Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/46550eb3-2e8a-308a-be15-c964d4b7efba.roa
File:                     46550eb3-2e8a-308a-be15-c964d4b7efba.roa (raw, json)
Hash identifier:          qow4+XhVtfTgqs+I77wHdLpjz7OE9m2d1X+GHRrltOE=
Subject key identifier:   9D:C6:B2:F7:8D:42:CB:AE:27:2D:DD:C4:1A:18:F3:F3:C6:6B:B0:06
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E22B9C7DDB26595E94D92
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/46550eb3-2e8a-308a-be15-c964d4b7efba.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     149440
IP address blocks:        166.88.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:22:b9:c7:dd:b2:65:95:e9:4d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=81fd991b-652b-461d-b9cc-6c42b9629c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:26:0a:db:d6:3b:13:85:19:e4:bc:c0:6d:
                    09:fd:66:87:41:90:4b:d0:89:9f:c1:0c:9f:46:25:
                    e2:47:66:81:fe:ba:91:42:40:cc:0c:9b:31:8e:80:
                    b2:38:d0:10:de:2b:ab:ef:dd:9a:4a:a7:6e:01:37:
                    5a:96:99:f1:83:58:74:87:b1:82:29:54:35:9c:b4:
                    05:3e:67:fa:67:51:7a:a3:aa:d1:33:25:d3:fa:7d:
                    71:11:8c:c5:90:bd:81:26:de:40:e8:e7:f5:8f:f3:
                    98:b5:49:f4:9e:89:e0:78:6c:81:9a:2d:9c:55:e6:
                    8a:55:d1:d9:58:01:f9:a1:3c:e4:4b:89:41:63:ac:
                    96:fa:35:59:e7:3f:df:d5:00:73:7d:21:c1:9b:9d:
                    d8:e0:46:4a:ff:58:27:5a:c8:eb:9c:16:18:31:de:
                    b9:ea:59:0c:fe:64:fe:5a:d7:c6:81:bd:07:d4:b0:
                    28:3a:de:e2:b2:f4:5d:47:b3:c8:6d:e2:56:18:b1:
                    98:14:ba:9b:1b:b9:5f:e7:e8:7b:6d:4f:f3:d0:b9:
                    3e:84:dc:6a:e2:21:51:1d:f4:ca:de:a5:12:26:12:
                    a7:78:86:f1:42:0c:be:de:e7:b5:c9:f1:18:51:ab:
                    ed:99:34:74:98:3f:22:42:ca:68:c1:1d:05:f1:1c:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:B2:F7:8D:42:CB:AE:27:2D:DD:C4:1A:18:F3:F3:C6:6B:B0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/46550eb3-2e8a-308a-be15-c964d4b7efba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:17:65:a9:3d:61:93:7f:08:03:b8:92:78:57:04:40:27:27:
         a4:25:a4:fe:3e:05:64:e6:c3:db:4a:e7:28:c9:8c:17:90:58:
         6f:6e:16:8d:81:9d:17:3c:24:23:f5:77:5d:33:b7:61:4a:ff:
         c4:e0:18:0a:c1:8a:0a:1a:d0:f3:73:e2:1e:60:c1:9c:88:88:
         1a:53:ec:16:8d:27:ee:8d:88:a0:fd:15:99:4a:a2:63:24:49:
         48:4b:43:6b:8e:b5:5b:9d:a0:e8:47:6d:9e:ef:42:9b:13:d0:
         45:c9:4b:4e:e4:20:4d:b0:21:11:90:57:a5:0b:b8:54:ec:e4:
         fc:fc:d5:be:b3:36:1c:63:ff:f4:bd:47:43:6e:91:69:f9:d6:
         5c:85:a9:29:74:ec:a5:cf:a8:36:3a:2a:2b:e6:95:48:00:cd:
         72:67:9f:45:bc:0a:56:a0:ed:59:3f:54:b2:23:fe:2a:b7:13:
         78:67:c1:b1:01:1b:97:22:d2:59:93:b4:0b:79:f7:1f:27:a1:
         51:35:73:25:bd:54:0e:af:63:c3:89:c2:7d:5b:6a:11:ea:46:
         49:cc:06:55:39:7f:17:55:ad:51:fb:0f:f5:c1:44:04:fa:24:
         1d:fc:4f:72:19:02:20:bd:9d:7b:93:23:1d:51:f9:21:b9:42:
         93:64:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:38:44 2026 by rpki-client