Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa
File:                     f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa (raw, json)
Hash identifier:          cM55leILUuqRku1dxDoP+wGslGCHO840T+n2TImEL58=
Subject key identifier:   67:51:56:2A:9C:0D:85:8D:ED:A2:16:8E:3D:E4:9A:2E:F1:DE:44:BE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E9BE525E9A4340690A9D228C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     149440
IP address blocks:        166.88.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:25:e9:a4:34:06:90:a9:d2:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=9659775f-5f85-403e-8949-b45c9b6bcf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:57:34:a0:d3:b2:da:e7:e0:ad:8f:40:2a:
                    30:49:af:b5:8c:8a:e7:cf:78:c9:ef:eb:6e:b8:ca:
                    46:42:5b:ac:92:a5:18:e0:0f:f1:79:24:c9:fe:09:
                    da:03:ff:62:e0:a7:59:79:e6:98:3e:12:c6:c4:01:
                    d2:34:da:9b:d6:07:10:23:31:ab:f3:05:4f:dc:95:
                    0f:60:19:17:b5:83:a0:4b:3f:bb:f9:34:ef:8b:09:
                    81:65:d0:e5:31:81:c5:de:4e:ac:57:d2:65:97:ed:
                    35:d3:23:50:d2:84:ff:9d:7c:56:4c:94:5e:6d:d8:
                    78:d2:e0:17:36:f9:c1:8c:7a:4e:18:0d:d0:52:97:
                    d7:0a:8f:b4:a0:1e:77:8e:ba:df:08:63:f2:9d:75:
                    c0:29:c8:35:48:3e:03:83:c9:f4:23:90:60:fd:32:
                    80:05:68:a4:f6:fb:78:47:dd:e4:fc:14:a4:2e:d8:
                    9e:6e:6f:73:40:66:8f:20:64:ae:89:ac:34:df:42:
                    c7:82:83:3d:e5:b6:6d:9c:d5:9d:4e:9e:8c:f4:f9:
                    6c:04:92:ae:18:b2:3b:db:2a:ea:b8:a1:11:ab:a1:
                    a8:ec:7c:f7:7e:16:1f:e1:66:18:af:ed:67:dd:ee:
                    01:4d:b5:41:30:e3:76:6b:cf:2c:72:66:8f:90:d6:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:51:56:2A:9C:0D:85:8D:ED:A2:16:8E:3D:E4:9A:2E:F1:DE:44:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f56fbc7f-b12a-3252-a0d5-6145f3090de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:d3:04:16:24:ae:15:d4:ed:83:a0:d8:05:a9:5c:e0:9f:
         ba:8f:7b:75:03:63:04:59:f8:fe:b8:60:98:4e:f1:99:5d:eb:
         39:e7:20:58:6e:4c:8c:e6:a0:48:a4:81:dd:d0:9b:b7:8f:e0:
         b4:49:1a:b5:4d:38:99:3b:d5:24:51:12:ab:51:7e:99:41:cf:
         21:a8:52:b3:32:53:72:85:4d:0c:24:a8:42:26:f9:f9:16:b7:
         64:3e:a6:c4:51:e8:b5:8d:f3:2a:5a:66:b2:0d:2d:93:92:50:
         43:27:01:f4:99:31:06:30:24:d8:b5:7e:32:4c:71:2a:86:72:
         cf:a9:00:9a:75:f3:38:8f:26:7d:53:ed:7c:52:78:42:67:9d:
         6d:0f:66:57:24:79:57:70:61:f4:ff:6d:ce:38:2c:7b:24:f1:
         63:d5:6b:8f:6a:c2:32:17:2c:f1:ce:ba:27:d5:12:d4:c2:0f:
         99:28:81:d0:e4:0e:4b:4c:93:86:94:e7:b7:b1:7d:ad:d1:02:
         2f:ce:bf:14:d3:68:03:a4:e2:a7:d4:f5:13:81:d3:29:7e:a9:
         57:71:10:54:ff:cc:e9:af:02:c9:5f:fa:09:53:43:3c:12:1f:
         10:aa:a6:46:5e:3b:cf:cd:6e:8e:76:71:e4:31:c1:e6:4b:e6:
         7d:a3:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:20:32 2026 by rpki-client