Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd396d34-434b-3bf7-bfeb-79e591a36186.roa
File:                     fd396d34-434b-3bf7-bfeb-79e591a36186.roa (raw, json)
Hash identifier:          MkUiFKea6shdzscS3rYcfuyHdkX8+WvZII49SZ+NYoc=
Subject key identifier:   27:25:11:A1:23:BE:AC:14:F1:CE:05:FC:71:B3:AE:C0:5F:E0:54:37
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF4E7FCE47EECE7ADCA339230
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd396d34-434b-3bf7-bfeb-79e591a36186.roa
Signing time:             Tue 25 Aug 2026 18:13:11 +0000
ROA not before:           Tue 25 Aug 2026 18:13:11 +0000
ROA not after:            Mon 23 Nov 2026 19:13:11 +0000
asID:                     3257
IP address blocks:        166.88.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:e7:fc:e4:7e:ec:e7:ad:ca:33:92:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 18:13:11 2026 GMT
            Not After : Nov 23 19:13:11 2026 GMT
        Subject: CN=ec51cae9-120a-413a-88f1-6c8faa7f976d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:ad:76:88:73:c8:ab:8e:a8:54:70:90:20:
                    97:be:db:59:97:4f:8c:da:bb:54:49:ba:a2:aa:99:
                    99:72:61:c1:71:5d:00:85:6a:65:11:60:5b:37:ec:
                    47:b3:d4:6a:10:9d:8a:38:b1:f4:5b:1e:bb:91:8e:
                    9a:8e:68:b1:0d:99:3d:5e:4f:95:6c:20:a6:1b:88:
                    56:c8:f2:f7:af:8d:57:82:e8:af:6e:5a:3d:89:c9:
                    66:26:b2:28:05:61:14:fd:26:9f:60:37:3b:5a:e6:
                    5c:dc:b6:ae:28:70:f1:7c:be:e8:6b:e0:99:7b:04:
                    e1:f5:e3:44:c4:0a:9e:74:33:7c:bc:8c:9f:aa:c8:
                    f1:2c:1a:35:24:8c:c0:91:b5:89:5e:08:04:5c:cd:
                    bf:35:2b:ee:f7:b0:77:2e:a4:64:4f:a5:72:59:47:
                    4d:70:2b:2d:ee:2c:80:dc:09:42:d4:07:b7:c2:3d:
                    28:d4:23:af:38:09:dd:dc:d4:40:af:72:f5:f3:29:
                    44:69:b2:4f:3f:25:98:a0:2b:25:98:b7:46:69:2d:
                    d5:5c:78:ba:fe:42:07:1e:51:47:6f:06:2b:3f:6e:
                    a9:8d:54:bd:b2:07:22:0d:a3:ec:82:76:55:7e:7d:
                    fd:e2:43:e7:d9:93:c0:32:3d:8a:ec:52:81:82:2d:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:11:A1:23:BE:AC:14:F1:CE:05:FC:71:B3:AE:C0:5F:E0:54:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd396d34-434b-3bf7-bfeb-79e591a36186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:19:fd:da:1d:1b:49:59:b0:5e:0c:7d:d6:91:e5:6d:ae:
         75:96:4c:c6:7c:bf:47:eb:4b:cd:61:47:ec:06:55:98:5e:df:
         92:6b:5a:ef:99:b9:99:e0:97:f5:aa:94:4c:b4:52:bc:e6:f1:
         9a:d9:95:8e:ca:b7:93:00:a7:73:21:ee:76:82:db:cd:84:05:
         0f:8f:e7:0f:e6:4b:ab:48:6e:a4:5d:2d:02:c7:9b:b5:61:bf:
         c7:e5:14:b7:69:05:b3:ea:4b:c9:a5:ad:70:d8:7f:bc:b7:84:
         c0:1b:88:d7:69:01:3d:65:74:d8:5c:fb:f9:4a:06:ac:9e:9b:
         67:98:2f:23:9c:96:54:ec:ad:ce:ac:60:a5:ce:1b:85:62:4a:
         18:8a:54:72:bd:3e:79:b9:45:de:bd:74:74:c3:89:65:7b:7f:
         73:02:1c:0f:b0:da:e9:d4:57:fe:f5:31:d1:2b:9a:4b:1a:27:
         6e:39:c2:7f:ba:53:54:4d:64:7a:06:d9:be:b9:61:b4:59:24:
         95:ba:23:ec:71:b4:14:d3:70:68:2f:77:84:a3:ad:83:da:35:
         ee:b9:41:a1:8f:6b:1a:73:72:5e:74:0e:f3:db:03:c1:75:92:
         2a:43:f2:3a:4d:ba:27:90:00:75:c7:9d:1b:8e:b9:ef:1d:2a:
         58:e1:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:10:50 2026 by rpki-client