Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f631668-f40c-3c9e-8110-52ba34a51c54.roa
File:                     5f631668-f40c-3c9e-8110-52ba34a51c54.roa (raw, json)
Hash identifier:          9c5J4N0utTJ+aaQusFeR7+4JaIivcKcdhVBqXPlx0KA=
Subject key identifier:   FB:64:08:B1:05:64:C2:37:EE:1B:D5:A6:4A:FE:E6:72:84:AD:F0:FB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F305277ED542E6F168816F340
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f631668-f40c-3c9e-8110-52ba34a51c54.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     36086
IP address blocks:        166.88.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:77:ed:54:2e:6f:16:88:16:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=7732fc66-e44a-4c2b-8921-610f90f76fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:4b:b2:50:9b:a2:e3:39:22:9a:98:44:b3:
                    0d:b8:d5:14:fa:fd:46:57:0f:cd:aa:c6:a4:ae:0a:
                    6a:f4:e5:a2:d3:33:a1:5e:a0:ff:4e:ac:ad:93:e6:
                    b8:56:a2:99:17:7b:ed:5d:7e:0f:bf:89:27:d0:80:
                    44:c5:e0:d4:7e:1a:14:f9:4f:05:d1:77:5e:51:cb:
                    c3:fd:ff:13:15:6c:c4:d7:6f:5b:67:95:0f:ca:65:
                    e2:f3:f7:4e:3f:ad:62:de:75:aa:69:2b:7b:f7:7f:
                    91:b6:ad:6b:9e:4a:be:31:5a:f7:20:6d:b6:27:62:
                    a5:5e:77:c6:10:dd:9a:28:83:b7:4b:6a:71:b7:e7:
                    1e:1b:d9:0d:08:da:74:e7:91:95:1e:bd:77:f0:ab:
                    ed:61:e0:6f:13:fa:e0:bb:e7:7e:a3:7c:40:03:10:
                    16:3a:59:ad:bc:6e:9d:4f:32:80:98:aa:ec:86:2f:
                    cc:8e:e0:ea:3e:2a:84:fd:c4:79:f1:1f:e5:87:f4:
                    c0:ee:a6:e4:c5:80:9b:b2:eb:ab:c7:2c:4a:7f:5e:
                    1d:65:f3:b4:a5:bf:54:d6:41:77:a0:3b:dd:b4:13:
                    d5:dc:ea:bc:28:5b:6f:fa:68:eb:db:6d:57:9a:f9:
                    00:74:23:7f:57:7e:ba:53:e9:30:b0:9e:d9:78:57:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:08:B1:05:64:C2:37:EE:1B:D5:A6:4A:FE:E6:72:84:AD:F0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f631668-f40c-3c9e-8110-52ba34a51c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4e:a2:e0:ec:c4:80:e1:47:20:80:b2:7f:c2:a8:bc:42:b2:
         f4:49:a3:f2:37:d1:62:20:0f:f7:5e:de:e6:70:3a:d6:53:cf:
         80:74:f5:29:96:cf:cf:53:a8:1a:cd:b6:c5:56:01:27:ca:d8:
         8f:de:5e:38:d3:43:31:b9:44:a5:d1:f0:0e:56:4a:df:fc:3f:
         da:d1:28:70:54:fa:c2:fd:c5:ec:65:b2:3c:3e:7f:c7:b7:e9:
         53:04:8e:91:65:5e:46:cb:ca:00:5f:af:24:62:ea:4f:1d:ce:
         7d:45:80:f9:59:2c:82:c2:0d:46:86:4c:09:1b:c0:47:c3:b4:
         f7:d2:67:98:93:18:c5:c3:d6:ea:e8:b1:c0:d8:72:fa:bc:34:
         34:21:75:43:f3:61:75:f6:cb:7c:5b:ce:bb:95:00:a5:6c:c2:
         a1:98:b9:bb:4e:54:6e:01:fd:b4:fa:9a:b4:47:9f:4e:20:b6:
         b5:d2:ca:ca:ba:c2:d7:e2:52:18:e3:91:33:55:88:ab:7e:03:
         b3:6f:45:36:26:67:b8:a7:59:f0:f6:78:5e:17:23:a7:25:39:
         fd:1c:77:a2:46:8b:c6:39:47:59:a2:69:9e:4e:6c:15:92:35:
         da:5f:c6:04:d3:b7:b9:15:1b:64:95:0d:49:c8:6e:2b:ba:21:
         fb:6b:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:33:40 2026 by rpki-client