Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa
File:                     5ffd159f-4992-32fc-a662-70d42206aa8c.roa (raw, json)
Hash identifier:          nEROr8UOFAH2IYuC9gePPScPoCp0JtsZXWzL663ukcE=
Subject key identifier:   DB:E3:A0:57:8A:CB:93:C8:B0:98:8D:47:C9:4B:50:ED:C9:20:F9:89
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DCAFB108E42D411E1E3301400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     149440
IP address blocks:        166.88.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:10:8e:42:d4:11:e1:e3:30:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=82481670-379b-4c33-9448-80551d7299c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:00:3f:af:ef:60:1a:82:ad:5e:25:41:2d:
                    69:3c:f6:11:ce:2b:b5:71:75:b2:70:02:5a:15:1a:
                    a0:22:82:a8:5e:f0:34:ba:22:24:c9:e1:51:18:d3:
                    d9:34:4b:63:73:8b:13:6e:ae:64:27:af:6c:78:13:
                    7f:89:0d:97:94:7e:9c:2b:f7:92:e6:fb:d8:de:0d:
                    42:24:3d:8c:af:f7:b0:14:b3:f8:42:c7:9d:da:98:
                    d6:cf:e8:79:bd:f9:94:89:5f:44:d3:9d:d8:69:33:
                    ef:ef:10:c0:9f:c0:a8:e6:18:e2:12:2b:1c:73:35:
                    b4:18:a2:04:c3:68:ce:4f:36:9e:ca:8e:44:96:97:
                    6e:b6:2c:5a:a8:6c:7e:4e:8b:dc:a9:49:fa:86:3b:
                    29:82:ae:84:96:0e:c4:4c:72:04:41:06:82:bb:bb:
                    9a:e4:fd:83:fc:7b:c4:c4:e7:57:9f:b2:7e:e5:22:
                    cb:6c:ed:4c:c1:99:99:35:b6:a4:20:85:ef:28:77:
                    e9:5b:5f:4d:66:88:be:a9:33:4b:52:1f:48:01:8f:
                    35:39:81:1d:d7:f8:be:a5:33:87:bf:c2:83:69:6c:
                    d4:69:7b:b7:e8:6e:e3:b5:7d:df:aa:36:e3:59:d5:
                    ea:4b:97:d7:bd:a1:e8:3b:51:c8:b5:c2:83:d8:bd:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E3:A0:57:8A:CB:93:C8:B0:98:8D:47:C9:4B:50:ED:C9:20:F9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:c4:72:5d:18:d6:4f:39:35:20:70:a3:d7:1b:a5:01:84:
         f3:74:bd:cc:2b:fa:56:db:8d:c1:68:b1:4e:45:0f:83:ef:89:
         f5:2f:18:77:51:0d:8c:95:ed:b0:13:15:c2:d4:7a:c6:80:41:
         55:3b:23:26:bb:3a:80:0d:24:c2:da:37:ca:ae:f8:aa:1d:0e:
         86:a4:0e:a4:cf:30:d0:cc:53:8a:14:6b:fd:2e:b6:95:8e:b8:
         ad:3a:6e:8d:4f:c8:d9:5f:30:b8:34:da:1c:f9:cd:0d:c3:d7:
         69:5c:c6:32:c4:5d:47:fc:3b:ba:39:68:cb:7c:25:2c:d1:c1:
         fa:ce:66:2d:74:49:15:c3:49:c3:26:6b:2d:4d:4d:bb:71:5a:
         35:74:22:24:28:65:87:43:ec:92:98:e7:18:14:08:0b:d9:71:
         57:eb:0c:cc:98:5c:69:51:e4:47:c8:3a:5e:97:0b:50:26:5b:
         1d:c1:38:fa:bc:6c:1e:7b:50:56:3e:3e:6e:87:44:0d:44:d1:
         4f:33:89:ed:22:4d:10:36:5f:be:a4:1c:c8:1d:6e:f8:a2:5c:
         a5:f3:eb:28:ec:9f:26:88:6b:2f:34:56:c6:43:79:0c:5b:ff:
         6e:c6:02:6f:ed:cf:e3:72:f0:ef:19:28:ce:bf:d1:cc:f5:80:
         f7:43:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:42 2026 by rpki-client