Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/676dd7d0-c2b5-3462-bfef-bdb5862d90a1.roa
File:                     676dd7d0-c2b5-3462-bfef-bdb5862d90a1.roa (raw, json)
Hash identifier:          n6QpQws2hA4OxCfc/a/YiKqnoO1M0zHi2t9vZvpXWcQ=
Subject key identifier:   C1:56:98:3F:84:30:DA:F7:F2:85:B6:CE:33:B3:99:D2:1D:26:96:28
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DAE4FC087B4079AE725D845D8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/676dd7d0-c2b5-3462-bfef-bdb5862d90a1.roa
Signing time:             Thu 30 Apr 2026 18:32:55 +0000
ROA not before:           Thu 30 Apr 2026 18:32:55 +0000
ROA not after:            Wed 29 Jul 2026 18:32:55 +0000
asID:                     44559
IP address blocks:        166.88.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:c0:87:b4:07:9a:e7:25:d8:45:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 30 18:32:55 2026 GMT
            Not After : Jul 29 18:32:55 2026 GMT
        Subject: CN=5e906e34-4370-4085-aa68-8b56e55d1e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:86:39:82:e3:2b:f0:4d:35:6a:bd:50:b1:
                    19:e3:7c:2b:44:9c:77:07:bf:15:3a:b6:d3:9c:78:
                    06:04:36:f4:7d:79:d6:00:6e:b6:af:3a:f3:14:2d:
                    39:d1:30:6c:85:aa:d0:95:f4:d2:c2:ed:99:29:5d:
                    a1:35:8b:89:ec:a2:5b:14:c7:28:3f:1d:f6:ee:4b:
                    9a:dd:bb:e3:e2:c3:16:2a:08:14:fd:b8:76:38:71:
                    3e:0b:b0:94:d3:72:3e:ed:e0:ef:77:08:3e:19:a3:
                    fb:b9:4f:03:74:98:a1:e6:16:7d:dd:2d:f3:ca:74:
                    e2:e9:92:42:d3:0d:74:84:20:94:47:a9:96:00:46:
                    89:a2:43:d1:9e:8d:7c:da:94:af:10:f8:c6:37:11:
                    9d:d2:76:70:b7:7f:0a:6e:37:f2:3a:25:d6:a2:61:
                    7e:f3:a5:88:a2:07:4b:fb:69:df:b2:0d:1d:5b:56:
                    e3:a3:2f:07:07:c0:6a:4d:c0:88:98:a4:d3:4f:7e:
                    a2:e8:7e:03:59:ee:04:28:0b:dc:93:60:d7:d0:ca:
                    e1:9d:20:41:83:12:6b:c0:2b:80:8a:a4:26:dc:57:
                    d9:d6:44:44:c7:b5:63:f9:85:40:32:23:2b:63:bb:
                    a1:31:4a:33:b3:a2:ef:b6:ae:b5:be:3b:89:fd:5b:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:56:98:3F:84:30:DA:F7:F2:85:B6:CE:33:B3:99:D2:1D:26:96:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/676dd7d0-c2b5-3462-bfef-bdb5862d90a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:28:02:b9:a2:e9:0d:60:fc:d6:dc:7b:b8:79:d1:f6:85:
         eb:b4:2e:12:c2:1a:fd:2a:c1:7d:75:c8:da:13:ed:df:20:c9:
         e8:61:f2:1f:10:19:98:57:59:d8:71:b3:1c:86:0b:67:bc:e0:
         a8:59:94:c6:c3:d4:4b:d9:c8:cb:28:31:68:15:d5:bf:16:61:
         b1:a5:5f:7f:77:43:30:72:c0:39:43:fc:cd:50:c9:b0:3e:af:
         d1:7f:8c:f4:da:6d:97:f3:81:c0:55:7d:a2:42:1e:ce:bb:15:
         5d:29:d8:6d:3d:54:27:be:ff:43:c8:44:32:d1:48:87:43:d2:
         94:4d:eb:58:b3:30:31:a5:63:ac:6b:03:0e:83:8d:d6:2e:ff:
         27:57:a5:f1:ad:4f:75:16:02:1e:ac:40:60:00:df:f9:1e:76:
         8a:d7:7c:94:d1:c0:3e:54:74:76:c2:0c:8c:67:74:9b:fe:f0:
         f1:39:b5:c0:00:49:ea:f9:fa:2f:14:b7:de:ef:94:a0:49:3a:
         5d:b8:69:ad:a0:d5:fa:6e:84:80:59:92:ba:ad:ae:e9:6e:69:
         eb:54:4a:29:9a:46:d7:0b:82:74:e0:8f:83:02:64:27:b6:b0:
         ee:72:79:b4:83:b0:4b:2d:51:43:e0:6a:75:c9:8b:53:dc:d0:
         b8:54:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:58 2026 by rpki-client