Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23840fbc-fafb-3505-9306-274d02b8d7e0.roa
File:                     23840fbc-fafb-3505-9306-274d02b8d7e0.roa (raw, json)
Hash identifier:          5rmPYSXwDbSQN/eQQIIUiYgVtfSvi93gjPntcm/1ExI=
Subject key identifier:   A9:AB:AA:96:CC:D9:0D:DC:A2:9F:23:4E:46:C4:A8:E8:42:C0:35:3F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DE9B0BCD4FE8B3628FEDEFB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23840fbc-fafb-3505-9306-274d02b8d7e0.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     213823
IP address blocks:        166.88.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:bc:d4:fe:8b:36:28:fe:de:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=ee1f40b4-2575-4711-8678-079b49aabc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:a6:00:11:3d:88:58:ce:1a:e5:06:f1:88:
                    38:a0:62:84:75:31:9b:b8:1c:7f:56:b3:5d:6e:a6:
                    e7:fb:70:c5:8d:9b:9d:62:45:fa:1d:ad:12:ed:fb:
                    da:7b:51:9c:0f:df:4c:4b:35:29:b9:30:a0:8f:50:
                    b9:25:27:bd:24:9b:16:22:f5:15:d1:25:0a:d7:51:
                    c9:4e:22:3b:b4:05:a9:bb:69:ad:02:01:2b:39:87:
                    3d:57:14:b8:c8:fb:22:49:05:f4:43:1d:45:c3:bc:
                    ba:13:88:b7:5d:e1:9b:b0:db:27:0c:ea:f0:54:de:
                    3c:e0:01:40:7c:e6:56:6c:db:c2:74:2e:2e:ab:b2:
                    6e:9b:49:cd:12:64:66:c3:d9:89:69:fd:ff:65:ba:
                    ec:62:1c:6f:d3:62:a6:05:b8:a7:bf:a6:ff:87:69:
                    26:e0:80:d1:5a:7b:73:a2:df:b3:a5:94:4b:0e:34:
                    f8:dc:92:ae:84:86:05:48:2b:75:59:c3:ca:eb:6f:
                    d5:48:30:e6:38:c4:67:1c:b3:d1:27:6d:06:36:18:
                    14:e7:68:c3:5f:0a:f8:03:e2:d1:1f:f1:6d:e4:b2:
                    bd:08:a1:08:37:2d:73:df:69:0f:2e:fe:9b:b7:ab:
                    ff:8f:38:41:39:c2:65:b3:f8:6b:9d:5e:3d:0a:90:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:AA:96:CC:D9:0D:DC:A2:9F:23:4E:46:C4:A8:E8:42:C0:35:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23840fbc-fafb-3505-9306-274d02b8d7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:28:4f:3d:39:3f:c0:c4:68:ca:21:75:6e:70:49:ac:9d:
         ef:3b:0f:73:f3:50:89:f1:67:0a:d0:5c:6c:05:2d:4f:44:af:
         28:ef:4a:e4:af:73:5e:69:c8:07:8d:55:12:5c:ff:d8:55:a8:
         8a:36:ba:36:e1:6f:73:44:51:03:13:12:f6:97:a8:22:e3:a7:
         89:65:7b:99:1f:a7:f9:ed:55:31:49:2c:d5:29:17:e5:c1:be:
         fc:5f:e0:8f:3a:f5:dc:59:6e:67:2e:73:54:56:73:cb:97:91:
         5a:2b:2c:06:03:1e:c4:38:f2:0b:54:ce:ef:9d:37:9f:37:6c:
         90:ab:39:9e:c0:2c:65:84:58:24:c8:a9:1a:38:73:95:d9:00:
         58:0b:24:58:c8:1f:b5:94:d4:74:ed:d4:30:fe:4e:1e:9d:6a:
         98:5d:bb:4f:2a:c2:aa:22:5f:d2:82:95:cc:1f:01:9c:2c:cb:
         c6:40:ea:1c:cb:f2:bd:ca:f2:db:87:a4:8e:3c:18:c4:da:26:
         11:f4:48:a2:72:60:26:52:2d:1d:a1:77:b2:d3:c1:71:90:e5:
         ff:0e:da:6e:b5:55:02:65:47:f5:d6:31:58:7b:3a:d9:64:4f:
         1a:d4:f9:d6:ef:d0:53:f9:45:43:51:14:36:6d:62:0b:17:dd:
         ca:5d:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:15:58 2026 by rpki-client