Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/40f79698-7811-3a30-9947-0986bf9e1784.roa
File:                     40f79698-7811-3a30-9947-0986bf9e1784.roa (raw, json)
Hash identifier:          B957ym6x+vRqycX+mVNJhlJ29YkGIfgpNzKULZhINFM=
Subject key identifier:   21:AB:EB:24:76:B5:7B:37:57:6D:EC:2B:77:CB:36:22:AD:DE:24:48
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584EEA87565CFB5CE0B7E0140680
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/40f79698-7811-3a30-9947-0986bf9e1784.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     53667
IP address blocks:        167.88.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:56:5c:fb:5c:e0:b7:e0:14:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=44eb83c1-d5f8-4f83-8c46-daa027d4183f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:55:cc:b6:d3:9f:ac:a0:83:14:c7:bf:35:
                    d0:a8:b5:f3:38:2f:a3:8a:ca:c5:06:70:8d:10:51:
                    ef:c8:97:51:8f:0f:73:5f:d3:1f:8e:e3:a1:aa:c3:
                    6c:6d:fc:19:01:b8:ab:4f:eb:85:4b:81:51:48:1e:
                    8e:83:38:98:b5:cd:72:6f:ea:49:14:51:0b:04:c7:
                    06:42:84:ed:46:d9:6c:ee:85:7a:98:26:1c:ee:63:
                    33:f3:01:bd:e8:35:a1:7f:3d:a2:b4:b8:c3:d1:fe:
                    cd:21:5c:9d:37:54:cc:f9:e1:43:98:6f:a5:fd:5f:
                    a6:78:f4:20:20:a8:22:26:61:6e:8a:4b:cb:b5:49:
                    12:47:1e:f5:59:4e:37:16:1d:41:a5:63:4a:05:01:
                    04:d4:07:01:79:82:03:65:55:0e:a9:71:12:8b:e7:
                    ce:17:0a:d7:ce:e8:d3:b0:56:e2:53:c2:7f:27:a1:
                    0a:38:bc:85:be:32:32:39:c8:dd:1c:ae:e9:48:0a:
                    53:b9:56:10:e9:ba:58:26:2e:8e:64:ba:df:11:bd:
                    96:49:cd:c8:b5:78:cd:bf:c1:1b:6c:3e:64:20:7a:
                    99:49:9b:c6:18:7b:66:40:48:b3:5c:c1:33:97:2a:
                    d9:20:c4:27:2b:69:86:1a:16:31:6f:86:1a:a8:bb:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AB:EB:24:76:B5:7B:37:57:6D:EC:2B:77:CB:36:22:AD:DE:24:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/40f79698-7811-3a30-9947-0986bf9e1784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:ea:43:1c:f5:32:33:3f:ae:81:bb:12:96:e9:78:38:4f:
         fe:61:7d:ad:36:bb:f3:dc:4d:5d:88:3f:3d:88:7c:eb:4a:0a:
         13:9e:ba:0e:cf:7a:c3:59:f7:27:1d:2d:e5:10:0e:96:64:f4:
         d2:6c:28:5c:c7:f9:38:29:71:49:19:64:86:25:8f:9c:93:07:
         9c:31:c3:db:44:db:f5:55:e0:68:cb:4d:eb:81:85:49:05:16:
         5e:67:e8:f8:bc:66:83:e6:7b:19:1b:3b:aa:29:12:91:02:95:
         a0:e9:55:a6:f6:ee:c3:61:b1:89:53:a1:13:18:f6:35:a7:49:
         d6:0e:bc:a6:02:b5:04:b8:e9:39:af:a5:2c:be:d0:f3:f5:54:
         f1:bd:a9:e8:86:67:33:ea:4f:be:a4:71:2f:93:a7:91:92:fd:
         98:08:3d:27:cf:59:c9:2e:44:49:86:d8:51:04:db:9b:9d:1d:
         f8:00:44:e8:0f:31:4a:44:5f:70:2c:53:82:73:84:07:e9:58:
         15:fe:18:c9:53:7b:23:10:4c:1e:5c:84:e6:4d:06:39:e7:09:
         51:5f:1c:47:cb:0a:8b:1b:3a:1d:91:84:e9:bd:7b:47:68:08:
         10:ea:27:7b:b2:41:13:3c:65:28:21:06:8d:4b:e8:8e:ea:d5:
         e5:34:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:27:13 2026 by rpki-client