Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a67f9e43-5d4b-3d8c-9daa-a4ce12891700.roa
File:                     a67f9e43-5d4b-3d8c-9daa-a4ce12891700.roa (raw, json)
Hash identifier:          SV6pmou0dVehEue1h/1y9W042/AGhcj8rQIjgh9x4UQ=
Subject key identifier:   EC:F9:14:FD:4D:7F:70:0D:F1:6E:95:C3:F5:18:F3:1D:0E:B1:86:70
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB6D61ADCEA1D3D3F6C619CC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a67f9e43-5d4b-3d8c-9daa-a4ce12891700.roa
Signing time:             Fri 01 Aug 2025 17:29:17 +0000
ROA not before:           Fri 01 Aug 2025 17:29:17 +0000
ROA not after:            Thu 30 Oct 2025 17:29:17 +0000
asID:                     7385
IP address blocks:        166.88.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:d6:1a:dc:ea:1d:3d:3f:6c:61:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  1 17:29:17 2025 GMT
            Not After : Oct 30 17:29:17 2025 GMT
        Subject: CN=3a0c9fbe-28d1-4cf0-bc0e-ee7abcaf118a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e5:3a:f9:8a:3b:84:16:ec:41:99:7a:cc:6c:
                    8d:d6:69:55:3c:fa:1d:03:2e:af:94:45:02:fd:7a:
                    25:09:fb:65:99:16:ce:16:8f:5f:e3:ee:eb:eb:93:
                    3b:79:a7:59:72:70:c7:6b:43:7e:6c:d2:d4:1c:14:
                    ab:ef:72:39:f5:04:ec:d9:32:19:81:28:e0:18:fe:
                    75:e2:73:17:c1:f5:25:e1:b9:45:87:7d:50:98:25:
                    fe:86:66:73:39:95:72:49:aa:4d:dc:07:ad:8b:d8:
                    d8:50:97:a1:64:37:bd:9d:30:fa:fc:0d:69:06:43:
                    1a:24:34:39:91:6c:f1:9d:9d:ae:f9:26:7c:82:2c:
                    cc:0a:f2:a6:43:7c:01:c2:2a:24:69:3b:18:0a:77:
                    3d:eb:9d:64:99:a0:a8:a6:b6:12:c5:4d:0f:d0:b5:
                    9a:9d:bd:c2:27:03:31:04:88:d3:30:ac:e6:05:3d:
                    0c:6b:06:d2:e0:21:84:e4:42:2e:6c:4e:05:63:ec:
                    9a:54:57:33:27:10:c5:f6:0e:0b:3e:60:9e:6d:63:
                    05:38:e6:0b:51:f2:75:0a:50:51:ad:ed:fe:b3:9c:
                    8f:1d:e0:55:04:01:b0:55:39:b8:33:a1:40:7f:9b:
                    0d:63:bc:8c:7d:03:e1:3e:56:1c:e3:46:60:d1:0b:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:14:FD:4D:7F:70:0D:F1:6E:95:C3:F5:18:F3:1D:0E:B1:86:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a67f9e43-5d4b-3d8c-9daa-a4ce12891700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:93:44:bb:2f:f0:cf:34:57:a2:4a:cd:e6:83:93:70:fc:
         8e:d0:c2:03:e4:35:a3:6e:66:42:ed:0d:4c:38:45:7f:b6:0e:
         ce:76:da:a0:bd:8b:21:f8:b6:08:87:33:4c:70:23:e1:b2:b7:
         a0:34:1c:a7:8e:94:30:50:09:db:45:33:95:2c:dc:f5:62:4d:
         8e:e6:6e:f9:ed:d5:5e:9f:37:4f:07:c1:73:5e:60:a2:a1:98:
         25:a8:78:6d:25:82:93:6a:bb:60:23:71:e9:da:db:3e:3d:ee:
         36:f7:59:98:14:ab:75:aa:8c:74:df:f8:e8:8f:6f:09:b9:f7:
         03:85:8d:0a:3a:bf:0f:06:99:9d:f2:c0:35:20:c5:01:6f:c9:
         37:48:26:46:d2:ae:19:6d:f4:aa:ad:60:5c:e8:2a:d5:b2:3e:
         cd:c1:46:9d:35:78:88:f7:8f:88:3b:65:50:16:ab:67:7b:97:
         42:bf:19:b2:39:a7:07:b9:14:05:a1:2a:ca:da:7e:a3:1f:da:
         a6:61:0d:25:60:0c:9e:0f:9a:3a:37:ee:ad:d4:db:22:9e:84:
         38:22:72:5d:c4:68:db:59:bb:29:0c:58:5f:85:eb:7d:6c:60:
         c7:5c:b9:82:f2:2a:15:ff:cd:e2:90:6f:8d:ff:01:55:d5:82:
         c2:0c:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:30:26 2025 by rpki-client