Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6eecd353-1a73-3923-86fd-1df9aa29430b.roa
File:                     6eecd353-1a73-3923-86fd-1df9aa29430b.roa (raw, json)
Hash identifier:          mY1eTwvBO00nDZlWXa6kNM3rAdrJZVQqWiG6ceIHzBo=
Subject key identifier:   61:18:A2:1E:38:F4:70:6F:0B:C1:8C:C6:27:84:6E:41:01:29:79:3D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D85572DEBF8F776A5780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6eecd353-1a73-3923-86fd-1df9aa29430b.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        166.88.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d8:55:72:de:bf:8f:77:6a:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=0a269ebc-1573-4ffb-be1d-f61bd8314ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:f4:7f:6f:68:af:d1:a5:3b:bf:b6:71:aa:
                    89:59:5b:c5:d5:2e:6a:3e:75:a7:2a:a9:02:c3:aa:
                    5a:4c:71:bd:7f:04:fc:bf:50:29:28:04:d6:06:b2:
                    e8:80:11:d0:2d:ff:42:48:b5:00:03:46:2f:c3:d6:
                    ce:1b:f3:9c:bb:f8:eb:fa:ae:c3:20:a2:0e:18:b0:
                    9b:ef:7c:c0:d7:bf:af:c8:91:a5:35:45:8e:71:ee:
                    f9:2e:e7:67:f6:89:3a:da:a9:f8:87:2d:8e:f6:1e:
                    71:6d:58:7b:7b:57:18:88:62:7a:ae:6e:c6:a5:48:
                    f5:3a:6f:6e:8a:c2:09:aa:cf:7c:85:ee:d9:68:4e:
                    76:e4:31:a5:0c:8c:6d:79:ef:e8:3f:d7:b2:cd:1f:
                    aa:d4:f1:f6:eb:ff:c9:fe:c5:49:66:cc:7c:52:1a:
                    40:42:3d:44:a2:0e:4f:d4:7e:eb:29:f9:5e:99:be:
                    26:98:22:f1:26:53:1a:d6:20:a6:6a:d1:e8:42:41:
                    a7:04:91:ff:fa:b7:cc:85:2e:a8:88:40:00:be:e1:
                    83:70:89:5c:ba:5e:d8:08:fc:45:23:cf:bc:ce:35:
                    66:70:d1:8b:d0:09:83:e8:88:4b:ac:18:51:1e:49:
                    c1:70:70:90:f4:4c:17:0a:95:99:30:87:44:b3:ab:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:A2:1E:38:F4:70:6F:0B:C1:8C:C6:27:84:6E:41:01:29:79:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6eecd353-1a73-3923-86fd-1df9aa29430b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:55:72:10:be:fe:62:dd:ea:3f:45:c2:4c:46:17:9c:2a:2d:
         81:2c:88:f7:18:ca:fd:64:5e:3d:2f:73:90:44:7e:ef:5a:8c:
         aa:04:a9:1d:f8:42:88:bb:f6:79:36:9a:91:88:fe:61:81:c7:
         2e:d5:02:ba:8f:de:6d:d3:cc:59:ab:37:37:3e:6a:85:c3:e0:
         fc:cf:6b:4a:d4:5d:39:55:b3:70:27:ec:f5:8c:4a:af:29:38:
         75:d5:60:d3:f7:5d:00:48:1c:43:91:20:3c:fe:1c:4b:73:e6:
         5f:70:fc:78:d8:7b:e4:c4:b6:95:47:5e:17:ed:a0:d2:01:76:
         8d:88:67:27:e3:91:9e:e8:c4:39:1c:86:79:07:95:2e:1b:81:
         76:55:55:2b:d3:2a:8e:de:8c:f6:1e:f9:c0:4e:84:5c:6f:51:
         f9:25:8f:3a:32:f0:51:06:e2:6a:ed:7f:6b:49:6a:84:d6:a5:
         f4:f7:f9:81:1a:fc:99:4d:13:41:9f:a8:48:94:d0:70:d8:3d:
         c4:bc:f6:ca:f1:c3:d7:fc:4d:5a:f7:15:1e:9e:d9:31:3b:b3:
         1b:b6:f9:c7:f2:e7:08:a5:54:53:02:a5:54:f9:77:33:13:e2:
         0a:df:b9:fb:b8:e2:8f:c1:59:14:21:61:af:c3:a6:00:b7:24:
         9b:d8:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:49 2026 by rpki-client