Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0faefaf0-e506-3b16-9859-16377b11e78a.roa
File:                     0faefaf0-e506-3b16-9859-16377b11e78a.roa (raw, json)
Hash identifier:          l7l1S13AM9CJiEeTO4BWCddwtma6+XUfe/KZMI4raLE=
Subject key identifier:   38:56:44:2D:E7:6A:98:52:3A:CF:5C:14:4E:F9:26:C9:B6:0F:2C:98
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E74CF7238DFF8A35C0D959D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0faefaf0-e506-3b16-9859-16377b11e78a.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     11426
IP address blocks:        166.88.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:72:38:df:f8:a3:5c:0d:95:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=7a090644-55e6-463d-bc90-499888e04d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:75:db:8f:8f:21:d4:86:67:c2:3d:09:58:
                    bb:70:90:cf:76:43:19:77:e8:a1:0d:f0:fb:37:86:
                    5c:fb:d8:12:9c:6d:cb:58:a6:22:9d:aa:9f:c6:f2:
                    f5:cb:2d:7a:49:e5:a1:a6:8e:7d:d0:bc:86:7b:70:
                    68:ac:d6:a7:44:1d:65:60:c1:46:05:12:99:f6:38:
                    51:ff:25:41:5c:f5:68:6d:e7:34:bb:a9:5e:15:cb:
                    29:8b:2a:69:7a:40:8f:27:21:51:44:32:c7:46:45:
                    19:04:9e:c2:db:50:57:b4:29:37:31:d0:e9:e2:45:
                    31:a9:69:23:77:6f:43:58:0d:6b:35:31:de:99:22:
                    71:47:f6:f7:9b:72:7a:73:78:97:74:1e:74:c7:fd:
                    92:2e:92:56:5e:c4:14:87:9d:b1:fa:62:68:9f:87:
                    10:98:f5:4a:c9:3a:fa:6f:60:e4:d4:ce:05:4c:3d:
                    05:3b:42:5f:dc:ea:ae:16:f9:9d:96:eb:81:53:d0:
                    b6:c2:d1:f9:f7:21:15:47:b6:71:c8:bd:0d:a8:76:
                    e3:4b:4a:53:3f:a3:8d:bd:16:10:d0:d5:19:3c:d9:
                    50:a4:93:db:63:28:82:b7:d9:c7:c8:c8:be:8b:3f:
                    d3:52:ce:13:e5:60:42:5a:49:28:e6:e2:7a:33:81:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:44:2D:E7:6A:98:52:3A:CF:5C:14:4E:F9:26:C9:B6:0F:2C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0faefaf0-e506-3b16-9859-16377b11e78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:12:f3:44:d0:b8:e4:6b:a0:ab:32:c2:6c:6a:8c:c1:ff:
         0f:10:df:e3:3e:04:b6:a2:a6:31:b9:36:0a:dd:0c:b9:ff:95:
         e9:22:e8:44:a0:8f:1b:26:5b:4b:04:80:81:bd:b0:0a:7b:41:
         c7:26:35:b2:6a:90:bf:f6:24:77:41:f4:9c:e3:ae:fb:ca:a2:
         54:04:33:13:f7:46:1e:43:2b:c1:02:f1:ea:77:e0:a4:39:33:
         b2:0e:7d:fe:11:84:bf:5a:a7:5d:42:9b:67:b5:ae:08:aa:1f:
         bc:bc:2c:af:a4:be:8d:1f:2d:46:34:29:44:40:99:c8:c2:0a:
         3a:7a:3b:ed:d4:db:0e:6f:93:cb:9c:f5:ea:79:b2:3a:8b:53:
         8e:1c:7e:1c:b9:47:b4:a4:93:c0:e6:9e:86:ad:3b:e5:2b:c4:
         bf:e6:0e:bb:03:a8:e4:7e:ac:91:20:34:2c:00:d7:2c:96:b3:
         b0:11:ae:79:13:02:83:62:02:a9:af:59:13:36:d4:c7:c4:a9:
         ca:fb:57:6c:7f:68:a1:fe:b1:b2:88:35:26:ef:8c:5b:be:0c:
         3c:b6:c3:74:6a:2c:9d:7f:dd:91:68:40:39:31:ef:9c:48:46:
         90:5e:62:82:f8:5c:0f:3a:24:3f:d6:13:cc:59:66:2c:fe:eb:
         b5:bd:c0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:26 2026 by rpki-client