Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa
File:                     843a7bc0-ba40-3899-a79f-a86d4c85c631.roa (raw, json)
Hash identifier:          oZdI5sz04xUIf51jXJY68rVcEx4T9cyALQLY4pSSkPk=
Subject key identifier:   78:59:78:BD:FA:3F:39:62:A0:19:40:39:4E:EA:58:77:14:6D:EE:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6F3AC0C2A3011212194B4840
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     26383
IP address blocks:        166.88.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:c0:c2:a3:01:12:12:19:4b:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=3120d54f-405e-4da6-aeca-1683a60a5e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:29:22:1e:e4:bc:3e:66:90:af:49:10:a9:
                    19:5a:99:f9:11:13:13:50:50:83:4c:5c:2e:c1:a8:
                    d5:05:d3:b0:ed:fc:d5:21:d1:a6:ea:13:53:c2:58:
                    dd:ba:a4:c2:02:c2:73:bc:63:15:f8:63:fc:b8:7e:
                    35:e5:54:0e:b2:1d:d5:2a:1b:9b:eb:8c:4d:09:ac:
                    84:5d:bf:15:b9:fb:9e:bc:6e:19:c9:99:84:fb:5f:
                    72:b4:0f:f8:61:f6:d2:69:4b:16:e8:98:91:d7:0d:
                    47:d8:fb:97:a2:39:da:ba:d6:1e:15:c4:be:70:5b:
                    b6:06:2c:6e:ac:ae:21:80:36:fc:da:27:9a:01:df:
                    dc:77:18:b6:53:59:59:63:ca:50:c0:9b:50:5a:e1:
                    9d:57:3a:19:79:da:ee:1a:48:fd:cb:c7:68:24:0b:
                    4c:06:cc:44:2a:11:64:6a:1a:ce:b2:26:3c:59:8c:
                    92:de:5b:09:df:17:33:cc:07:b4:5b:8a:16:19:02:
                    1d:97:a0:79:05:e9:9a:d7:e1:a1:1a:ff:9c:db:89:
                    15:dc:fc:42:c1:6a:dd:f1:c0:f6:bf:04:c4:9b:d0:
                    de:a1:cb:9c:c2:b4:af:54:26:94:d3:16:28:8d:62:
                    34:86:fe:aa:49:c9:58:be:91:83:fa:e7:94:94:92:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:59:78:BD:FA:3F:39:62:A0:19:40:39:4E:EA:58:77:14:6D:EE:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/843a7bc0-ba40-3899-a79f-a86d4c85c631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:9d:c7:95:ca:5e:ab:b8:8f:66:14:94:ee:fa:ca:c5:28:
         49:5d:cb:c3:05:3c:24:87:a8:c6:78:8a:4b:aa:6e:98:30:30:
         18:a0:6f:1f:29:cd:80:5e:12:5e:89:3d:6c:c7:fb:1f:09:4a:
         e3:bf:ee:bb:d4:b5:45:8c:17:be:9e:eb:62:f4:fe:a4:8d:ef:
         67:cd:f9:75:df:9f:7b:f9:b6:c0:49:b8:81:8b:1a:20:2f:d9:
         e0:e4:db:89:4a:50:ae:67:75:04:21:b0:24:0e:1d:ef:e3:7f:
         80:e1:97:5e:1c:ba:12:bd:0c:28:06:fa:18:10:17:c1:77:87:
         92:13:26:01:30:bd:75:73:9b:95:f1:77:07:88:dc:45:4d:da:
         e5:b0:cf:dd:ce:42:3d:2e:18:e7:e1:e6:dd:ae:35:7f:8e:ed:
         3b:94:4c:51:12:05:8e:7d:39:9c:a3:d7:23:50:25:7e:bc:6b:
         d4:ca:c1:34:94:e9:75:b3:71:67:f3:51:dd:2f:65:e5:2a:53:
         3a:cc:f9:3a:00:97:49:2b:44:49:4f:61:a1:b3:b8:31:fd:5b:
         78:05:04:40:ae:90:bf:24:d4:76:bc:3b:ef:01:c4:81:d7:6b:
         e8:00:30:66:a0:a2:a3:22:86:0f:0a:82:ef:6b:67:8c:e2:49:
         28:25:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:41:01 2026 by rpki-client