Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28f0d9e0-1db4-36ef-8763-26f11fede9e4.roa
File:                     28f0d9e0-1db4-36ef-8763-26f11fede9e4.roa (raw, json)
Hash identifier:          9ivhJ9kcpPMKP2Um3cLGX4Y3MbOhGYElJWBJR98IR44=
Subject key identifier:   1C:8D:D9:12:1D:AC:CC:1A:E2:C3:23:DC:6C:A7:0C:53:58:CB:E7:C5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF01CF72773468A9058716840
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28f0d9e0-1db4-36ef-8763-26f11fede9e4.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     397373
IP address blocks:        166.88.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f7:27:73:46:8a:90:58:71:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=6dc42a20-48e6-49e9-904f-e38df213bf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:85:52:ed:2f:e0:9f:67:4a:1f:71:4c:e8:
                    7e:47:54:fd:13:3a:5f:f0:93:00:30:2c:fc:48:38:
                    c8:d3:c3:6d:52:44:cb:39:b6:65:c0:9a:a6:9c:1e:
                    48:7d:69:b0:d0:58:14:64:9a:c3:c8:bf:53:1e:eb:
                    3a:1e:c8:21:42:ff:f1:48:f6:bd:97:cc:3d:91:7f:
                    92:0f:ab:3b:b8:98:b0:0f:78:b8:48:37:0e:7a:45:
                    5d:e3:0d:08:45:b9:a8:f5:a0:fd:f5:f1:af:3b:e3:
                    37:68:e4:23:26:26:36:7c:e1:43:80:1b:d1:d9:7f:
                    6d:d2:5b:63:df:d4:95:bf:03:9a:39:cc:90:82:27:
                    61:b0:8a:6f:1d:07:eb:d1:ab:b5:a4:4e:3d:23:a7:
                    1a:60:2b:5a:70:e5:6f:ae:06:4f:ad:05:f1:3c:56:
                    a8:b1:a2:51:8f:38:ca:97:64:bd:85:18:7e:4c:36:
                    1d:b9:41:98:f3:2a:e0:3e:58:1c:0f:2c:9e:67:4f:
                    72:2a:b5:08:8f:88:89:a5:4f:e6:cd:a6:59:3e:5c:
                    68:fc:41:48:0c:3e:a7:94:11:8a:c6:79:14:9c:22:
                    3b:70:c2:ea:d9:76:45:13:4e:be:94:89:e7:ef:03:
                    fa:1b:1f:c4:4f:42:60:e9:df:33:69:8c:b0:a4:26:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8D:D9:12:1D:AC:CC:1A:E2:C3:23:DC:6C:A7:0C:53:58:CB:E7:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28f0d9e0-1db4-36ef-8763-26f11fede9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:01:86:a9:40:99:9f:5a:53:27:74:f0:c7:8d:21:2c:82:c9:
         44:b1:8b:66:f1:c8:6f:39:d5:e0:e4:2b:32:96:26:0c:a7:04:
         41:b9:c4:33:57:9c:03:9e:35:68:2e:08:ba:d0:cf:1d:85:44:
         26:0a:8c:54:cf:ae:5e:72:fe:84:4a:b1:75:42:51:89:30:d2:
         4f:08:5e:e3:1c:7f:00:c5:79:12:3b:a0:65:12:73:55:fe:99:
         c2:0b:84:cb:29:49:99:18:7f:c9:ca:4a:76:b2:1c:b9:83:47:
         34:36:62:6c:77:2a:a7:eb:77:55:ba:e3:b5:46:0a:79:4a:be:
         d2:9a:41:3b:be:82:0b:a2:ec:78:08:4c:54:91:b7:97:0a:ef:
         98:6b:c9:5c:06:f9:38:b5:a3:73:61:08:09:4d:50:99:0f:cd:
         61:f6:7e:33:a0:90:aa:a2:f5:60:d8:e4:08:b2:35:dc:ac:e4:
         95:f9:e6:54:51:89:b6:aa:c1:93:17:73:50:24:aa:9a:bc:4d:
         71:f1:01:95:17:f2:0d:9a:42:8e:4e:d3:1e:e3:b4:1d:92:17:
         ff:47:38:95:84:a7:ff:ff:95:dc:f6:41:cd:5c:58:5a:1f:03:
         cc:91:0b:2f:74:69:d4:f8:28:7b:ad:27:74:4e:32:d5:b4:e6:
         e4:a2:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:20:15 2026 by rpki-client