Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57d75f4e-58e8-3422-9fa8-9b1709b01473.roa
File:                     57d75f4e-58e8-3422-9fa8-9b1709b01473.roa (raw, json)
Hash identifier:          b6IvOQRGK3YFce2Im1CJWIKbnqzyWGeXd3jY9iznf3M=
Subject key identifier:   EE:2D:4F:8A:DC:CF:4B:76:A5:48:91:25:31:D1:FF:CE:F4:F0:40:BA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D80D59CFCD28435FFBC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57d75f4e-58e8-3422-9fa8-9b1709b01473.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        166.88.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d8:0d:59:cf:cd:28:43:5f:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=337e434a-929d-4173-8d40-5d6fb3a518d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:13:42:93:46:58:50:b3:48:36:06:63:bf:
                    d8:26:2a:d8:b8:9b:c2:d5:ff:c4:67:5f:c3:00:c7:
                    48:f7:0c:be:3a:54:6a:9a:a8:dc:a1:5f:fb:97:d6:
                    88:6b:b8:b2:5d:9c:57:19:3e:0c:82:d4:15:62:74:
                    b1:59:3d:4d:6e:43:74:a2:cb:e0:b3:44:d3:b5:59:
                    69:e9:2f:8f:41:0c:13:32:1f:96:8f:e5:a6:1b:6d:
                    ea:df:3a:7d:4e:07:2c:24:e8:0c:bb:7b:eb:d2:ad:
                    45:5d:79:5b:53:9e:37:91:87:96:02:d2:c0:b9:16:
                    f7:e8:03:c7:a2:d2:d1:0a:44:ba:ee:b4:18:88:6d:
                    80:2e:09:a9:cb:01:36:9f:6c:37:01:97:52:1c:8a:
                    0f:a7:59:7f:5c:47:cb:a4:cc:8a:1e:97:ba:e5:4b:
                    1e:98:7f:9e:cc:3f:89:c7:27:a3:ff:1e:55:16:31:
                    75:d9:df:0e:39:11:a8:03:a1:18:13:9d:bf:25:fc:
                    c7:76:fa:ad:45:ff:28:0a:62:73:05:a0:bf:ad:9d:
                    bc:49:4a:9c:23:06:02:d4:d5:fe:74:f4:47:69:1a:
                    3b:d4:c9:eb:56:2e:f1:8a:42:d2:fb:1d:35:84:7c:
                    19:0f:f2:29:1e:20:9e:41:04:2d:49:d0:7f:21:7d:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:4F:8A:DC:CF:4B:76:A5:48:91:25:31:D1:FF:CE:F4:F0:40:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57d75f4e-58e8-3422-9fa8-9b1709b01473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:58:a8:33:c8:ab:2e:bd:78:f2:3d:24:71:a9:e7:b3:92:
         f5:fb:45:30:96:02:63:b3:d2:bb:2e:ec:c7:93:6d:43:72:6c:
         65:e0:db:14:9b:1f:22:73:75:9d:c8:b4:d6:9a:3f:87:86:a5:
         46:c1:4d:c3:1a:c0:98:75:64:1e:a7:94:06:c9:04:a1:54:a8:
         24:9e:b8:7d:57:bb:53:6c:2d:7e:60:3a:c7:55:92:ce:02:b4:
         85:ce:6a:be:20:1c:30:9f:fb:26:67:cc:b2:45:0f:e9:09:d5:
         a6:44:49:b7:8d:ff:fb:62:b7:62:06:c3:34:4d:7e:36:7b:be:
         d5:ee:c8:48:dc:64:62:da:92:5e:57:b5:d4:a4:d2:f3:68:37:
         aa:36:e3:d2:f9:24:86:4d:a3:09:ba:6f:86:1c:aa:53:53:b4:
         36:9f:8f:22:1c:a4:f0:f0:bd:00:69:64:53:86:2f:69:0d:a6:
         7e:32:7c:94:1f:43:c0:a0:88:ec:b5:51:f1:c9:24:0b:81:66:
         25:9a:35:7a:c5:90:87:94:2f:49:42:f1:36:9b:1b:16:e2:38:
         a5:02:18:8a:6a:69:39:5e:bc:f8:69:b4:b9:2e:b8:27:4c:16:
         3f:1e:f6:68:25:38:24:e5:ea:ed:48:a5:30:c1:33:6e:01:f7:
         fe:96:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:38 2026 by rpki-client