Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5767a25b-5a4c-3469-8b65-0d22fc97d55b.roa
File:                     5767a25b-5a4c-3469-8b65-0d22fc97d55b.roa (raw, json)
Hash identifier:          dVv5jqxLp3CZylqPBEtNsMzIXBl4AQBO3eePPyW+s38=
Subject key identifier:   1C:F8:6E:7C:55:55:25:BF:70:86:CE:ED:D2:71:53:25:2B:9C:7E:FC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6ECECA041302CE104240D400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5767a25b-5a4c-3469-8b65-0d22fc97d55b.roa
Signing time:             Wed 08 Jul 2026 17:24:05 +0000
ROA not before:           Wed 08 Jul 2026 17:24:05 +0000
ROA not after:            Tue 06 Oct 2026 17:24:05 +0000
asID:                     401152
IP address blocks:        166.88.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:ca:04:13:02:ce:10:42:40:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 17:24:05 2026 GMT
            Not After : Oct  6 17:24:05 2026 GMT
        Subject: CN=e00f8b79-f885-41f4-9ea7-a3cebb89b378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:78:6b:b5:43:9d:8d:17:19:d7:04:ca:93:
                    b1:bc:99:3b:d3:05:e2:af:6a:de:86:7e:87:c6:85:
                    2c:8d:a8:27:72:60:ed:a2:66:88:7d:b3:6c:28:df:
                    00:ae:c1:77:e2:94:7f:0d:c4:86:4f:57:a7:87:bf:
                    aa:c1:8d:8b:40:31:e8:23:7a:90:62:0b:a7:32:47:
                    3e:d9:51:85:d2:23:64:4a:7b:71:b1:27:69:77:6f:
                    38:88:98:5d:fb:66:ec:a1:bd:7f:33:51:5c:4c:73:
                    3f:49:71:c2:82:b1:78:95:b1:35:19:ce:dd:5a:14:
                    05:a6:6f:41:07:4e:35:c2:8b:f2:fd:13:b9:52:5a:
                    b5:5e:d3:5c:a7:70:ec:b7:fe:cf:ea:b0:2e:73:5a:
                    68:fe:2f:ee:76:ca:6a:54:a1:ea:0f:81:06:69:1c:
                    e4:83:89:80:db:85:ec:17:eb:31:84:2f:eb:08:03:
                    cc:18:f4:e6:92:04:76:49:5f:6d:94:e2:a1:d5:2c:
                    c7:26:94:52:37:86:12:3b:10:04:e9:27:d8:6f:18:
                    ff:df:6b:1f:d8:6c:71:dc:11:2f:c5:7f:64:21:37:
                    bf:8d:c2:a1:6d:9a:10:5d:47:66:50:8b:fd:04:a0:
                    4c:e6:b7:06:a8:82:ab:92:9f:ef:c6:9f:b2:b4:3e:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F8:6E:7C:55:55:25:BF:70:86:CE:ED:D2:71:53:25:2B:9C:7E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5767a25b-5a4c-3469-8b65-0d22fc97d55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:6d:27:74:32:0d:1d:b6:d4:b8:e4:de:0c:a4:13:65:0d:
         46:df:78:5f:23:94:67:ae:96:73:f1:75:79:c2:bf:01:b6:81:
         81:0d:b4:2c:46:ce:64:d8:5a:db:d0:53:70:9a:83:49:39:eb:
         d0:27:f9:f0:55:de:9f:72:ae:45:3d:69:30:f6:11:74:2b:ec:
         93:b2:40:34:2d:78:6f:37:c8:db:36:9f:ea:24:21:74:3a:43:
         67:79:d1:10:0b:73:10:7e:41:99:a9:21:9a:5a:f1:db:8e:a2:
         81:14:0e:c5:d5:4b:f2:69:40:7f:8e:68:f4:fb:75:4c:4b:48:
         4b:38:2a:ce:67:95:b0:ba:46:d3:11:22:61:0b:58:d3:3f:05:
         1a:cf:5d:cc:df:da:67:83:7c:71:88:64:44:ae:53:4e:de:ed:
         a2:ec:db:11:f8:f5:f1:cd:cc:35:81:3b:c6:9c:39:f7:e1:6a:
         45:fb:3f:70:3c:ef:ff:ba:79:47:f3:fe:ae:02:24:79:e2:5b:
         67:4a:35:6e:f7:1a:00:08:f0:89:a3:92:ea:cd:ec:1e:a7:05:
         ae:d9:9f:7b:6b:5b:6c:27:2c:55:2a:c5:6d:40:c6:12:11:8d:
         59:fa:b6:15:06:97:2e:eb:83:11:bc:1e:9c:41:5b:ec:9d:59:
         c4:87:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:03 2026 by rpki-client