Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6be4067-f7a1-3fc1-9928-b3319f397de1.roa
File:                     d6be4067-f7a1-3fc1-9928-b3319f397de1.roa (raw, json)
Hash identifier:          iWoCv1mWTjtrFrS5aculO1WIqfZUIxxuIYPxe+2YQ2o=
Subject key identifier:   EB:71:B5:13:A5:0D:B9:16:8D:59:2E:CF:15:DD:2F:20:9A:07:8B:EB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A32A5EFCA37FC5145FB0180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6be4067-f7a1-3fc1-9928-b3319f397de1.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        166.88.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a5:ef:ca:37:fc:51:45:fb:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=8420b349-aad7-4b51-8c94-a60a5f7bee61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:ff:18:a1:06:bd:d7:08:61:8e:24:e1:24:
                    60:37:1c:54:0f:72:c8:0a:85:f7:70:83:1e:2f:02:
                    e1:c0:cd:88:2c:d7:98:08:26:ab:31:ee:50:bd:d7:
                    7a:41:ed:44:b1:1f:38:1c:f4:73:a5:7a:c2:78:36:
                    86:04:e5:19:e9:16:05:01:91:59:6d:86:6f:b4:e5:
                    4c:c0:c0:cc:3a:d7:9e:3c:f9:39:9c:54:37:a2:1a:
                    83:7b:d0:12:8a:e5:86:2d:62:2d:3f:ed:37:a2:7b:
                    8d:94:3c:74:64:70:9c:b4:43:e8:2c:8f:f0:6f:c1:
                    43:2c:1f:da:8b:33:c5:93:5e:5c:73:df:0a:74:4d:
                    91:a5:98:5d:f5:ce:31:0f:28:c0:83:93:2d:41:65:
                    4b:c5:cf:a5:fb:0c:38:af:3b:fc:22:82:71:76:b6:
                    b8:23:1d:73:ea:bf:e2:0a:4a:13:28:3c:5f:0c:c2:
                    62:8a:52:5a:11:fd:eb:01:70:f3:92:09:de:eb:58:
                    90:d9:a9:83:4a:64:cd:1c:31:c3:cf:b0:d8:4a:59:
                    8f:49:3c:eb:32:f2:4e:70:7a:86:59:25:ec:b8:b9:
                    87:f2:d0:3e:8a:22:1b:91:71:89:f4:e8:0c:a0:c7:
                    fe:3d:1e:ff:cd:1a:db:30:5e:f9:36:20:95:52:6c:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:B5:13:A5:0D:B9:16:8D:59:2E:CF:15:DD:2F:20:9A:07:8B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6be4067-f7a1-3fc1-9928-b3319f397de1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:74:e6:1f:18:f5:25:38:e7:b9:44:66:23:58:d6:9b:02:69:
         44:7a:c8:eb:d0:72:c1:c8:93:99:54:6a:2a:85:80:ba:43:f1:
         ca:b3:49:fd:4f:43:08:b2:ed:76:22:97:a0:4a:07:b8:9c:9e:
         5e:57:c0:49:4b:22:3a:f0:fb:c8:03:3c:14:8e:10:35:f8:dc:
         57:ed:4e:15:73:08:a0:d1:13:ca:7a:f2:33:10:90:ba:95:3c:
         e5:c3:b3:d3:cb:40:15:18:ca:0e:18:0f:b5:bb:86:eb:14:87:
         47:b7:0b:a5:cf:ae:60:30:00:27:2e:9a:e5:bd:1d:88:32:d1:
         50:0f:83:95:6d:5c:db:42:5e:89:3c:7a:16:d9:a5:33:e7:90:
         2b:73:82:20:3d:52:5f:6a:9a:a6:48:d5:e2:3b:66:98:2f:cb:
         26:8a:e7:9f:a0:ee:55:ae:c7:53:a3:4f:8d:ec:b2:80:3a:af:
         b3:16:e6:44:68:01:49:12:d3:d1:0f:de:d0:54:ce:a8:d1:22:
         3d:aa:21:10:a1:ba:5f:d2:3f:fc:07:fa:01:51:93:6f:9a:f5:
         de:e7:ae:69:87:f0:61:2a:77:f9:09:89:51:bb:95:83:f2:67:
         8e:2a:7b:3a:a6:a3:f9:2e:51:ea:bd:16:ba:51:cb:44:dc:0a:
         96:bd:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:28:43 2026 by rpki-client