Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c49a85e-786a-3491-b10f-207738175e69.roa
File:                     6c49a85e-786a-3491-b10f-207738175e69.roa (raw, json)
Hash identifier:          2IkW4X4FxIdfH4IXiumQ6X/17QtJE+qX35UbkBcNFvo=
Subject key identifier:   39:6F:52:9F:1A:B1:44:88:05:39:50:B3:20:DA:E8:2F:49:0E:98:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D773A8158A848E74552475580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c49a85e-786a-3491-b10f-207738175e69.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     214238
IP address blocks:        166.88.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:81:58:a8:48:e7:45:52:47:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=9b64c599-ff95-4bd7-9d6c-792e535cbdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:7e:19:4c:77:bb:94:a9:ca:a8:df:e6:7a:
                    c8:a2:4f:fe:3e:f1:3e:6d:5b:7f:b7:84:dc:9a:04:
                    c9:80:a3:1c:50:9e:c4:97:6c:69:dd:df:44:c6:63:
                    b8:24:d2:2a:06:2d:5a:f6:b2:71:28:5f:58:5f:24:
                    c3:4d:0d:15:2d:de:c0:13:00:a7:f5:4a:85:ff:8e:
                    1a:cd:ac:19:e5:81:af:fe:a8:a8:ee:8e:f8:cd:86:
                    ef:37:e6:ff:70:2c:53:cb:a6:92:9f:bf:27:80:0f:
                    ce:e0:51:06:7e:49:47:b6:10:a1:33:57:43:c7:32:
                    56:92:ea:2f:51:ab:3f:da:9c:59:11:ab:ff:da:47:
                    7a:cf:1d:64:80:1b:d0:c5:93:b9:c5:ea:c9:31:bb:
                    61:06:a8:bb:2e:9f:ed:8e:84:d0:77:68:8c:f4:f6:
                    03:84:68:57:b2:2e:77:b3:5a:4c:cd:69:fc:09:39:
                    a6:aa:d0:e1:bb:f3:b3:0e:01:1a:48:68:92:5c:c3:
                    b8:96:44:40:d7:44:62:13:5d:9c:a4:d8:6e:d6:a2:
                    84:72:15:52:be:60:4f:1a:32:b9:9a:bb:0a:44:ed:
                    14:e0:95:ef:87:e7:37:db:8d:ac:e6:e0:a8:74:77:
                    da:ec:e1:ad:10:c4:1c:f2:1a:12:c9:82:d1:dd:c4:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:52:9F:1A:B1:44:88:05:39:50:B3:20:DA:E8:2F:49:0E:98:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c49a85e-786a-3491-b10f-207738175e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:16:af:0b:08:2d:77:2d:15:a8:7a:e0:b1:3d:f4:1b:44:
         2a:4e:d9:b4:3a:a1:a6:8f:b6:17:c0:cb:31:e6:77:a0:a1:8c:
         61:2b:d9:08:2b:c7:19:36:62:a6:3a:20:86:2f:a0:6a:d0:06:
         1d:5b:e9:b6:e3:36:56:a6:fb:00:ff:3e:77:1b:e5:f6:bf:27:
         62:d2:9f:3b:3f:e1:26:71:87:20:fd:d7:67:57:64:d5:38:bf:
         c6:19:51:30:15:d0:83:ff:d1:5e:cb:e7:2b:27:69:2e:48:7a:
         f6:a6:c0:04:71:b4:df:97:b4:3c:fd:a4:b8:67:5b:00:8e:4f:
         5a:9d:5e:d3:b2:05:aa:38:30:ee:a3:f9:b0:10:cf:d6:64:b0:
         76:51:06:0e:96:48:bd:2c:43:6d:7b:4f:56:31:db:bd:99:e4:
         40:7e:f7:94:db:a5:1f:44:71:b5:da:63:a3:bb:dd:0e:65:dd:
         84:5b:79:e6:15:a7:fc:4d:7b:d5:74:fc:5a:e7:a4:38:ab:5d:
         60:a5:0d:a2:36:44:f1:28:a4:6e:f0:97:c3:29:4a:6e:97:02:
         e4:e4:66:cc:ea:5e:77:4b:ce:4d:1d:2c:38:2f:fa:fe:17:58:
         ca:ab:97:c7:a9:56:de:d0:d3:90:d9:68:f7:cf:50:46:45:46:
         9b:94:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:33:06 2026 by rpki-client