Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e5d4f98-87c5-3b4a-98e9-29492f6d4551.roa
File:                     6e5d4f98-87c5-3b4a-98e9-29492f6d4551.roa (raw, json)
Hash identifier:          mUutTYwucdXc5PMeTpToSjOvc9jxFlcE/wqlnl5dFHY=
Subject key identifier:   D3:AA:5F:65:1A:BF:A9:37:D6:40:FB:F4:0D:CB:F6:86:49:12:CB:50
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DAE4FC0CC9246E0429CDCEA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e5d4f98-87c5-3b4a-98e9-29492f6d4551.roa
Signing time:             Thu 30 Apr 2026 18:32:55 +0000
ROA not before:           Thu 30 Apr 2026 18:32:55 +0000
ROA not after:            Wed 29 Jul 2026 18:32:55 +0000
asID:                     44559
IP address blocks:        166.88.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:c0:cc:92:46:e0:42:9c:dc:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 30 18:32:55 2026 GMT
            Not After : Jul 29 18:32:55 2026 GMT
        Subject: CN=c4855a0d-d963-4186-b427-58469a5a49bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:e0:ea:8f:83:6d:bb:7e:01:16:4a:9e:12:
                    5b:b3:ed:a4:c7:ea:4a:e5:30:1e:c9:e9:d9:ac:22:
                    55:ba:3f:4c:72:cb:6a:6e:73:72:7f:c7:44:66:ff:
                    5a:a1:e9:0a:df:df:6e:fe:0c:e9:54:f0:d6:66:61:
                    6b:c0:22:3b:60:bc:42:30:aa:d1:60:14:64:f9:e1:
                    fd:00:43:9d:ee:31:74:90:db:ea:47:e1:08:c7:3b:
                    e2:33:f9:dc:08:48:27:5d:e8:15:57:af:9d:10:89:
                    c3:51:ac:2b:4e:e8:58:79:dd:75:bf:df:b5:4e:6d:
                    31:48:79:f6:ec:42:16:31:08:a4:c7:98:02:0d:47:
                    89:10:30:bb:e6:b0:3f:2e:f9:2c:2b:d6:80:a0:4a:
                    ca:78:44:14:c7:bf:ac:b8:85:bb:ac:eb:e0:12:f8:
                    98:b1:df:cc:46:64:0a:e7:28:32:95:12:49:93:31:
                    57:a8:41:43:a3:ec:7e:0c:91:81:5b:e2:09:36:d4:
                    b3:ab:42:ed:56:35:37:5a:e1:5c:d4:c5:88:ee:ec:
                    e1:85:c3:af:6c:84:09:fd:d9:63:9a:0b:10:63:69:
                    5d:a0:4c:b8:2d:35:74:a8:1d:2f:d0:96:19:93:c9:
                    63:c4:5f:a3:aa:d9:9c:50:f6:fe:ec:5c:43:32:2b:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AA:5F:65:1A:BF:A9:37:D6:40:FB:F4:0D:CB:F6:86:49:12:CB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e5d4f98-87c5-3b4a-98e9-29492f6d4551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:02:da:0d:a4:70:96:2e:0b:d8:dd:8f:bb:c3:9d:f1:0b:46:
         b7:e3:e5:ec:1a:f8:7d:b1:b1:04:21:40:be:6e:ff:97:17:64:
         80:04:ff:83:86:21:22:f5:d9:ff:86:e0:d9:f7:34:07:a3:8b:
         3e:a8:be:fe:e7:7d:a1:58:28:e5:61:78:80:47:04:00:c4:22:
         9b:a9:cc:35:83:2b:69:48:b9:12:a1:1e:77:f8:f8:53:5b:6a:
         0f:e5:9a:c3:a3:1a:7d:82:0c:61:a7:8e:7c:47:3c:97:59:a5:
         0b:e5:6b:ae:a1:c5:fd:93:1f:63:41:09:af:3f:97:d3:af:ac:
         c9:5d:4c:59:90:8a:05:36:ab:52:eb:3a:fa:43:6c:e5:c1:b2:
         96:8b:b7:f4:1a:33:bb:0a:3b:b9:fc:37:a7:d7:e3:6e:27:a1:
         f4:0b:69:31:72:13:ce:d9:22:33:e5:ce:0d:bc:cd:b0:8c:c0:
         6e:c0:f6:32:12:43:e5:47:8a:69:b6:98:59:20:16:23:2e:c7:
         85:90:7d:f6:af:59:80:c5:0f:03:3a:97:88:c6:2f:d7:87:66:
         a2:d9:ac:dd:70:a4:21:a3:8e:b5:ba:fd:2a:9f:12:1b:c8:bb:
         39:5a:e6:61:18:9a:9e:7e:18:6d:56:e5:08:d9:3c:81:3f:a8:
         02:64:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:23:50 2026 by rpki-client