Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa
File:                     603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa (raw, json)
Hash identifier:          sEKkeNgqGciIfuvbmibyAnKr+Mq11QT6eD1oDNAWIjs=
Subject key identifier:   92:4B:A3:94:09:FB:A5:00:E6:72:12:EE:19:AC:9C:3D:D3:03:0D:01
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D970F929CF0AD7AB2B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        166.88.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d9:70:f9:29:cf:0a:d7:ab:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=e37b25b6-4246-4b1e-b515-72599f762e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:6f:fb:0b:42:30:39:80:1e:65:22:36:26:
                    22:56:fa:c2:07:5b:e5:cf:28:55:1a:6e:d2:7d:1a:
                    02:3c:e8:17:c9:9e:3e:05:a3:35:da:7b:b0:9b:53:
                    7f:5b:73:60:e4:5a:bb:b9:9e:5a:d2:7f:e3:10:84:
                    d9:28:83:b3:7f:41:00:a5:c3:b5:d9:4d:73:1a:58:
                    51:33:9a:c7:0a:8e:50:be:c6:1b:22:2b:85:6d:2a:
                    4a:20:de:5d:b7:9e:f5:db:f1:52:0b:ff:a4:a2:65:
                    4e:8c:32:e8:08:a3:85:d0:53:98:47:f6:21:fa:ff:
                    59:04:28:2b:35:77:5f:7e:d3:e9:54:79:e9:21:e0:
                    43:55:dd:6a:c4:8f:2e:c2:bf:e6:ea:44:21:93:78:
                    11:f7:06:1b:b9:3c:46:5d:29:88:f1:2c:a9:6b:62:
                    9d:89:dc:f1:c1:da:20:9b:9a:fb:46:9b:7c:bd:3b:
                    b4:0d:7c:67:04:98:24:aa:00:b3:13:a2:d7:22:35:
                    46:f5:9b:67:a5:08:98:0d:26:57:42:3f:76:8a:58:
                    e2:4e:e7:c4:81:52:b8:71:21:3f:90:a4:42:2b:3a:
                    81:70:f8:66:18:6e:c1:d7:48:42:f7:bf:eb:c0:66:
                    c5:9e:17:7c:50:f9:7d:6d:9f:c6:08:66:ad:63:c3:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:A3:94:09:FB:A5:00:E6:72:12:EE:19:AC:9C:3D:D3:03:0D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/603ba43e-70fb-3c07-bfa1-6ab9d10f3ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:c3:c0:a9:c3:5b:d7:9d:da:b2:77:1a:3a:4c:9e:40:a5:
         06:d5:9e:29:4b:1b:11:00:b7:41:c6:43:d4:98:44:19:97:ab:
         99:12:8e:d8:b0:3c:e3:0b:b3:74:8b:f6:c8:94:08:8a:16:2f:
         32:e6:d9:de:9e:67:29:12:fc:65:ff:d0:40:ae:af:e0:17:ad:
         e4:8a:b9:e0:5c:aa:13:0c:58:36:51:5d:41:c9:2f:f4:53:de:
         2e:7b:46:92:98:42:c6:b0:d0:76:6d:64:71:7f:0a:b4:ce:2e:
         0c:e7:89:5d:90:bb:db:fa:d0:02:58:d1:48:11:16:c4:00:ac:
         f3:4f:97:d6:ae:ea:4a:27:d4:7d:01:2c:25:9e:b4:32:da:70:
         3d:78:e8:6d:d2:b2:80:e1:32:fd:a3:ce:fc:d7:f4:0e:2d:63:
         b4:6d:fb:2c:c8:c7:ff:33:9c:a0:69:0c:93:a5:47:cb:5f:97:
         c0:23:c8:5d:7a:cf:38:2b:64:a4:9d:be:1c:ff:9e:72:57:b0:
         49:e2:b2:3e:01:f6:71:fd:17:1e:85:e5:b7:ad:8d:f4:d8:3a:
         73:77:aa:8b:c7:fd:f1:c9:04:21:ad:ca:f8:bd:4c:80:e0:02:
         23:eb:7b:cf:90:af:1b:37:a2:ec:0f:a5:ae:1e:12:63:c4:eb:
         27:ed:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:49 2026 by rpki-client