Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b17094c4-0df5-349d-a115-4e724266a383.roa
File:                     b17094c4-0df5-349d-a115-4e724266a383.roa (raw, json)
Hash identifier:          HussAzFbVMV2Sz5cKtXIEifKa+1qXDjo1wel6dwj5zE=
Subject key identifier:   BF:B6:CC:33:93:71:32:9E:CC:D7:47:08:AE:08:03:AB:B6:5C:51:38
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584988CF65A481CEB6DF1D9D7700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b17094c4-0df5-349d-a115-4e724266a383.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     149440
IP address blocks:        166.88.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:65:a4:81:ce:b6:df:1d:9d:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=77512080-e224-401e-bf4c-47655e4c87f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:30:78:26:83:4d:b7:c2:c9:72:56:2f:23:
                    a8:7a:1d:a1:8e:8c:15:77:e7:6a:74:c1:f1:f8:ab:
                    ad:39:9f:cf:85:31:e2:6e:27:f8:11:24:b5:4f:c4:
                    cc:5e:c0:da:06:01:d8:4e:96:5c:30:c2:c4:85:b8:
                    dd:f8:33:46:9c:c1:eb:32:4d:9a:19:7a:3b:ff:b0:
                    0c:12:fd:c5:6f:a7:78:ae:b5:ab:c0:f9:4c:7c:e0:
                    34:d6:7a:c5:a4:9a:c2:fc:f3:4d:72:16:47:5b:cc:
                    9f:65:f6:04:50:d7:48:d5:20:e0:1a:46:f6:56:6c:
                    c5:3f:d1:08:1a:38:86:ff:9c:17:d2:75:d1:a6:03:
                    e5:da:1c:f5:4c:a5:3f:04:e9:c6:8b:ec:47:ac:b7:
                    51:eb:ab:41:61:e5:ab:a8:82:a9:03:eb:8b:a5:f1:
                    87:97:c7:a7:a5:85:40:6d:03:88:e6:22:92:c0:15:
                    58:a1:51:0b:52:58:e2:47:f5:3f:c7:8a:8c:61:46:
                    3b:24:ea:71:3c:21:0f:07:ff:cb:cb:58:e2:a9:12:
                    b3:84:31:4d:8d:3a:ca:dc:68:bf:86:d3:3d:38:1d:
                    d4:e8:29:e1:97:d4:c1:4f:b6:c3:66:ff:7f:4e:8f:
                    a7:6c:f4:d8:fd:a1:7c:40:5d:26:15:13:f4:77:34:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:CC:33:93:71:32:9E:CC:D7:47:08:AE:08:03:AB:B6:5C:51:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b17094c4-0df5-349d-a115-4e724266a383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ce:5e:f6:ae:d8:50:f6:bc:5e:38:a2:14:7f:4a:fb:6d:fe:
         30:38:55:3e:68:08:25:85:35:99:3e:01:0a:73:bc:4e:12:23:
         65:63:bc:00:51:33:0b:75:96:e8:4f:ac:78:e9:0a:21:f0:19:
         d1:32:e0:14:ab:c4:19:eb:28:de:43:46:51:08:7e:a7:39:07:
         13:c3:61:0e:da:fd:51:85:20:78:c2:49:bc:e0:70:e8:0b:e4:
         f6:e4:ea:51:3f:9d:90:55:1d:73:b4:92:e6:5e:8b:94:4e:39:
         04:51:be:8b:fa:7f:8e:d8:a7:73:84:0c:16:11:ae:1e:21:ca:
         d4:5b:8a:9b:a6:23:7f:db:b8:d6:25:d2:50:73:2a:64:69:9b:
         ef:c7:af:e0:42:7d:b7:3e:35:75:da:d1:80:e3:de:6b:e2:ee:
         93:c1:4a:0f:b4:32:73:33:de:01:1d:2b:56:7c:bf:13:75:8e:
         85:f8:82:7b:7d:a9:33:a3:92:87:77:0b:72:34:17:e4:fb:f0:
         3d:de:c6:52:38:1c:a2:b7:d4:f9:58:78:e5:79:e6:9f:fe:ff:
         74:2e:99:f4:cc:62:a1:78:b3:91:93:0b:6d:1e:39:39:6b:d3:
         9b:a2:7a:2b:5f:fd:ca:05:50:fc:8a:62:4d:ef:09:9c:1f:61:
         74:a1:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:53 2025 by rpki-client