Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99550f26-bd60-3417-8d77-c9056655a4f3.roa
File:                     99550f26-bd60-3417-8d77-c9056655a4f3.roa (raw, json)
Hash identifier:          2u0amG+Yuq59Gru/1ubm4p9PH3zAKDotGM0kHu3FIZI=
Subject key identifier:   05:9D:4C:13:48:9E:39:FA:00:95:BB:B4:71:E1:46:14:B0:49:4A:C4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E4DCEA4984D52436185DD8280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99550f26-bd60-3417-8d77-c9056655a4f3.roa
Signing time:             Fri 26 Jun 2026 21:42:07 +0000
ROA not before:           Fri 26 Jun 2026 21:42:07 +0000
ROA not after:            Thu 24 Sep 2026 21:42:07 +0000
asID:                     213929
IP address blocks:        166.88.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ce:a4:98:4d:52:43:61:85:dd:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 21:42:07 2026 GMT
            Not After : Sep 24 21:42:07 2026 GMT
        Subject: CN=3e1895dc-8168-49cc-a4e5-ef60c98a91de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:cc:a8:55:7a:31:27:e4:3f:ba:83:fd:37:
                    ad:cc:0f:a6:99:e1:82:0e:1e:d6:49:4a:4b:3e:3c:
                    23:f8:2d:c4:64:57:db:36:f8:56:96:29:fb:0f:c7:
                    f6:4b:e9:a5:02:f4:98:c0:f8:56:3e:6d:16:f8:60:
                    89:fe:22:c8:f5:61:36:0c:e1:cb:ef:43:a8:82:7f:
                    2a:c3:79:ec:44:53:67:57:65:c0:ec:89:b7:1a:c8:
                    76:80:56:db:3f:5d:f1:c3:d1:fa:cf:15:a9:14:94:
                    cd:c0:e8:12:1f:c2:18:58:f7:97:54:5c:58:b2:8d:
                    2a:5d:fb:0f:4d:82:36:7b:1a:04:28:28:83:75:c5:
                    9c:4d:7c:63:05:6e:3b:68:94:44:97:90:cb:e9:05:
                    9a:da:76:5e:d4:9b:59:bb:0e:b3:59:cd:3b:b1:54:
                    c0:ea:96:dc:53:73:29:d7:de:88:db:32:46:fb:2d:
                    ec:c1:75:58:cc:6f:f2:cc:e5:b3:5d:a9:a1:39:99:
                    4e:63:b9:b7:68:f4:5d:31:0c:1f:e6:00:c1:57:d3:
                    f6:32:1e:bd:70:2d:47:5d:20:e7:86:c5:86:55:ba:
                    c9:c7:6b:83:ff:6f:ff:5b:bb:dc:4a:b0:71:59:b2:
                    bc:13:b7:30:e0:61:48:4a:b4:ac:28:68:88:2d:3c:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:4C:13:48:9E:39:FA:00:95:BB:B4:71:E1:46:14:B0:49:4A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99550f26-bd60-3417-8d77-c9056655a4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:da:40:2b:bd:46:9a:38:3f:a2:89:c3:b6:59:38:07:d2:81:
         21:e3:6b:0a:16:4b:a5:f3:84:f6:d0:3e:17:59:f1:a1:fe:4f:
         7c:71:e3:5b:0a:2b:77:97:da:45:2f:f5:65:f9:f1:d5:f6:65:
         8e:a5:09:b3:f7:c1:80:dd:4e:0a:53:2c:ee:8e:e3:7c:d3:87:
         a4:cb:4e:20:02:56:0e:1c:6e:6d:1e:b5:ee:b4:00:97:68:57:
         b6:d8:f9:34:e3:4c:51:88:70:02:80:e6:ae:20:75:1b:61:95:
         e8:88:2f:db:c4:ce:a4:af:fb:3d:2e:c3:91:0e:b9:44:2c:f1:
         93:63:39:93:dc:d7:a8:8b:a6:31:34:82:8e:1f:e9:84:cb:88:
         e0:cd:ab:fe:4c:6d:34:9f:8d:19:6d:7a:93:07:1b:7d:f5:67:
         66:71:e5:d7:eb:02:66:09:ea:85:83:b7:ac:73:41:6a:4c:68:
         6b:89:31:08:81:a4:ae:4b:aa:37:e6:3e:72:03:30:85:27:8f:
         8a:a8:cd:f8:21:3d:b7:4f:bf:c4:7b:5a:44:c3:18:9d:81:c1:
         3f:4b:fa:2e:5f:74:14:ad:bc:76:ad:da:50:19:14:cf:ca:ed:
         f2:4f:f6:31:5d:9b:88:70:5d:10:4d:6a:4a:a7:1f:90:33:fc:
         d7:c2:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:19:55 2026 by rpki-client