Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa
File:                     c9e18a32-4601-37f5-94a7-644a3acf1734.roa (raw, json)
Hash identifier:          zFeKAMYV9xvQ0wz7iQAVWoySgtJNqlyV5gQCoXQFcJo=
Subject key identifier:   D1:CB:E7:08:94:18:F1:1F:4F:3A:08:4B:B2:69:BC:79:CE:69:48:98
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DF7A5DE9D7B95F625DB701620
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     212238
IP address blocks:        166.88.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:de:9d:7b:95:f6:25:db:70:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=7798c27e-d31e-4310-8953-215169ffaeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:6a:9f:93:fb:e8:c2:13:c4:52:80:79:d0:
                    3b:37:c8:e7:ec:4e:3c:8b:75:e8:53:fd:2b:61:a5:
                    2b:de:0f:46:c2:1b:cb:90:ee:d8:41:74:e6:41:66:
                    e4:37:de:d2:8a:15:4a:4c:f7:60:41:0b:e8:91:2e:
                    95:37:ca:e7:0f:27:e1:bb:ca:e0:1b:29:00:a5:fc:
                    7b:23:e1:5c:02:73:2d:c8:0d:24:96:b3:ba:77:be:
                    6a:c8:ec:16:f0:49:57:98:7b:d0:81:22:44:0e:21:
                    21:0c:29:8a:31:ac:31:00:18:7f:24:6b:f5:3b:73:
                    ec:3c:87:8b:be:db:50:4b:77:60:45:61:4f:ac:31:
                    04:4e:c1:51:c3:2f:81:16:a2:4c:b9:14:64:cc:01:
                    5d:8a:22:45:ac:52:fa:aa:e9:37:8b:c4:83:27:f7:
                    af:20:58:e8:a9:e1:31:f3:83:81:36:b3:92:b1:bb:
                    67:fe:58:c0:51:e8:1a:76:9e:90:be:a8:73:11:dc:
                    a3:a0:c0:ee:cc:c7:95:c3:47:b2:6b:c5:8c:86:f4:
                    75:96:a0:59:20:e2:cb:1a:f1:93:e6:df:ff:a3:26:
                    51:8e:96:27:b6:5b:8d:80:c8:06:07:5d:c0:af:54:
                    26:0d:f8:86:8f:b9:97:dc:c8:10:cc:22:88:7e:6f:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:E7:08:94:18:F1:1F:4F:3A:08:4B:B2:69:BC:79:CE:69:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9e18a32-4601-37f5-94a7-644a3acf1734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:30:1c:a7:b1:0e:06:23:99:ff:19:52:3b:38:86:78:49:30:
         64:79:3e:65:32:68:21:85:a4:24:22:86:c8:aa:67:50:bc:eb:
         1f:a3:e5:aa:9d:91:67:bf:29:24:69:48:bf:70:75:27:e8:07:
         a2:12:5f:7d:5b:eb:ec:65:94:f2:a3:9e:f0:06:40:6c:1f:ba:
         cd:d5:e3:3f:b7:f4:67:00:6d:da:1d:96:95:ea:1c:b4:c8:7d:
         f4:0a:c8:ab:cd:39:33:6d:50:8a:61:88:9c:01:53:b4:62:9f:
         67:54:f2:3a:ab:57:f0:2e:8c:11:d6:ec:c2:67:23:0a:70:7e:
         d7:f4:48:3e:87:33:43:d2:41:26:04:79:af:87:38:55:ed:03:
         0f:dc:0b:a8:92:c2:fd:05:60:31:bf:62:80:2f:97:d2:1b:04:
         92:b2:4c:ec:31:81:6c:23:07:7d:71:e5:3e:4a:96:47:f8:b9:
         76:c6:81:0d:9d:2e:16:6d:3f:ac:5d:ca:dc:9d:bf:f2:73:93:
         83:b2:24:8e:d4:c3:35:ce:66:ac:41:5c:ce:e3:7f:36:9d:c3:
         17:f8:09:0f:5f:33:7b:28:6e:c2:77:26:32:70:53:46:c1:c1:
         a4:17:c4:0a:31:de:e7:ac:41:9b:3c:f3:1b:6f:86:ff:f4:88:
         7f:6f:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:15:40 2026 by rpki-client