Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3373cb3e-2692-3587-9753-e5a27f81af8e.roa
File:                     3373cb3e-2692-3587-9753-e5a27f81af8e.roa (raw, json)
Hash identifier:          aIe9ayHePts+zx/RedZGvow9J9XddjFMhY6e98K2Ufw=
Subject key identifier:   A0:C8:CD:0B:20:A3:09:6C:5F:86:0E:4D:1D:A4:C5:F7:34:4A:82:1E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DCAFB109ABD160ACBB578BE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3373cb3e-2692-3587-9753-e5a27f81af8e.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     149440
IP address blocks:        166.88.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:10:9a:bd:16:0a:cb:b5:78:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=a8184350-5625-4563-9151-9a16a083a8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:30:a9:d2:9f:d3:c6:f7:a8:e4:14:7d:3b:61:
                    e5:45:85:f0:b8:27:fc:c2:47:85:4d:90:22:68:f4:
                    c9:f9:8d:8c:5f:9f:6c:80:00:44:8c:81:36:46:e9:
                    cf:49:e9:5c:a5:0f:16:a9:ca:af:9a:9b:bb:a8:4f:
                    a3:66:fb:ef:68:20:72:25:f1:cc:74:dc:7b:92:66:
                    58:a7:88:cc:e6:14:a4:7c:a9:b7:58:a4:59:9d:90:
                    04:bd:df:0b:e0:0b:bf:4c:8d:47:42:07:59:86:0d:
                    2b:1d:3a:e0:a2:b6:29:76:de:8a:f8:df:b8:cd:66:
                    78:74:c2:4d:14:68:98:69:09:84:6f:a7:c8:ed:5c:
                    b9:8e:85:76:c7:5c:c8:48:b1:40:be:22:d2:2d:f0:
                    0d:dd:82:0a:f8:20:13:22:06:ce:ef:ea:37:5e:40:
                    a5:91:1f:c9:47:fd:35:1d:88:18:93:5c:1f:69:33:
                    4d:5c:b8:73:aa:69:09:c2:e4:da:eb:e7:ed:dc:24:
                    c9:99:37:6f:8d:a5:25:9a:e9:7f:91:27:80:b8:dc:
                    ca:f3:c7:36:1a:4d:76:47:5a:26:23:6b:ef:e6:95:
                    25:6d:88:40:9f:e7:d7:20:3c:42:05:28:c2:eb:25:
                    c0:e3:c8:25:be:0c:27:35:36:13:05:17:cd:77:26:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:CD:0B:20:A3:09:6C:5F:86:0E:4D:1D:A4:C5:F7:34:4A:82:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3373cb3e-2692-3587-9753-e5a27f81af8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:16:a1:2d:0c:c4:ec:03:8e:80:33:80:71:50:07:5e:c3:28:
         5c:4c:15:9c:71:b3:53:c3:ae:76:9d:4c:8b:03:1e:e5:2e:a0:
         5c:8c:55:87:6a:bd:66:09:5a:1f:13:53:15:5d:e0:74:3c:34:
         93:77:c5:96:56:3c:c9:2b:f8:3f:ff:a8:a4:69:c4:ca:c6:69:
         d6:53:8b:e0:14:34:64:3b:30:28:4a:38:de:db:bb:06:39:04:
         2d:91:f0:74:9f:17:45:89:26:0d:57:7a:32:af:61:64:66:b4:
         2d:ef:18:d5:ec:22:4d:7d:36:c0:ad:37:24:14:e9:09:2e:6f:
         4a:65:73:25:83:96:6b:e5:23:d8:1b:2f:a1:ff:82:74:50:06:
         95:39:3f:44:30:41:8d:f6:2d:e2:3d:68:25:f2:87:8f:6b:fb:
         5f:4c:9f:7a:e1:f3:38:dd:25:5b:2d:3e:af:bc:74:2a:ad:6a:
         ec:4f:75:8b:a5:24:bd:6f:d0:ab:bc:11:21:70:f2:0a:92:ec:
         a8:0b:56:3a:3f:56:55:9e:d0:5f:f9:2a:6a:d8:ee:60:31:9e:
         1a:56:bc:a1:d1:b5:f1:ad:e8:6a:73:c5:56:1a:61:a2:dd:c5:
         19:42:1f:ff:69:1b:f8:bf:4f:77:dd:da:a0:d3:05:a5:b1:84:
         91:a4:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:44 2026 by rpki-client