Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa
File:                     654a5901-d2ef-3c77-9fec-fb93802aa967.roa (raw, json)
Hash identifier:          bg3nBkoNr5VkBBEnsFJ5lR11+Gux7VpxJPZNG7USIbQ=
Subject key identifier:   DB:C5:C1:36:D9:C2:7D:C8:04:3F:D0:50:19:86:A5:9A:4F:21:EF:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7979AD5867A7C42CD0A9360
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        166.88.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:9a:d5:86:7a:7c:42:cd:0a:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8d811bd4-b032-435b-9579-0fcd6df19170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:7c:b3:a0:55:b7:69:dc:4d:e3:9a:f5:dd:
                    2a:aa:f8:cf:3f:ee:24:ce:31:c5:9f:ad:4f:c1:c5:
                    c0:37:92:72:79:38:56:26:dc:4b:66:02:ae:e1:ce:
                    98:1a:e0:3c:f1:3e:95:69:0a:70:75:56:ca:2e:6c:
                    c7:90:e4:37:58:f4:1b:11:48:50:6f:b5:5a:24:75:
                    8b:07:db:5e:26:40:92:1f:ef:a5:83:08:d1:ab:e0:
                    0d:ea:59:40:86:fd:64:0b:9a:94:5d:fe:62:12:ef:
                    db:b1:3c:5d:dc:a2:e0:10:98:f7:ed:ea:88:dc:85:
                    41:41:2f:2d:f0:ae:41:8d:93:b5:72:5e:4b:4e:11:
                    55:fd:05:92:80:de:f2:2c:c4:86:52:eb:c3:80:58:
                    9b:7b:17:ab:83:a6:c0:e5:ca:b4:f9:d0:c3:a8:5c:
                    9f:ca:8a:6e:0d:c8:85:45:3d:6a:ed:ba:5b:81:8a:
                    de:08:3a:2c:4c:27:44:b4:12:be:23:c3:95:b6:b8:
                    53:13:c9:12:b1:f1:cd:b9:54:6e:2b:a5:13:63:42:
                    8c:ff:69:d9:9e:f0:ce:9c:73:66:a0:b7:bb:8a:6d:
                    ea:09:3a:37:fe:75:68:25:b5:66:ee:46:5e:c5:6b:
                    ac:8a:7f:73:e4:6d:c7:84:0c:0a:4d:9b:0e:25:da:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:C1:36:D9:C2:7D:C8:04:3F:D0:50:19:86:A5:9A:4F:21:EF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:60:26:5b:7e:f2:ce:a0:08:5a:cc:b7:dc:13:cc:ae:63:27:
         f2:67:eb:80:8a:5e:fe:51:82:60:07:da:8b:97:f2:39:24:34:
         af:7b:f9:85:3b:40:b8:5f:4e:b1:9e:2f:28:fe:91:5d:8f:03:
         3d:78:66:0c:73:b0:b0:e2:76:1a:d2:f7:68:13:e7:35:5d:f6:
         6a:41:36:7c:30:78:9f:d3:54:81:1f:52:6c:bb:25:21:62:15:
         82:c2:42:ca:05:35:f1:2d:9e:fe:76:16:14:ce:79:48:d9:0b:
         48:91:33:71:1e:05:72:22:4b:e6:8a:c6:24:b7:d2:62:7f:19:
         dd:bf:b0:34:02:74:0a:93:5e:6b:1d:34:55:34:d2:4f:be:2e:
         a7:35:10:66:0a:b6:ea:96:3f:b3:68:dd:6e:93:f2:83:14:f1:
         14:cc:de:93:a8:07:4b:ae:15:9e:70:49:44:b1:4e:84:ae:fa:
         0f:f0:68:c9:b1:22:24:a2:9e:32:50:14:2b:3e:b3:a7:af:33:
         e9:a7:16:e8:ca:34:22:e4:00:11:f4:7e:ca:b7:b4:7f:d1:9d:
         58:6f:ee:43:3e:f1:e1:98:15:13:21:3e:12:f9:ac:91:2b:fc:
         d6:23:3b:d6:22:1e:e3:c0:3c:13:36:48:46:10:4f:49:56:63:
         8a:df:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:18:18 2026 by rpki-client