Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/91c22a40-c80b-3f5d-8c24-7a38af7e4267.roa
File:                     91c22a40-c80b-3f5d-8c24-7a38af7e4267.roa (raw, json)
Hash identifier:          nQjyNt2oZsbhcrnpB5hHWkD/2C/otPRGQDdQEz/GGeg=
Subject key identifier:   AA:1E:D6:87:C1:B2:17:56:F0:95:BB:04:E6:1D:2C:A7:F1:03:2B:34
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F7AB39824C480DC943FA43BB0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/91c22a40-c80b-3f5d-8c24-7a38af7e4267.roa
Signing time:             Mon 12 Oct 2026 16:25:56 +0000
ROA not before:           Mon 12 Oct 2026 16:25:56 +0000
ROA not after:            Sun 10 Jan 2027 17:25:56 +0000
asID:                     401152
IP address blocks:        166.88.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:b3:98:24:c4:80:dc:94:3f:a4:3b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 12 16:25:56 2026 GMT
            Not After : Jan 10 17:25:56 2027 GMT
        Subject: CN=6c450435-beb7-4e0d-9d9d-4c254aa29649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:10:db:17:bd:2d:75:7b:37:cf:da:c2:fe:
                    66:b1:ab:73:27:17:0c:c2:ca:c5:d4:05:e8:17:42:
                    2e:2a:40:99:91:b2:e4:9e:c1:34:ac:d0:42:b8:24:
                    c2:2c:89:ec:55:b8:8b:48:41:22:82:43:1d:78:58:
                    6e:c1:e6:b1:c9:14:4f:1d:5a:0a:79:02:f8:a4:3f:
                    7f:70:5d:c6:75:06:1a:ba:47:18:2b:99:6f:0f:8a:
                    09:6f:e5:c8:6c:c8:66:98:a2:14:9c:8a:30:99:f7:
                    28:3d:e7:c7:24:ca:cb:42:ef:f8:e6:59:07:dd:da:
                    99:b1:f7:4e:38:31:fc:f9:7a:a4:17:c2:3d:8b:1b:
                    51:b1:9e:0a:67:2c:3d:59:36:35:38:58:cc:d7:b0:
                    0e:66:4d:0b:52:ff:2e:5e:fd:1f:ca:02:c5:36:5a:
                    43:a1:9d:23:93:24:37:dc:9c:ea:9b:a9:59:cc:77:
                    4e:7c:0c:da:81:17:a1:72:b1:43:78:d6:20:89:cc:
                    32:8a:c5:04:58:09:e3:f3:41:a8:2f:e0:64:59:ba:
                    cc:2a:b7:1f:57:95:56:5b:f7:06:63:48:f8:b5:be:
                    b6:b8:80:55:68:87:0c:1f:b2:81:a0:6f:2f:01:a5:
                    73:54:75:1c:6b:0e:63:93:47:12:bd:e3:e3:b3:dd:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1E:D6:87:C1:B2:17:56:F0:95:BB:04:E6:1D:2C:A7:F1:03:2B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/91c22a40-c80b-3f5d-8c24-7a38af7e4267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:6f:21:ac:0d:36:cb:40:4c:50:07:7b:d0:45:8f:36:8e:
         0f:e3:b8:31:1d:8f:11:cb:4e:92:bc:50:1f:48:c5:78:10:72:
         b3:b1:bc:36:4e:fa:e6:63:8c:47:7d:94:9a:d4:27:65:60:d0:
         69:8b:21:4d:7d:84:ea:37:45:73:4f:9a:29:db:80:80:4d:dc:
         8e:1c:7b:00:5b:60:ae:ff:66:fb:bb:47:9c:06:03:7a:be:e5:
         7b:87:2b:82:78:7f:42:56:93:a2:0c:72:9a:d5:b7:84:f6:82:
         e4:28:07:86:41:c2:ae:5a:c3:34:e7:ad:e9:c8:4d:9a:dd:bd:
         30:0b:92:a5:81:33:e8:64:ed:ad:24:9f:a1:0f:5c:3e:53:4e:
         a1:d8:63:93:92:df:44:6a:e6:60:bf:58:81:1a:9d:62:ec:a9:
         53:3c:58:29:e3:96:40:50:33:cc:c1:91:89:6e:2d:f9:a1:f8:
         cd:a7:e5:63:67:82:5c:08:92:0c:e5:1c:69:68:65:87:81:a6:
         8e:b7:5f:78:cf:6f:5d:29:ae:14:b0:91:da:a7:07:8f:14:05:
         89:25:c3:22:e5:bc:e6:94:4e:3c:24:4a:37:25:1f:2e:3f:b3:
         ee:0e:49:d0:86:2f:6f:28:7b:96:b1:75:69:ac:fc:c2:3d:61:
         0e:2d:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:50:38 2026 by rpki-client