Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0257e50-f066-3d91-a9e9-034d421f2b3e.roa
File:                     d0257e50-f066-3d91-a9e9-034d421f2b3e.roa (raw, json)
Hash identifier:          POSBocfWNBu+kPx57vRPM89aprv0Wu42eqGEKQYFGTE=
Subject key identifier:   F8:B3:94:8C:4C:D1:89:D5:AA:0E:6D:07:31:00:48:EF:3B:62:C2:32
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7979C28E76F0090F0E10D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0257e50-f066-3d91-a9e9-034d421f2b3e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        166.88.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:9c:28:e7:6f:00:90:f0:e1:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1425b8aa-370a-41b7-9905-a535001b50a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:bf:a1:c4:93:05:52:e2:c7:c7:41:22:5b:
                    d6:ac:95:1e:65:63:34:87:7b:f1:70:a0:d3:aa:f1:
                    f5:72:10:55:54:50:7d:a5:6a:84:c1:73:30:02:00:
                    77:10:9c:b7:30:34:cd:25:0b:71:8e:1b:93:24:57:
                    52:62:0f:c0:e8:8d:7a:1d:e1:e9:2b:79:ea:b7:a7:
                    23:15:5b:47:a6:c4:de:4c:e8:0c:76:e9:ac:ac:6f:
                    6b:fb:60:80:b7:06:a8:b1:82:9b:83:4f:d0:02:0e:
                    93:59:ae:c5:62:e5:d5:fe:a7:30:2e:7d:29:83:72:
                    87:e0:ec:ba:f0:55:c8:df:1a:5e:4e:c0:29:8d:6a:
                    7b:42:87:cd:c7:54:35:f4:1a:43:75:5e:64:aa:b6:
                    69:9a:45:11:dc:70:be:b1:0c:9e:83:65:5f:7b:7f:
                    01:e1:2a:e2:08:de:fc:e2:24:30:21:fe:49:c6:8b:
                    25:82:33:41:28:0a:9e:79:b3:bb:db:80:0f:2d:41:
                    00:bb:a5:2b:62:35:a4:b1:bd:59:f5:35:d7:db:9e:
                    d2:67:3d:30:ae:95:ba:99:83:95:67:11:65:b8:f6:
                    8c:f3:09:ca:da:3e:3c:1f:60:39:51:4b:6e:2a:5e:
                    94:a0:77:db:e6:b2:83:5a:64:6d:fe:55:42:1d:fc:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:94:8C:4C:D1:89:D5:AA:0E:6D:07:31:00:48:EF:3B:62:C2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d0257e50-f066-3d91-a9e9-034d421f2b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:4a:ef:bc:ee:b0:ca:dc:cd:f5:70:af:9b:55:5f:5c:6a:
         45:fb:e7:98:d0:c7:bf:4c:82:34:20:0f:cd:8c:6f:73:8f:34:
         9d:ba:80:e9:7e:ec:3f:18:60:90:15:42:91:99:d4:05:ce:bf:
         fb:a3:a0:00:db:8d:61:c3:46:b5:a0:e9:6e:23:47:13:28:c0:
         de:4f:78:8c:99:d4:42:25:63:ae:ad:cf:9d:55:07:1f:89:2f:
         74:1c:9a:60:7b:98:55:5d:b1:42:18:9c:a8:48:ef:11:c9:2f:
         42:34:d8:7d:13:75:fe:f7:d7:f3:e1:f4:8c:d0:e5:35:72:52:
         a5:b0:77:eb:a9:71:aa:6f:1f:ed:64:9e:c7:2e:fb:ee:9f:1b:
         32:1e:9c:a1:f8:72:0d:05:c4:62:6a:44:cb:28:d2:4e:0b:45:
         7d:2e:00:58:09:18:cc:92:e1:9f:b0:00:88:b4:e9:6a:01:f3:
         4a:a1:fb:29:c8:65:77:8d:b2:fb:9b:4d:fd:a9:51:a8:2f:39:
         25:da:50:e4:23:2d:07:09:51:c3:7a:2a:8f:42:12:ad:1d:50:
         6e:64:77:ea:df:14:85:e0:f4:1c:6b:30:14:6f:ae:d6:18:10:
         6c:57:a0:4d:cb:4d:ae:84:0d:0a:19:8d:38:64:e5:ed:30:59:
         1d:9b:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:13:05 2026 by rpki-client