Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48ac2047-8450-311f-aaf8-82ed4b53fac5.roa
File:                     48ac2047-8450-311f-aaf8-82ed4b53fac5.roa (raw, json)
Hash identifier:          o77dydx7zaOzafw+J0O7XaXkX0nbfb3BorqDm+5Yz4Y=
Subject key identifier:   BD:3A:08:29:BB:4B:1B:12:32:A4:CE:BE:B2:5F:D8:11:27:6E:6C:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D8FA44C8054182351F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48ac2047-8450-311f-aaf8-82ed4b53fac5.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        166.88.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d8:fa:44:c8:05:41:82:35:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=c3446bcd-021e-4158-b09e-fe40df688bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:98:ae:74:b9:15:ae:b1:ba:52:1d:c6:e1:
                    b7:df:5d:17:5f:2b:f0:40:2c:f5:15:a3:63:6b:8a:
                    09:36:b1:68:d6:e6:1e:d9:7b:cb:49:85:f3:70:66:
                    0a:fc:aa:be:ab:3e:6c:1f:a6:78:3f:79:07:3b:e7:
                    ff:13:ef:11:58:f1:ca:ab:a6:bd:67:1e:c7:29:c5:
                    42:6a:69:ee:3c:37:dd:c1:d9:86:7b:8b:0c:02:b0:
                    59:06:e7:10:3a:fb:37:ce:25:7f:cc:9d:f1:81:e7:
                    11:be:da:e5:fc:a9:0d:ee:ed:b6:7a:e6:24:e3:de:
                    ad:e5:44:c5:ca:b4:8d:db:ea:ff:93:3c:b5:df:96:
                    20:86:1e:c2:c9:fa:ce:3e:23:c2:c3:f3:eb:c0:3d:
                    f0:e4:44:18:47:b9:e8:ce:20:82:fd:82:aa:7f:db:
                    9e:0c:b5:59:16:ac:b3:71:d0:ae:3c:38:4a:2f:dd:
                    35:39:20:c9:9f:84:10:9b:33:83:1f:e9:9a:20:50:
                    b6:26:42:43:9d:f1:40:af:7d:69:8e:cd:6f:e2:7b:
                    ae:d5:26:fe:f5:aa:a4:95:c8:08:2c:f4:80:c5:f2:
                    5f:18:1e:96:3b:5b:53:11:ef:e4:c3:e5:69:33:b9:
                    72:c4:e2:98:21:06:b7:32:fc:2c:ff:da:08:5b:e6:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3A:08:29:BB:4B:1B:12:32:A4:CE:BE:B2:5F:D8:11:27:6E:6C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/48ac2047-8450-311f-aaf8-82ed4b53fac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:71:c1:c2:18:15:8c:e8:af:f8:82:3d:21:40:af:60:92:
         b7:ac:16:72:8e:de:22:bf:e7:31:c2:98:06:0b:80:09:48:af:
         9c:74:72:9c:b9:09:56:e4:c3:57:dc:a0:e8:23:2f:b6:5e:97:
         dd:f7:8c:59:30:1d:c3:3b:57:1c:34:ce:0f:1e:cb:eb:fe:bc:
         1a:8e:23:c0:e0:15:1b:45:1c:11:56:8d:14:07:76:1f:50:21:
         be:31:8d:d7:8e:f1:19:fb:e8:0b:09:a1:7b:26:35:1f:ee:17:
         b8:28:73:d1:40:0e:62:79:ad:61:98:8e:97:37:8c:be:87:db:
         59:38:40:ee:11:00:72:1f:c7:8c:2b:e8:cb:f8:5f:a1:3e:b4:
         c8:ed:6d:a5:a2:f8:90:90:9d:20:04:c2:fc:06:70:f7:6b:5e:
         78:66:4a:b9:c1:33:89:20:03:c7:ff:a4:08:ec:b9:2b:fc:a8:
         c5:b0:bb:7e:1a:bb:8d:18:b0:31:7e:e7:42:87:f0:a2:7d:b8:
         40:59:4b:f0:8a:32:e8:2c:e1:9d:53:09:90:5e:b0:91:25:3e:
         ab:8e:95:d3:0a:bb:71:3c:3a:7b:cb:f7:e5:cb:49:53:5e:61:
         74:8c:bc:76:8e:4a:c4:1e:32:93:04:e2:07:5a:a9:ce:72:9f:
         d7:59:4f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:38 2026 by rpki-client