raw, json)
Hash identifier:          jHb6t48gQgTn0vYfBSIoW7kNPqDfz6QvMI61eK9Orso=
Subject key identifier:   4E:AF:59:D0:98:6F:B1:04:4C:AE:3B:7D:B3:07:41:91:9C:69:6E:B6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E64A574EFB63979CF7CCD80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     18779
IP address blocks:        166.88.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a5:74:ef:b6:39:79:cf:7c:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=fa12ce67-654b-4e49-8f92-0d7add5771c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:cd:22:e7:a4:62:4c:18:63:a8:66:70:92:
                    67:31:31:30:5d:d9:d0:21:e5:81:b9:3f:77:d9:ca:
                    88:f9:9a:c1:ca:9e:b3:4c:53:86:07:1e:da:da:ba:
                    c1:83:af:81:4d:1d:13:b5:c2:26:67:bd:8b:92:75:
                    83:ec:3a:1e:48:0c:ce:e9:f9:77:8e:9e:93:12:25:
                    7b:27:59:3d:1f:56:22:0e:4f:7d:5a:af:cc:88:06:
                    f3:ad:45:5c:6e:58:76:82:5f:cf:1c:59:60:85:e0:
                    3f:53:ca:ae:f0:5e:1c:49:ae:16:0c:9c:d1:3f:3f:
                    83:66:36:9e:e0:9a:12:e3:66:b0:4c:35:bf:f1:07:
                    ae:b3:5f:b9:ff:5c:dc:a1:6a:af:93:f3:03:b2:3e:
                    b5:c5:42:e1:8e:d2:f5:d9:89:af:4e:c2:da:51:03:
                    6c:8e:24:ed:b0:3b:dc:69:ee:28:50:5a:5a:cd:a5:
                    56:7c:c4:0b:e4:35:fb:8a:1a:78:b8:da:14:88:87:
                    eb:04:53:ba:7e:69:bf:2d:0c:39:9c:3b:b7:1a:aa:
                    15:7f:d9:5b:58:42:0e:28:47:e9:07:1c:39:e3:75:
                    e1:92:fc:d9:27:e9:7f:6e:20:d3:0e:70:f0:75:34:
                    94:b2:91:6a:28:89:d7:04:0e:08:5b:e7:ac:e9:b2:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AF:59:D0:98:6F:B1:04:4C:AE:3B:7D:B3:07:41:91:9C:69:6E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9931404a-1ec6-39a5-860b-4ab5ced7c14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:58:3c:6a:0e:ea:85:d1:c5:45:e8:20:3e:1b:47:10:bf:89:
         98:08:27:bc:44:ec:14:bc:13:46:a5:a6:4b:39:dd:92:8a:6b:
         2f:df:60:91:45:20:a7:2b:23:66:e0:09:02:a9:d9:53:5a:52:
         dc:e7:1f:bc:35:2d:95:0a:ed:d4:cb:71:d8:64:29:2f:45:28:
         1c:96:fd:74:0b:19:a5:79:ba:46:b1:ef:51:2d:c3:f0:78:82:
         f7:83:4b:27:6b:e8:37:06:50:b9:35:45:e6:17:84:df:2d:60:
         15:ce:34:98:36:bd:ee:d7:45:e4:87:d9:6c:aa:e1:85:4c:ee:
         25:c6:fb:48:d7:e7:31:9c:43:9a:8c:b0:9a:96:62:67:1e:db:
         d0:26:49:c0:8f:a0:aa:87:eb:aa:23:77:6f:72:ad:80:08:2e:
         16:5a:37:a3:c3:02:df:60:15:9f:99:ff:02:30:df:21:e2:82:
         05:74:30:71:b5:5c:0b:d1:25:bf:f9:fa:9f:f3:20:4c:e8:1c:
         9d:a4:81:89:91:6e:01:91:83:69:dc:7c:e5:3d:a3:e3:5f:2f:
         eb:c3:8c:15:a8:b9:00:6f:44:34:57:39:b8:81:66:c0:bf:f9:
         0d:77:a0:7a:a2:0c:4f:25:ef:07:d3:64:77:91:df:3e:61:3d:
         63:9b:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:16 2025 by rpki-client