Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9585d6fb-39fb-3878-9526-8baeac14c7e2.roa
File:                     9585d6fb-39fb-3878-9526-8baeac14c7e2.roa (raw, json)
Hash identifier:          K1s0FsfRcNrjswNjBFuey1zF8+QjKDLByADMyuWQ9n4=
Subject key identifier:   31:8D:D2:BE:F6:20:64:D4:CE:97:B1:48:FF:79:04:B9:D4:24:12:DA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD35B0CBBF02A431417DEB580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9585d6fb-39fb-3878-9526-8baeac14c7e2.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     11404
IP address blocks:        166.88.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:0c:bb:f0:2a:43:14:17:de:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=c8b81638-ca38-426a-a25b-637db55d38b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:6d:8c:3d:fc:c8:7d:02:39:5e:f5:f0:08:
                    0d:56:70:40:57:f0:9a:28:5a:12:0e:7b:9d:96:60:
                    c0:36:a6:54:94:6f:e3:73:f7:33:7a:27:82:c4:3d:
                    8c:90:f8:17:65:c7:f7:77:40:09:3b:3d:0e:4a:fc:
                    3e:7d:b0:d6:e2:f3:7f:7e:09:0d:02:99:a1:f4:45:
                    e7:3b:5a:71:1c:cc:71:a8:74:e6:9f:20:c1:99:c4:
                    fb:e2:1c:a6:3c:f9:e1:7f:1e:dc:2f:bc:3a:07:14:
                    fe:ff:f4:96:dd:65:d3:5e:d7:03:2e:d4:97:41:b5:
                    35:98:2d:2c:2d:ca:b1:af:1b:64:0b:8b:84:e8:dd:
                    4a:3a:dc:85:83:cd:3b:04:bf:17:e5:4b:a3:f4:c6:
                    d5:c5:73:4d:28:81:c5:4b:42:ed:9c:fa:14:f5:e8:
                    8d:52:77:1c:c3:a0:7f:7c:5e:e1:c1:58:60:a6:cd:
                    14:59:94:a3:ca:a6:12:e0:06:18:00:f9:ac:5e:15:
                    6d:23:30:6f:90:c4:39:f9:a9:86:76:72:62:d1:95:
                    86:22:68:df:63:3e:95:ea:01:c3:9e:c3:01:1b:04:
                    02:72:31:8e:cd:2a:1b:7f:80:be:31:26:54:ef:86:
                    c2:ad:24:b2:18:6f:21:b8:ca:83:9b:90:69:0e:a8:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:D2:BE:F6:20:64:D4:CE:97:B1:48:FF:79:04:B9:D4:24:12:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9585d6fb-39fb-3878-9526-8baeac14c7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:09:4d:18:50:15:b5:67:ff:cc:64:19:09:e3:60:44:1d:21:
         f3:ee:17:63:5b:8a:de:59:d6:cd:f2:6c:70:2d:a4:45:c5:fb:
         da:ca:fe:1e:5c:f6:f3:0a:d5:70:22:7b:ef:d0:a7:85:13:dc:
         22:fe:55:24:87:dd:ab:0b:de:6f:cd:d7:7d:58:ad:93:3d:41:
         5d:fe:33:2e:91:07:da:97:37:b3:fb:57:53:c4:04:48:8f:38:
         e0:b0:b9:fb:d6:f6:d5:e6:ed:f9:27:3d:18:a5:6f:e2:67:ea:
         84:bf:df:34:3a:3f:fe:4b:62:78:7a:19:11:34:de:60:11:85:
         5e:59:12:ce:3a:91:b8:27:bf:fa:74:7f:fd:c3:1d:2e:e3:0e:
         66:dd:be:3e:0d:ad:4c:43:6e:02:07:56:51:d5:e1:c9:1b:e4:
         b4:44:db:c0:55:08:0e:87:58:5e:80:ff:f2:c2:c7:83:56:cb:
         bb:d7:53:d0:02:c3:c0:a6:0a:41:94:95:50:2d:ae:45:64:0e:
         35:48:41:a6:19:ac:0c:74:49:ff:60:83:a2:c7:df:53:e8:62:
         24:0f:93:c9:ec:ca:45:92:99:4f:38:48:e8:51:de:c2:f3:64:
         ce:57:85:2e:3f:ab:5d:5c:0b:cc:d9:fc:6b:fa:1e:03:a8:56:
         0f:40:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:14:41 2026 by rpki-client