Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28010d9c-10f8-3f65-9e5e-2c722558caa8.roa
File:                     28010d9c-10f8-3f65-9e5e-2c722558caa8.roa (raw, json)
Hash identifier:          iPml1AcXZ8M/yh/2m6olQQGUJnPdWt/i/PV60HWSXkQ=
Subject key identifier:   59:04:EC:C9:4D:3D:80:56:C8:73:6A:87:DF:8E:AF:6B:F9:BC:FB:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA794B29F631E398709BEA280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28010d9c-10f8-3f65-9e5e-2c722558caa8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18779
IP address blocks:        166.88.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:b2:9f:63:1e:39:87:09:be:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8fbbd3c2-51d9-4483-896a-67a200b99607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:ea:f5:27:b2:be:c7:9e:8e:36:16:f3:8c:
                    cf:b1:af:cc:b1:41:cd:ec:ae:1f:33:34:0d:9d:1d:
                    22:56:7a:c6:c9:a4:62:1d:35:0c:e4:3e:ee:f9:3c:
                    19:65:8c:83:78:39:ed:1a:07:47:fb:50:fa:d8:83:
                    1f:5c:22:c0:f7:a6:ca:d6:73:fc:b8:d4:11:67:1a:
                    83:c2:30:20:84:ca:42:db:40:f0:bb:90:b4:ff:f8:
                    59:24:7d:ad:c4:f8:93:c1:ef:cf:72:85:1a:68:2d:
                    6d:8b:e8:cf:1a:ec:88:0b:7e:40:66:e2:55:61:8c:
                    f8:0e:b9:06:0b:12:19:05:4b:44:4c:bb:37:e4:08:
                    35:84:7b:c5:e6:fa:9d:4e:b5:07:03:f9:19:f9:62:
                    2b:6a:96:d9:35:f3:5d:8b:ce:75:a8:93:54:c6:07:
                    5f:80:a0:01:25:6c:bb:3d:8d:47:57:25:df:16:c9:
                    9d:3a:fe:9d:cb:a0:75:c1:21:df:15:ce:a8:f1:fa:
                    cb:e6:f4:0d:d8:fd:a9:54:93:fd:ca:eb:1f:6e:30:
                    f2:f4:6a:15:b0:96:83:1d:e4:24:a0:06:56:a0:cb:
                    38:a3:42:68:47:27:75:c1:11:90:71:49:d7:3a:74:
                    5e:c8:e4:d0:63:87:36:74:b7:6c:92:c1:0e:30:5b:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:EC:C9:4D:3D:80:56:C8:73:6A:87:DF:8E:AF:6B:F9:BC:FB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28010d9c-10f8-3f65-9e5e-2c722558caa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:be:5a:cb:92:01:7a:1a:59:b6:b2:bb:38:05:50:e7:30:64:
         05:03:d1:24:66:b4:c0:ca:27:c3:cf:fa:b9:95:75:75:7f:d1:
         05:bf:70:9c:4e:26:d7:e4:8b:e8:bc:a0:36:5e:c8:d8:04:f2:
         e5:19:b8:97:5c:13:6a:1d:68:77:76:84:d9:77:f2:9b:aa:20:
         53:82:b5:3f:15:54:13:b5:65:dd:c1:a0:0f:9e:f0:14:70:27:
         be:6b:c3:79:4d:11:d4:99:a0:01:19:fa:6c:3c:72:8e:4c:f1:
         49:11:c1:7a:72:73:68:9d:67:01:42:0f:f5:95:2f:f8:07:79:
         ae:56:41:5a:50:8b:77:a1:07:ee:5b:6d:f5:a8:94:68:fa:ce:
         2e:12:1f:a6:2e:b3:34:b5:57:39:f5:b8:80:44:f5:7b:f6:95:
         e0:12:cf:ff:43:03:a3:8f:c7:de:74:c1:9f:26:17:f2:3d:07:
         36:34:37:62:45:82:d3:7f:6e:4c:2d:0d:44:49:78:5f:fa:24:
         69:8f:dd:5b:9c:2a:48:4a:5e:f7:83:28:37:7e:ae:5b:6e:b4:
         6b:8b:28:a1:c5:7f:ef:e6:3e:d6:3c:03:0e:64:bf:52:75:85:
         d1:6b:44:9d:a3:a8:28:ef:65:d4:ac:f2:40:3a:4d:c6:f2:3a:
         41:a9:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:17:35 2026 by rpki-client