Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa
File:                     fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa (raw, json)
Hash identifier:          78LgkNEIQ3xauQP9Jhl5Nm/bYSgAZUs3dxlyEcbe51o=
Subject key identifier:   31:CD:B1:1C:43:B8:80:ED:7D:96:ED:97:75:8F:05:81:A1:BE:EA:9F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E7A64E4F49F6A0267E516B3E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     5650
IP address blocks:        166.88.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e4:f4:9f:6a:02:67:e5:16:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=ee361550-a7aa-46e2-b59d-ed85f5574493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:52:b5:f3:c7:93:9c:38:41:8f:1e:c4:98:
                    44:1d:13:79:24:47:41:ea:a7:ea:27:a7:db:41:40:
                    8e:78:07:f3:25:93:07:e0:f9:be:9a:5a:c8:18:49:
                    e1:1e:fd:69:bf:82:fb:7c:5e:b3:53:a5:7b:ba:ea:
                    29:16:1d:0c:ab:8f:91:13:b3:b9:5c:62:2d:af:b2:
                    dd:68:af:b7:2a:84:d8:07:3d:4f:a0:40:39:38:3c:
                    f8:05:22:62:08:bd:ad:41:b1:2c:bf:87:78:28:b0:
                    57:bd:e2:94:7b:f8:ef:75:26:b4:75:7e:a2:de:7e:
                    30:37:9c:53:a7:a4:b2:52:14:55:e3:95:78:62:d7:
                    65:29:45:34:d2:5c:49:db:27:de:e3:e5:3a:d9:e8:
                    84:04:a5:b3:ea:10:10:52:f4:1a:c7:78:d0:44:06:
                    a5:af:84:91:40:04:da:01:65:0b:3f:80:9b:60:96:
                    c2:34:51:3f:dd:36:6e:b2:13:2e:da:e2:1a:f8:84:
                    60:98:43:e1:ca:5b:25:59:4d:49:c6:df:8f:9d:0d:
                    ce:9d:58:a8:67:de:39:5b:0d:76:b0:04:48:1f:fc:
                    2a:13:ad:b1:98:8b:b8:12:20:d0:d1:2c:d0:0c:c1:
                    d1:88:9b:d1:f1:20:91:da:fc:dc:a4:c5:dc:07:04:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CD:B1:1C:43:B8:80:ED:7D:96:ED:97:75:8F:05:81:A1:BE:EA:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fcd40bb6-ebf0-35f4-bb1b-8368592038c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:ea:53:1a:14:b2:3c:38:f9:4b:23:67:87:a6:0f:b6:2a:
         52:e5:28:a7:84:40:44:52:cc:9c:14:e0:20:44:a1:0f:26:77:
         74:69:b1:2e:1c:79:24:69:0e:ca:da:6e:f5:b7:a7:20:cc:c7:
         82:a4:fa:a1:5e:d5:c4:a2:51:18:82:8c:3c:1e:19:e4:b0:1b:
         b7:b7:cf:ef:c0:cd:cc:e2:54:1e:89:1c:5a:cb:e5:6d:3c:2a:
         2a:8f:59:2d:8b:56:74:24:be:cc:2a:38:01:7b:d5:53:14:b8:
         5c:49:f7:93:e6:05:48:2b:c2:35:0b:e3:28:b9:ba:b2:d8:65:
         7b:72:16:2e:d2:9b:6f:2c:ff:80:e4:d5:cf:58:9f:7c:8d:c2:
         ef:d0:23:c8:aa:c1:4c:28:2a:e1:c5:e8:70:9f:07:c8:6a:4b:
         78:cc:5b:67:66:07:b9:b9:10:dc:0c:d7:c8:c0:ff:38:ca:8d:
         64:87:71:ac:b7:16:b0:e0:76:46:c7:68:13:74:64:dc:47:7c:
         69:77:25:47:a8:f0:35:ff:ab:80:98:e0:9d:39:38:ea:cc:d8:
         72:fe:ab:75:e2:d4:f8:ad:a7:2c:ac:55:5b:26:49:26:4f:47:
         bd:31:30:14:06:6e:65:7c:8d:14:ca:7b:01:1e:a4:6e:69:d6:
         a4:2c:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:40:00 2026 by rpki-client