Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5a112fbb-fd4d-3dc8-8e88-52893394220a.roa
File:                     5a112fbb-fd4d-3dc8-8e88-52893394220a.roa (raw, json)
Hash identifier:          UXGhGfoXoAKO5tWMTiJGANL8Vt5cd0h+wo47+qt2vgo=
Subject key identifier:   83:15:6B:F6:A3:C8:0D:6C:A8:46:DF:B7:00:18:C2:03:5F:49:EF:40
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F3E47F653AF9101DF9ED20240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5a112fbb-fd4d-3dc8-8e88-52893394220a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     149440
IP address blocks:        166.88.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:f6:53:af:91:01:df:9e:d2:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=f833355c-2b24-45f7-aa0a-44dc60768c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:23:e0:69:47:27:57:d5:e5:5a:88:da:db:
                    61:90:ba:54:ec:7b:8e:0f:a6:b9:e7:da:34:50:2e:
                    81:ec:c2:e8:bc:ac:72:38:a2:c7:de:4c:1f:1e:46:
                    43:7e:29:74:21:a9:42:a5:b1:d3:59:40:24:b4:ff:
                    9d:84:bf:35:51:56:83:50:e1:46:85:54:98:c5:c3:
                    d5:5d:55:c7:4e:cd:4e:e9:52:34:03:00:7c:bf:cd:
                    68:2b:2d:68:d6:9c:53:42:cf:5e:a6:f7:7c:8e:50:
                    c4:0c:53:97:75:7e:d1:c9:8c:e9:a1:a1:7b:19:cd:
                    7a:0b:7f:1f:98:1d:71:e5:d4:11:48:75:54:70:94:
                    d2:9c:5f:58:76:91:a0:6e:db:71:02:1e:ab:79:65:
                    b1:01:f9:ab:27:0e:1b:73:99:d1:99:e2:30:de:85:
                    6a:4f:f3:a2:e3:91:0a:6a:c6:59:46:58:fd:bb:8c:
                    b4:c4:54:16:3a:e5:2a:ad:bb:d1:67:20:7c:f5:87:
                    91:ad:e9:1c:19:e2:0d:47:cd:d6:a3:69:89:fb:b6:
                    46:2a:7a:cb:49:d8:8f:e8:50:4c:cb:fa:80:fe:73:
                    6c:5e:4c:d8:19:66:26:3f:f4:63:dd:ca:8e:4b:b6:
                    e4:e2:a4:8e:ff:bb:82:c4:49:23:f9:d8:44:27:00:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:15:6B:F6:A3:C8:0D:6C:A8:46:DF:B7:00:18:C2:03:5F:49:EF:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5a112fbb-fd4d-3dc8-8e88-52893394220a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:9d:38:fc:8d:91:74:a4:d3:de:21:86:21:39:ae:3c:bd:
         47:29:b2:f5:53:61:86:3e:a4:7f:22:1c:94:d6:66:37:22:aa:
         fa:44:dc:71:fc:15:94:ea:a1:46:f4:7c:60:2c:f3:c8:23:40:
         59:ce:57:63:89:35:6b:f2:95:1e:b9:6b:2a:91:ee:10:1c:75:
         fd:74:ae:0c:cf:ea:31:86:25:fc:57:41:7e:5c:43:01:9a:80:
         9b:bd:a5:0e:5b:3a:31:f9:b0:3b:f9:f9:72:c3:fb:78:55:32:
         3c:25:64:a7:75:e3:ba:a3:d9:85:8e:fa:20:23:9f:d1:66:19:
         e8:a7:ba:55:cf:c5:cb:ce:2e:8f:67:33:c5:31:fc:01:74:86:
         66:c2:05:e5:ec:0d:7d:0b:ea:b9:cf:cd:7c:7b:5e:e1:eb:16:
         57:68:cb:81:36:00:03:66:75:99:16:e8:c1:69:c3:04:d7:89:
         b3:5d:0c:89:c6:2a:55:70:26:c6:9c:cf:bf:be:b1:61:f8:99:
         ac:88:f4:72:76:d1:6b:32:a6:21:42:3f:8d:3f:97:5e:70:a9:
         14:b4:05:75:a1:7a:85:e9:63:a9:8d:21:1b:79:1f:d8:33:5a:
         34:17:f4:15:32:3d:c9:99:96:d4:19:bd:18:e6:f5:4f:85:cc:
         74:61:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:08:09 2026 by rpki-client