Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa
File:                     076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa (raw, json)
Hash identifier:          aeW652hV/f4UweK891qBZTBgE5wRJegKNESkDtIdUtw=
Subject key identifier:   70:61:11:3C:E1:91:4D:75:51:9F:03:4F:7F:FC:80:21:27:54:EF:02
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D838B540C0D058266200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        166.88.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d8:38:b5:40:c0:d0:58:26:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=b09c1d5c-a8f9-45b2-8a70-0488f16a29bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:e8:a4:f3:88:8d:90:0b:ae:6b:af:06:a5:
                    b8:66:3e:1f:32:d7:57:87:71:f6:d8:22:11:ac:dc:
                    3d:3c:69:e8:9d:ca:0f:92:52:b5:db:ff:c3:1e:d1:
                    33:cc:9d:f5:b8:11:91:42:92:48:ad:0e:ed:ee:ab:
                    b5:50:12:b2:61:5c:03:98:b5:e0:a1:59:58:12:4e:
                    f1:1e:34:8b:33:55:01:ed:5f:f4:96:a3:c0:26:d2:
                    bf:25:6b:bf:99:0a:24:bf:b0:42:45:9f:5b:72:c0:
                    92:c2:bb:88:d8:65:6e:4f:73:1e:28:b1:9e:12:23:
                    24:87:bc:1f:52:ce:78:94:b4:38:9d:21:ca:05:99:
                    1c:01:97:31:d0:c2:8a:a6:aa:35:8f:fb:35:7a:67:
                    e1:d9:f3:a6:a0:72:00:1c:07:f2:7c:1d:dc:f3:f4:
                    af:14:35:da:44:40:cd:d1:13:49:20:e5:6c:88:d1:
                    29:6b:0e:c4:56:46:6d:89:05:5c:af:71:16:5d:88:
                    2d:f4:f2:66:a8:4e:72:93:72:26:b1:82:00:cb:b2:
                    43:0d:f8:d6:e8:7f:c6:e3:70:62:0e:27:d0:2f:af:
                    cb:3e:5b:c6:07:9c:89:8b:bf:1d:84:49:0a:bd:4b:
                    1e:8a:a8:49:e6:c6:36:d6:75:4a:f4:37:f4:1b:6b:
                    6c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:11:3C:E1:91:4D:75:51:9F:03:4F:7F:FC:80:21:27:54:EF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/076e9ba9-51d2-30ec-bb7a-7c6e3dace9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:b8:4c:39:f1:6e:6a:d7:20:d6:87:fc:5d:3f:4c:e9:ed:
         8a:74:cb:aa:71:09:08:03:12:3a:e1:1f:65:30:65:06:db:ee:
         91:dc:b0:67:9c:b3:f4:69:30:23:82:58:56:2a:f1:77:fd:94:
         cf:2f:8e:80:02:b9:08:9b:fe:6b:16:b6:fd:ba:49:8f:2c:1b:
         98:1e:b1:ed:c9:ab:bc:87:c8:8c:66:12:ea:25:ea:2f:7c:65:
         cf:96:94:37:d4:df:7f:14:be:6d:27:5b:5c:d1:8a:98:94:56:
         ee:28:0b:a1:37:f2:05:91:f6:25:5e:05:ae:b3:b3:88:9f:00:
         21:c4:5a:97:81:9f:ca:c8:07:9b:4b:d0:85:d1:71:39:53:f9:
         f1:29:4b:2c:d8:36:d5:91:56:56:a8:0b:38:fc:a0:40:d7:71:
         0f:2b:0b:cf:13:5b:02:bb:b3:ec:a2:67:c4:26:b2:6b:fb:36:
         03:76:ed:c5:8a:5e:65:e7:17:dd:49:a2:42:ef:8e:3d:f1:dd:
         27:76:03:e7:8b:d6:3c:c4:73:cd:fc:05:ea:d7:f4:86:65:06:
         b7:4b:d6:ea:f0:42:2f:df:90:dd:26:bd:93:0d:b2:15:fb:55:
         fc:a5:d9:51:7b:c6:0a:d3:14:78:0b:65:f4:76:62:f2:92:9e:
         12:cd:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:48 2026 by rpki-client