Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c9e10f1-78f9-3e44-bce2-4f05516c821f.roa
File:                     7c9e10f1-78f9-3e44-bce2-4f05516c821f.roa (raw, json)
Hash identifier:          gmM46x0nyJowoebCVU8l8UVaswvckMfqaFPSnYw2XIk=
Subject key identifier:   53:4A:09:83:25:DE:5B:C3:92:2B:7C:31:80:69:B1:FA:28:FF:E5:B0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7979D4C914F2CFDB7C84400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c9e10f1-78f9-3e44-bce2-4f05516c821f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        166.88.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:9d:4c:91:4f:2c:fd:b7:c8:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bb1106a-0751-4f54-9bb4-533d7eb42f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:2f:6f:1d:56:60:58:25:c0:38:76:e4:96:
                    fc:36:a3:bd:51:ba:18:e3:3c:04:72:02:aa:94:5d:
                    28:11:2f:a5:6e:53:c0:07:17:89:56:87:d0:f8:70:
                    30:b8:93:96:0c:04:33:42:2b:10:42:d2:f6:da:b8:
                    7b:66:49:eb:04:0a:4f:0e:71:18:c7:ce:5d:d1:fd:
                    df:81:fd:2c:3d:63:b0:11:d3:f9:93:01:f4:fe:7d:
                    58:ac:0b:e8:3d:11:79:b5:aa:fa:da:21:34:1a:02:
                    75:2a:f6:b7:c2:48:47:e4:6f:2c:87:c6:a1:9a:d2:
                    7f:ea:70:07:90:19:d3:ef:f7:55:f3:a4:33:57:4d:
                    34:7c:02:e3:d0:53:9d:85:19:1f:0d:c4:dd:08:62:
                    8c:5b:4f:68:60:01:6e:76:b3:5d:7d:f2:94:8a:9d:
                    4c:60:3c:3e:16:d7:b1:87:5b:59:17:54:87:07:76:
                    d2:2b:95:cb:2c:e4:41:50:84:b3:a1:6d:d2:28:f5:
                    e9:af:cc:d1:28:85:6d:c8:24:1d:ab:10:aa:85:f0:
                    c7:7e:17:90:0e:e6:03:bd:30:29:fe:31:09:ed:65:
                    d4:f6:c1:2b:99:50:54:80:11:cb:c6:e7:81:ad:42:
                    77:99:f3:bc:56:86:98:d2:06:b0:c7:a0:2a:92:43:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:09:83:25:DE:5B:C3:92:2B:7C:31:80:69:B1:FA:28:FF:E5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c9e10f1-78f9-3e44-bce2-4f05516c821f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:93:0c:a1:a0:e9:27:3e:95:ad:cb:9a:f6:03:5c:e0:80:
         4c:bc:50:2a:2e:bf:a8:2f:26:77:dc:12:54:61:e4:5a:26:be:
         23:2c:ca:0f:17:f0:2c:5c:8c:ee:5b:28:1a:00:e0:db:94:86:
         47:48:ea:36:d4:fc:74:e4:e0:4f:92:2e:23:e5:fd:39:5e:fd:
         d8:05:f6:7a:5b:ba:de:ce:81:1f:52:a0:3e:42:53:fc:4f:7b:
         f7:3d:b4:d1:13:8b:11:d1:63:56:91:97:7b:dd:02:30:b1:25:
         cb:75:e4:00:01:b7:da:6d:ef:ca:68:5e:25:13:16:b5:fc:81:
         55:a8:e1:56:49:1e:87:c4:22:6e:60:c7:b2:8e:03:ec:07:73:
         c3:27:29:dc:3e:b2:77:5b:32:3c:44:72:ba:9b:55:8b:33:a8:
         07:8c:4c:2c:5e:b6:b4:ec:72:1d:9c:b9:57:12:96:41:40:8e:
         fd:b5:ef:84:da:84:d3:d0:d5:c3:f2:67:eb:62:0d:0e:ad:c0:
         ee:9f:86:71:63:15:2a:97:51:92:fa:ba:c9:7d:76:99:7c:89:
         9a:2d:57:21:4b:70:d5:56:be:35:8b:14:74:55:3f:57:f7:fe:
         50:c4:d0:40:de:da:cc:90:0d:01:51:9c:da:ab:ba:ab:95:dc:
         9e:e0:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:18:05 2026 by rpki-client