Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa
File:                     6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa (raw, json)
Hash identifier:          7GMF368mNUBBcRhZs3tQ4dW5XSWJg13xXKIoAQqYWE8=
Subject key identifier:   1A:EA:33:2E:42:7A:82:F4:FD:13:86:F3:EF:3C:AA:67:56:C9:DE:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1707E0F136C3A006F41AD800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     212238
IP address blocks:        166.88.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e0:f1:36:c3:a0:06:f4:1a:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=7672f783-4fe0-4a04-9a3b-de207f4bcbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:26:e1:81:d1:67:e3:35:56:8e:1d:6c:78:
                    37:f4:d5:43:4b:af:17:31:50:ba:e2:61:50:c3:fe:
                    d8:37:1a:b4:20:56:70:59:0c:9b:ef:fb:07:48:ba:
                    ec:d8:10:4a:f1:1f:03:07:6d:24:19:73:18:b2:88:
                    38:d7:82:5e:e9:68:c2:2e:34:51:5e:f4:dc:16:61:
                    e9:20:bc:1c:e2:3f:1d:ec:a5:96:07:45:59:36:a8:
                    3d:5a:b0:35:12:7d:8a:fa:3c:db:c3:e6:53:a7:b2:
                    d8:de:72:c1:21:07:7d:53:98:1e:d4:b2:19:47:c1:
                    27:e3:d1:67:5c:0d:3e:8b:05:b5:c4:f0:26:c2:65:
                    5a:ea:53:a3:83:78:6c:b4:ef:b9:23:52:75:e0:c0:
                    ae:ab:f3:1b:4c:64:4c:c2:ee:e5:54:bf:f0:8f:64:
                    6a:c3:a6:8b:5c:cc:2b:bb:0d:fd:0c:f3:84:7f:53:
                    60:ad:57:21:ba:2a:5a:80:1d:63:97:89:4d:70:60:
                    1a:b9:08:0f:98:7c:f5:1c:ea:38:d8:f6:b3:ea:f9:
                    80:fc:73:7e:32:ba:53:0d:0b:1f:26:78:b7:14:3a:
                    ce:88:82:5f:3b:a6:51:90:3e:e6:45:ea:3d:ef:60:
                    2d:21:55:63:d3:8e:4a:29:30:97:3e:7e:ac:c9:18:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:33:2E:42:7A:82:F4:FD:13:86:F3:EF:3C:AA:67:56:C9:DE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d80a6bf-93a4-39c0-a5bc-3bb9a51ed72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:db:2f:cf:b9:1c:a9:80:d9:01:3b:65:c1:01:c6:8b:86:73:
         67:c9:51:cc:82:1a:5e:8c:be:c6:df:ad:3a:88:b5:71:24:c3:
         77:5d:6e:42:68:1e:f2:75:1e:72:65:c8:01:23:3d:8a:16:9a:
         52:83:16:7e:d7:27:68:df:cf:24:34:3b:96:80:bb:5c:3b:a4:
         b8:92:ec:b4:35:e8:70:b2:b9:9f:cd:e2:29:8b:e7:1c:0a:73:
         f2:7f:ab:0b:e8:03:b0:98:49:76:d6:94:58:4c:96:b3:82:da:
         f5:6e:7b:18:47:40:93:31:99:80:20:a7:02:c6:44:9e:0f:06:
         60:dd:5d:1e:5c:8c:33:2c:5d:46:4b:78:05:4b:d8:53:03:f6:
         cf:d4:61:51:2a:de:b7:5e:00:57:f6:c6:0e:f7:d3:a9:67:ef:
         42:a8:61:6a:9d:23:61:06:1e:4c:22:2b:53:d9:eb:77:1c:4b:
         02:9e:84:c3:d4:0e:a5:81:aa:ba:33:cd:9a:e2:84:4a:40:83:
         c4:82:c8:4e:25:c2:ba:48:3f:3d:9a:fd:8a:84:1b:c4:0b:f4:
         90:b8:61:68:b7:1e:56:85:1b:4d:15:23:f9:17:3e:0c:97:1a:
         7b:1b:b4:18:c4:73:29:f8:11:11:49:44:ee:10:cf:01:49:c7:
         cc:8c:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:39 2026 by rpki-client