Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa
File:                     5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa (raw, json)
Hash identifier:          5pf4j846ZDBZvaZBFgeZCDi91Sl2oR8YE72Kj3xtgk8=
Subject key identifier:   3E:AD:08:CB:4D:0E:F5:CE:93:9E:92:BC:3D:1A:09:5D:0E:23:CA:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F498919707CD8BA5ABE5BB300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     213823
IP address blocks:        166.88.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:19:70:7c:d8:ba:5a:be:5b:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5b3e68df-568b-48f8-9292-5a068af5ec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:24:7a:b7:c8:25:19:d7:16:f5:02:1d:67:
                    9b:38:4a:c1:55:c6:e5:2d:52:86:4e:e2:e6:1f:b5:
                    4b:42:35:84:73:ee:93:60:c8:f3:6f:bd:03:9c:67:
                    83:96:07:57:f9:30:dd:40:33:94:25:7f:dc:38:50:
                    bc:8f:4b:3a:09:7d:3b:ed:fa:ba:1e:eb:00:ac:06:
                    d1:d2:ca:c0:7a:be:e6:97:79:cd:04:99:43:f5:e6:
                    bc:f3:cf:8d:76:01:f7:e0:6c:a0:d4:34:a2:75:ae:
                    cc:51:ab:e5:03:9e:09:29:d4:64:f3:1c:66:2d:28:
                    63:72:1e:15:c0:8c:0c:43:cd:a7:ea:78:be:e9:73:
                    f4:c8:95:2e:9a:66:81:ce:aa:68:43:77:99:4f:03:
                    c3:d5:55:bd:91:96:ed:d4:36:96:76:99:c9:45:a0:
                    10:54:bb:66:86:9b:84:d7:16:68:d9:d4:a3:7e:d3:
                    3c:e6:ef:08:5e:6f:69:a1:e5:b8:51:0a:84:60:59:
                    06:24:a8:07:77:57:d0:37:bf:8d:07:d1:13:27:04:
                    ce:fa:fc:54:1a:9a:02:fa:8d:57:22:b8:57:21:0b:
                    5c:3b:96:eb:6c:0b:0a:6d:b9:a3:b7:e9:a4:d5:f5:
                    cb:c9:4b:75:60:00:9e:08:75:e8:ad:57:86:42:22:
                    d0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AD:08:CB:4D:0E:F5:CE:93:9E:92:BC:3D:1A:09:5D:0E:23:CA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5626922a-f6c0-3ac8-85a3-2fee286e4bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:af:a4:33:2e:55:9e:63:b0:ac:0c:8d:53:e8:1c:12:d6:
         bf:2d:b1:d6:1f:64:67:65:ef:86:e1:98:56:aa:4a:a3:16:9c:
         0b:c4:b5:de:4d:94:2e:4b:e1:51:79:08:dd:6a:fc:7f:99:3d:
         bd:c5:db:ed:40:e7:60:49:ac:85:fc:33:7b:97:62:35:61:e4:
         18:16:2e:87:cd:99:51:ba:95:6a:2c:12:01:34:6b:57:35:8e:
         d4:cd:4e:3c:34:74:2f:7c:bf:44:08:49:88:a9:9b:1e:cd:c0:
         c1:9e:e3:31:a0:9d:ea:55:b2:54:ff:7d:05:88:5d:5f:52:58:
         66:6e:e7:67:cb:3e:84:f9:9c:c5:c0:1a:b4:fd:fe:06:c0:f3:
         9d:aa:1f:ce:08:52:96:6b:64:30:c3:62:95:64:14:de:d6:91:
         d5:4a:95:a3:4b:95:61:2f:d8:3b:54:c7:49:00:08:a2:ed:dd:
         8e:c4:0c:20:ec:a0:31:6c:40:9c:91:bc:30:b5:13:b3:a1:13:
         8e:e3:a9:9d:9d:67:70:e8:7c:4e:a0:ad:41:2e:3e:45:d3:e3:
         59:85:37:6b:e6:1b:28:75:20:2a:bd:b8:46:6a:77:73:6b:61:
         bf:f0:8c:2e:b3:68:8f:8f:85:65:75:75:90:81:7c:9f:89:02:
         b0:7e:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:16:36 2026 by rpki-client