Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa
File:                     affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa (raw, json)
Hash identifier:          50XKIlcRzli6Pu1pnLYTo5MO+DFMtOhlFo0/UV6mbcM=
Subject key identifier:   98:DA:93:19:E2:C8:7E:D5:07:DB:E3:68:AF:3F:89:3B:74:48:EB:DC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEF45F3A2CF8AC3C79392DC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     18779
IP address blocks:        166.88.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:f3:a2:cf:8a:c3:c7:93:92:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=270c9726-896f-4229-b86c-79662229e5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:80:b0:4d:65:f5:31:6f:41:46:df:cc:ff:
                    ec:c4:43:8a:ee:0b:51:91:b1:f9:6f:23:55:a8:c5:
                    20:c6:aa:a6:20:ab:d3:e8:ad:6a:d1:f5:88:bf:7f:
                    92:e1:c6:d0:6e:d8:5b:78:04:26:d2:c2:c2:39:47:
                    ea:6c:f3:4b:55:16:49:43:5d:fd:9a:6a:90:85:8a:
                    56:ab:f4:6c:2f:19:d8:59:de:02:c9:4d:97:97:e5:
                    d0:ad:03:86:e7:96:0b:62:b6:6e:35:fd:60:48:7d:
                    79:4f:ed:66:61:fe:c0:db:bd:05:02:3e:79:61:23:
                    e7:4c:75:50:02:2f:2b:30:51:78:1f:a4:16:a1:04:
                    db:51:c3:42:ac:b3:b4:be:2a:15:c2:e0:5b:8b:19:
                    1b:62:d3:87:7c:10:74:77:de:28:2c:d2:e5:11:d1:
                    33:e4:30:69:98:07:86:61:8b:59:d9:2b:4a:f2:20:
                    8e:bb:5d:c5:ef:95:df:f8:d4:0f:fc:4e:5f:c9:18:
                    0c:75:e7:02:19:31:d7:01:cc:12:ea:29:39:c5:93:
                    75:8b:a3:e9:8a:eb:72:6a:25:1b:44:bf:69:19:e4:
                    09:10:db:dc:e6:ae:a7:e3:ca:9a:e6:88:b9:6a:94:
                    02:3e:d9:ae:74:ff:1f:a7:c2:db:aa:0b:52:31:65:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:93:19:E2:C8:7E:D5:07:DB:E3:68:AF:3F:89:3B:74:48:EB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/affc919c-d028-3bf5-a7a5-d969bdde1a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e2:cc:d8:4f:84:d7:c3:4d:29:93:b3:52:70:03:59:38:0a:
         8d:ad:b0:58:d1:83:c1:2d:99:a0:c0:c5:04:47:ab:a6:08:5c:
         2c:28:d7:86:5f:45:0d:cc:9a:41:f1:32:bb:1f:8c:24:2d:36:
         df:86:f8:96:a3:37:47:9d:7a:ef:9a:92:72:ba:97:f9:be:2e:
         f0:24:fb:8c:40:0f:7d:1b:a3:45:4b:11:5d:ec:01:64:65:dd:
         31:c2:e5:5a:f3:41:0c:e6:be:f7:bd:7f:45:08:28:5a:64:1f:
         15:3a:ca:2e:3b:94:1a:5f:50:1c:fe:70:ab:48:64:b7:af:64:
         e3:b7:49:22:f6:88:a0:28:b5:2f:c5:71:f4:97:f3:38:18:65:
         12:48:10:92:6d:cf:34:8e:aa:10:49:8c:90:78:e6:b9:d3:87:
         ff:b6:6b:4c:09:9e:6f:f6:81:39:68:00:d8:80:7f:63:2f:0b:
         bf:fa:a6:a8:ea:fc:9c:c4:d6:d9:fb:6e:27:23:75:79:06:f3:
         90:eb:7f:97:a6:a0:ac:56:af:ff:44:b9:2d:eb:31:26:d4:a1:
         c0:b2:9e:a2:b1:bf:55:8f:90:9d:4d:20:b9:36:7b:96:c9:ba:
         0b:32:39:f4:74:b4:38:dd:06:ec:54:ed:8d:c0:cd:40:9c:8a:
         0d:3a:58:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:31 2026 by rpki-client