Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3205c0d1-a8cb-3411-ae13-833e18ab224c.roa
File:                     3205c0d1-a8cb-3411-ae13-833e18ab224c.roa (raw, json)
Hash identifier:          UdaoI/l0/5kh+2C4Bvh/kbxPKq5O8lL5wrRpzU/friM=
Subject key identifier:   34:EC:F7:E6:A0:13:F6:D6:32:B0:7B:69:7D:1D:F7:09:B2:63:F2:A7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD35B220BA4FD6E5241BF2E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3205c0d1-a8cb-3411-ae13-833e18ab224c.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     11404
IP address blocks:        166.88.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:22:0b:a4:fd:6e:52:41:bf:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=55e54a2d-b941-4ebb-aaba-d5ae13965185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:d6:3b:50:dd:7a:7c:f9:f3:90:5d:1f:9e:
                    23:f1:15:4c:43:2f:63:08:a5:0d:68:93:cb:6b:c8:
                    f7:24:ad:c3:c9:aa:da:d1:58:a1:99:64:a2:93:c6:
                    48:2c:19:88:ed:fd:ff:19:dd:40:bd:f2:0c:67:32:
                    ce:f2:96:de:23:4d:7d:62:1a:b8:e8:d2:14:d4:5a:
                    37:f4:06:98:f0:85:89:df:c7:01:c5:f8:ac:7f:d8:
                    aa:05:76:40:3b:1f:14:9e:78:a8:8d:65:fd:48:a0:
                    73:a9:cb:97:cb:f1:7a:46:59:fe:b9:0d:7e:05:8e:
                    d3:4f:10:a3:d3:d4:e5:65:8b:b2:f8:0e:ff:90:7c:
                    ce:d5:1b:c0:be:49:01:6a:73:96:36:33:55:66:6b:
                    6e:e8:d5:2a:94:b0:c4:bb:47:89:d5:86:4e:e1:53:
                    0b:e6:d6:9f:a9:e4:b8:c5:8c:8e:21:11:f6:9d:37:
                    bd:f9:5e:8a:63:5b:d6:37:d2:aa:af:03:97:1a:6e:
                    2d:81:fe:fe:90:1d:56:d4:a2:d6:b8:eb:3c:8b:ed:
                    f0:9e:c3:4d:8a:5e:cf:5f:5f:9b:b2:59:b4:71:a1:
                    72:cc:1c:49:6a:47:b0:42:49:a9:ee:46:c0:24:79:
                    86:48:fd:97:e7:32:2e:83:a9:da:d4:3c:76:46:20:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:F7:E6:A0:13:F6:D6:32:B0:7B:69:7D:1D:F7:09:B2:63:F2:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3205c0d1-a8cb-3411-ae13-833e18ab224c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:bd:18:19:d5:5b:ce:d7:05:75:8b:66:36:de:ff:cc:da:
         01:70:0c:b9:79:b0:e0:96:91:ca:b4:dc:c0:df:c8:79:df:80:
         37:5b:58:e0:ad:fa:b3:59:8c:49:34:01:2c:36:41:4a:0d:b6:
         68:8d:da:0f:41:f3:b8:34:cd:c8:8f:62:c9:02:83:7f:72:c3:
         b4:83:f4:29:35:c7:9c:cf:16:bf:44:3a:33:a6:d9:6d:3d:da:
         df:6f:31:87:ea:d6:9c:46:77:59:71:1f:03:4c:df:e8:5b:f4:
         97:b8:95:df:cd:3a:86:6a:4d:4b:2f:96:ec:33:06:08:e5:54:
         91:0b:1e:43:52:83:73:b3:64:08:eb:e5:97:05:90:e8:c0:78:
         49:be:b5:81:fb:23:5e:c0:0c:7a:6f:4b:82:55:63:64:2f:3c:
         70:8a:29:96:bf:4c:de:55:41:f9:77:65:9d:90:63:9a:8d:f6:
         75:af:bf:21:b1:c1:11:d9:ff:c5:99:48:e1:c2:aa:c1:18:4b:
         f4:ca:62:b8:b4:a5:cf:93:27:73:cd:c8:51:89:50:fc:ac:16:
         e1:6b:36:a6:71:e7:4b:7d:04:4c:a6:91:e5:ee:4e:7a:d5:e5:
         63:55:d5:02:b1:20:e6:ea:58:05:b3:73:f5:e8:0a:be:9d:ca:
         0e:d3:5a:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWyILpP1uUkG/LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk
NTVlNTRhMmQtYjk0MS00ZWJiLWFhYmEtZDVhZTEzOTY1MTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixbWO1Ddenz585BdH54j8RVMQy9jCKUNaJPL
a8j3JK3Dyara0VihmWSik8ZILBmI7f3/Gd1AvfIMZzLO8pbeI019Yhq46NIU1Fo3
9AaY8IWJ38cBxfisf9iqBXZAOx8UnniojWX9SKBzqcuXy/F6Rln+uQ1+BY7TTxCj
09TlZYuy+A7/kHzO1RvAvkkBanOWNjNVZmtu6NUqlLDEu0eJ1YZO4VML5tafqeS4
xYyOIRH2nTe9+V6KY1vWN9KqrwOXGm4tgf7+kB1W1KLWuOs8i+3wnsNNil7PX1+b
slm0caFyzBxJakewQkmp7kbAJHmGSP2X5zIug6na1Dx2RiA6bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTs9+agE/bWMrB7aX0d9wmyY/KnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzIwNWMwZDEtYThjYi0z
NDExLWFlMTMtODMzZTE4YWIyMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplg1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPWvRgZ1VvO1wV1i2Y23v/M2gFwDLl5sOCWkcq03MDfyHnfgDdbWOCt
+rNZjEk0ASw2QUoNtmiN2g9B87g0zciPYskCg39yw7SD9Ck1x5zPFr9EOjOm2W09
2t9vMYfq1pxGd1lxHwNM3+hb9Je4ld/NOoZqTUsvluwzBgjlVJELHkNSg3OzZAjr
5ZcFkOjAeEm+tYH7I17ADHpvS4JVY2QvPHCKKZa/TN5VQfl3ZZ2QY5qN9nWvvyGx
wRHZ/8WZSOHCqsEYS/TKYri0pc+TJ3PNyFGJUPysFuFrNqZx50t9BEymkeXuTnrV
5WNV1QKxIObqWAWzc/XoCr6dyg7TWss=
-----END CERTIFICATE-----
Generated at Thu May 28 17:15:36 2026 by rpki-client