Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5f49b2b-709e-37bf-9132-55149be00ecf.roa
File:                     d5f49b2b-709e-37bf-9132-55149be00ecf.roa (raw, json)
Hash identifier:          vmAI9N27kivRDn+9/VFa40O1iTtykKlubZ58o1+DDvo=
Subject key identifier:   24:8E:A8:19:60:33:72:36:A9:DB:A4:DE:EE:4F:E3:A0:C8:94:96:11
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF01CF92622F5075790ED9D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5f49b2b-709e-37bf-9132-55149be00ecf.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     42831
IP address blocks:        166.88.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f9:26:22:f5:07:57:90:ed:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=be6570ee-0824-4cbc-a28b-e159ea15c3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:6b:4b:57:9d:d6:9d:f3:0c:36:0a:c5:6d:
                    b7:0a:9f:5c:de:cf:cd:ef:8e:28:51:ad:f5:4f:d6:
                    b9:8a:cb:7f:be:15:c0:a9:46:d2:cc:1c:7e:ae:6b:
                    f5:e1:9a:a5:13:ba:91:7e:bc:fe:cb:c3:1a:cd:8b:
                    56:67:a2:16:8a:5c:1c:c7:ad:59:b0:16:e9:cb:92:
                    34:d5:e6:6e:2b:c4:a7:e9:1a:9b:e1:5a:ab:e0:ba:
                    93:6b:db:a7:8e:97:97:60:a7:f2:a3:ad:0c:ad:eb:
                    1b:65:65:a7:ea:17:fa:12:e4:49:75:3e:cd:f4:74:
                    e5:6f:9d:0f:ac:0e:bc:be:a2:4e:d0:de:0f:23:8a:
                    40:ac:f9:bd:cc:8d:e8:0f:c8:a4:f2:da:94:5d:03:
                    7f:8c:0f:a6:bd:d6:eb:25:29:85:54:44:a7:08:2f:
                    c9:7e:bc:4a:0b:2d:d2:5c:59:5a:06:3b:95:28:80:
                    e8:58:ea:bf:7a:9b:cb:b4:b7:19:ef:cc:7a:09:8c:
                    ec:71:a3:70:08:a6:32:9e:60:a9:ff:bc:30:e7:de:
                    5e:ee:0a:5e:ae:e6:4c:a5:4d:08:4c:d3:e8:af:1f:
                    53:18:2d:4b:1e:3f:1e:98:35:a3:b8:81:d8:f2:7a:
                    3e:08:83:38:e5:98:32:2b:0e:82:bc:80:69:1f:cd:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:A8:19:60:33:72:36:A9:DB:A4:DE:EE:4F:E3:A0:C8:94:96:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d5f49b2b-709e-37bf-9132-55149be00ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:f5:16:20:06:13:1c:77:88:3c:20:de:d1:35:61:e2:c1:
         ae:d5:21:8c:71:2b:d7:62:7d:c7:da:25:07:5e:93:87:03:a4:
         3f:5d:00:eb:a1:b9:5b:52:2c:ff:66:77:cf:ec:8a:df:c5:ad:
         df:75:e0:b1:f3:78:dc:ee:d9:d3:f2:d2:53:e8:f1:3c:be:93:
         d0:65:92:87:16:fb:90:8e:5e:f9:69:70:4f:45:3d:ac:e8:21:
         cd:1e:fe:89:95:e7:87:3e:44:3f:ac:d1:1c:25:c7:76:82:06:
         78:e8:92:86:20:d4:2c:f7:66:b8:2d:d7:73:a5:75:e8:0c:1b:
         1b:14:65:bc:07:28:2d:7c:66:c1:18:60:fd:1f:2b:a2:da:3f:
         f7:3d:1d:db:1d:9b:5d:0f:14:25:31:dd:8d:30:1d:bb:96:42:
         79:d0:35:d9:2c:8c:d5:d4:d6:66:01:cb:e5:1c:df:a1:20:b8:
         1f:99:d5:eb:b9:1c:8b:2f:3d:7a:5e:2a:51:0d:aa:21:2d:c5:
         56:83:88:ea:ca:e4:15:fe:bf:12:52:dc:04:3f:69:cd:71:c6:
         a8:2c:0a:35:b7:14:5a:22:fe:6a:dd:82:66:41:22:b3:36:9d:
         6f:7a:98:75:f9:9b:01:24:4b:40:c7:c1:70:51:69:98:85:e4:
         64:8a:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:17:05 2026 by rpki-client