Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eae3efd6-88c2-3095-9d46-5c7668a35037.roa
File:                     eae3efd6-88c2-3095-9d46-5c7668a35037.roa (raw, json)
Hash identifier:          9HWo+A2kOO2W+8mg+gY4ICEeohIwC9j1aq2lin3JX3g=
Subject key identifier:   79:A8:91:A0:57:C8:74:DF:2E:25:BF:3A:47:EF:FC:27:99:03:C2:FF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA8EC4A273A3DF3F5F1AEDFC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eae3efd6-88c2-3095-9d46-5c7668a35037.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     149440
IP address blocks:        166.88.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4a:27:3a:3d:f3:f5:f1:ae:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=2aaf5e0c-9748-4afd-93d1-26a1c1264f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:6b:9b:ff:b7:88:f7:0a:41:99:0d:71:90:
                    5c:25:88:85:c1:ff:a8:86:a1:09:cf:09:f2:7b:0b:
                    9b:91:d9:3a:b8:5a:30:3a:66:66:4b:95:74:02:02:
                    cd:90:fe:3b:e9:af:cd:43:5c:f8:d9:59:83:ef:37:
                    26:6b:dc:ac:a8:b7:5f:ac:94:4c:4f:97:52:c2:1c:
                    4a:8b:b6:4f:d6:5d:a1:c7:0b:09:f1:f5:56:2c:97:
                    b5:30:8a:e7:13:b1:6a:c1:13:bb:68:69:cb:60:85:
                    16:9d:62:2c:0f:6d:d9:af:7d:5e:d3:90:93:72:f7:
                    3f:11:4f:24:0b:c8:01:49:eb:15:32:b6:59:2c:7d:
                    ba:81:17:c7:f3:74:70:46:3a:99:3f:5c:eb:f4:c9:
                    50:5d:70:8a:46:73:25:3c:3a:67:b1:32:4f:58:10:
                    bc:10:9d:d5:8c:48:92:5e:57:48:28:f0:f3:b9:e6:
                    ad:ee:dd:79:f0:5f:4e:e0:7d:02:dc:70:e6:b8:7d:
                    67:24:a2:6b:a6:b0:48:77:1a:df:52:1a:27:93:d3:
                    7f:5b:31:b9:a2:4e:48:9d:74:66:8d:a7:5f:54:e9:
                    31:ff:e9:ca:68:8e:19:2d:2e:b8:9c:6c:b2:38:46:
                    5b:5c:68:7d:be:15:53:85:cb:d9:39:89:e5:4d:e6:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:91:A0:57:C8:74:DF:2E:25:BF:3A:47:EF:FC:27:99:03:C2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eae3efd6-88c2-3095-9d46-5c7668a35037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:93:d4:92:31:d1:27:5b:58:6a:66:31:1d:3b:8a:3f:f7:ce:
         9d:21:48:a3:4b:d1:58:70:73:5b:48:97:e0:59:8d:83:e9:78:
         63:8a:56:c2:1c:84:84:dc:0d:95:61:3d:fe:5b:da:05:ee:7c:
         d9:6c:80:c6:c3:50:96:41:84:b3:bd:82:74:65:f5:f1:0d:23:
         67:09:c0:b5:c6:c2:98:1d:bb:84:81:44:02:0e:a1:54:50:73:
         13:a1:b7:f5:99:d6:1f:51:d3:9b:68:11:99:d7:ac:60:c3:68:
         e6:27:c0:2e:95:45:da:23:f2:a6:e2:16:76:f4:b5:c3:e3:da:
         e5:2c:d4:df:de:a3:39:3d:ac:17:b2:c6:28:03:d4:49:f6:6e:
         6c:26:64:13:41:d5:ec:9f:10:a5:9c:34:e5:67:2e:20:4f:1e:
         f5:e6:4f:5b:a2:91:a9:37:b6:ee:a9:bf:1e:f7:a6:23:26:d4:
         e7:70:a0:eb:51:5e:c7:da:74:fa:21:82:c8:94:23:f9:f8:2d:
         0b:33:13:ae:28:52:73:74:b1:e0:37:f2:1e:c6:c7:e5:b1:2b:
         a4:19:9c:11:47:fa:6f:b9:0b:86:7e:4a:cf:64:af:6b:15:2b:
         42:b1:73:68:82:5e:29:4c:ef:a5:cb:cf:df:f7:74:b2:c6:dd:
         ed:22:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:07:57 2026 by rpki-client