Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f632bf5-5608-3000-a46a-c3dd48dad668.roa
File:                     7f632bf5-5608-3000-a46a-c3dd48dad668.roa (raw, json)
Hash identifier:          11oAfo7fKLnJipgDSoZ2UebkujPVGBhpWBlGL8kNh2I=
Subject key identifier:   60:42:12:B0:B5:F9:AA:7D:FC:26:2B:9D:E8:51:40:50:7C:13:53:D0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB84774F4E750D346202552C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f632bf5-5608-3000-a46a-c3dd48dad668.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        166.88.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:74:f4:e7:50:d3:46:20:25:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=80f857cc-c950-4015-8444-40408c38916e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:19:35:97:59:5a:2d:22:3e:86:dc:66:fe:12:
                    37:3b:90:fd:e9:10:eb:1b:33:a0:52:b0:ce:d5:41:
                    85:2f:3e:48:29:53:2b:44:66:cd:57:b6:a0:51:d0:
                    e0:ca:31:4f:34:28:f6:d6:56:31:9b:e9:8c:36:8f:
                    ff:80:bb:c5:b5:1d:b4:e0:9f:e2:fc:e0:fd:2e:ca:
                    62:55:aa:dd:64:5d:8b:91:b5:59:d4:b0:45:5a:fb:
                    d9:cb:99:23:b2:0e:95:1e:7b:74:b1:ff:d7:8e:ab:
                    f0:a4:81:7a:80:51:f1:64:dd:73:bd:9c:15:35:c9:
                    fd:21:d7:fc:35:ab:f7:84:af:a1:ee:34:d1:37:80:
                    0c:55:d5:79:9e:99:a3:9c:cf:00:38:81:03:19:1a:
                    f2:6f:59:0f:f0:80:48:38:92:fa:4f:c4:50:fa:6c:
                    fb:d8:a8:39:39:d5:d3:94:f5:17:67:16:6a:21:90:
                    74:2f:c7:1c:89:2f:79:2a:9b:d4:be:2d:2a:80:d2:
                    33:e7:88:8a:da:69:37:b9:e1:25:a3:39:d5:6e:b8:
                    44:a5:5b:2c:59:4d:2f:d0:1a:c2:d8:01:19:98:98:
                    03:10:76:25:fe:51:0a:22:26:be:39:dc:9d:c8:44:
                    1a:e3:91:c1:7f:f6:d8:95:3f:4c:4b:61:41:a5:11:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:12:B0:B5:F9:AA:7D:FC:26:2B:9D:E8:51:40:50:7C:13:53:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f632bf5-5608-3000-a46a-c3dd48dad668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:d3:36:2d:52:66:2e:5c:fc:c2:73:66:b8:49:22:05:39:
         0f:6b:59:4a:54:3b:7a:f1:9a:79:92:56:c1:56:df:81:58:5d:
         26:1a:33:3b:0f:0d:7d:c8:2e:95:4d:84:b4:20:37:4a:24:b7:
         a3:62:83:d7:9f:cd:6e:96:d2:d5:cb:65:de:29:f1:9b:5b:5c:
         7f:58:7d:f1:20:11:82:fe:be:40:4e:78:bd:64:46:23:61:38:
         ee:28:88:8d:d7:9d:04:39:88:c8:f9:e5:15:d6:4a:a3:b1:30:
         7c:35:b0:d6:4a:41:64:17:19:98:69:6b:18:c6:87:c4:4f:ea:
         f5:76:5a:37:6f:c7:ee:8c:f0:b5:26:1f:e5:54:a1:d2:f5:92:
         0c:11:c2:64:0e:44:0d:fd:c4:0a:5a:6c:57:22:8d:bd:30:10:
         52:70:85:96:8b:ca:a0:69:92:78:91:2b:98:b7:a4:cb:86:5f:
         c0:bb:e2:bb:05:24:9d:70:73:19:94:42:81:ae:3e:82:01:bb:
         b0:1e:03:25:ba:3c:ec:9b:91:10:58:7f:c1:33:63:4f:25:06:
         8e:5c:96:29:24:93:d2:ac:90:2d:a0:e7:c5:de:9c:04:35:9c:
         ca:ac:96:fd:da:dd:b1:0f:44:c2:0a:fa:d3:ea:39:e7:69:16:
         48:2e:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 09:29:29 2026 by rpki-client