Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa
File:                     f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa (raw, json)
Hash identifier:          4csGqRocGdAiX6485YCvf0IHJrQkegdRBraL01vq/0I=
Subject key identifier:   CE:DF:A7:0F:BE:DE:7D:1A:74:D5:DF:67:7C:E5:B2:D4:ED:59:31:86
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEF45F2F5DC593237BE3FC580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     18779
IP address blocks:        166.88.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:f2:f5:dc:59:32:37:be:3f:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=870a4c65-fda8-41d6-97a9-9396605a4bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2a:4c:31:88:60:50:e9:d4:b2:f8:e8:3a:87:
                    47:6d:a4:65:0c:a2:9e:32:c8:40:e8:45:d2:59:5f:
                    e7:aa:85:22:8d:f4:cc:8a:7c:f6:02:03:a4:ae:6d:
                    72:8a:f2:64:41:0b:0f:4c:f1:32:4d:67:78:9b:cd:
                    5a:65:9b:c0:2f:c3:0a:f3:ba:b6:7a:3e:ef:9a:b4:
                    bc:eb:ec:7c:32:36:4f:f8:4a:a6:f6:f7:09:b8:b5:
                    fe:11:96:18:45:a3:74:da:50:55:d5:51:f0:92:ed:
                    1f:cb:8a:6c:33:b7:7c:ec:7d:03:ff:60:ea:6a:06:
                    77:bb:79:8f:4b:b0:cd:f9:7e:94:f2:33:82:c3:fd:
                    2a:23:54:30:7e:93:0f:c3:1e:f9:2e:a6:02:fd:8c:
                    4c:d2:95:d5:0c:92:12:8d:8d:3e:e3:e0:7f:e8:0e:
                    9b:af:61:08:0d:ed:ee:2b:13:43:9d:b9:4e:ea:be:
                    73:fb:bd:d6:b6:d3:c6:d1:8b:7e:31:ca:21:97:e6:
                    76:be:5a:c5:a2:8f:fc:4f:b0:f7:fc:b7:70:aa:ee:
                    43:7f:1c:73:3b:3a:2a:d3:e7:73:f4:90:48:b6:8c:
                    6e:12:6f:9d:4d:f0:ee:cb:66:23:4a:1f:40:e9:e7:
                    79:27:8b:0e:7c:d3:1e:10:9d:a6:8c:bc:e4:54:78:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DF:A7:0F:BE:DE:7D:1A:74:D5:DF:67:7C:E5:B2:D4:ED:59:31:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f006a3a3-abd0-3d03-ac84-4bfac24daee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:12:4d:d0:4a:a4:49:c0:f9:14:b3:4d:46:70:de:55:18:
         4f:80:1f:ed:a6:2e:05:9a:5b:3d:dc:83:e1:85:fc:f3:6f:ec:
         1f:26:79:88:ef:b2:7d:0a:be:21:fa:88:b1:f7:09:2c:eb:ca:
         7b:95:fe:3c:9b:28:c7:6e:20:21:50:a7:f5:7a:f6:a6:2f:ec:
         6d:58:a9:08:e5:51:66:86:80:03:c6:3d:90:44:71:a8:cd:22:
         04:84:82:c1:d2:ec:11:f7:4b:d9:d3:52:d4:bd:89:b9:6e:83:
         28:87:b6:8f:27:62:11:7c:5c:e1:f9:a7:ed:f0:b9:6a:4a:7b:
         b2:cf:fe:34:dd:28:e7:15:06:c5:a6:ae:a6:94:14:25:82:6a:
         60:be:17:83:e6:22:f8:e4:3d:6e:f4:a7:52:f3:38:df:57:62:
         18:b6:6e:d1:d2:b8:a1:56:74:92:73:a8:58:3c:92:82:bc:c5:
         89:e5:24:2d:ab:cb:b7:b0:28:2f:9d:bd:d1:a7:7a:cf:3d:49:
         a5:2f:75:86:dc:8d:c1:f6:af:61:93:21:1f:a5:92:7a:70:1f:
         ef:df:25:5f:dd:45:1f:8b:96:ca:f5:a9:7d:a4:1b:31:71:63:
         d8:cc:05:6c:4a:68:30:19:ce:d5:f8:8e:ff:df:e1:eb:fb:57:
         0d:eb:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:40 2026 by rpki-client