Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7603b277-0777-39f1-be21-1cb367a7693c.roa
File:                     7603b277-0777-39f1-be21-1cb367a7693c.roa (raw, json)
Hash identifier:          rPhx/5jQugu2GbLYP+kxa5UkOfs4qLpU7hMrKdM1ij8=
Subject key identifier:   59:75:CB:A9:64:DF:E2:60:3B:57:87:84:36:ED:7E:4C:49:66:45:E6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D948AA996303DFF343C124600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7603b277-0777-39f1-be21-1cb367a7693c.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     2711
IP address blocks:        166.88.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a9:96:30:3d:ff:34:3c:12:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=a0e4fc20-0cd1-4337-a14b-e76df9eb866b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:2c:cc:f9:6d:41:67:14:59:84:84:3f:49:
                    12:70:59:84:a5:04:f5:d0:e4:53:d6:9c:0e:17:0c:
                    0b:89:3f:b3:60:10:15:dd:9d:7d:dd:e9:86:0f:fd:
                    a7:84:ca:67:04:45:26:68:62:07:d4:9b:ab:76:41:
                    a7:32:5b:bf:7e:23:51:23:c2:37:0f:d4:94:3e:24:
                    0a:c1:92:bf:9a:6f:0d:ff:07:02:d4:64:3e:3f:a5:
                    bc:bf:fe:a0:c2:a1:79:a9:7e:2d:7f:7d:e1:92:73:
                    b9:2b:31:40:85:12:67:71:6f:21:fe:23:47:19:03:
                    84:5e:26:77:ef:91:97:5d:87:2b:ef:2f:a2:b7:46:
                    61:f6:d8:78:e5:63:9c:f7:e7:d4:2e:6d:fc:4b:98:
                    3e:79:97:05:2a:5f:aa:64:56:61:ce:a8:35:8a:93:
                    64:8c:b0:74:b5:c3:19:3e:9b:8e:e2:90:be:b8:d8:
                    95:7b:f9:f4:1e:08:4b:94:18:a7:f3:fd:98:eb:ce:
                    31:bf:cd:8c:41:30:79:46:05:81:de:05:a0:73:55:
                    27:35:6c:0b:9f:b9:76:a9:fd:fe:66:54:f2:0a:89:
                    98:cc:ea:27:2b:bb:28:48:aa:12:b9:9d:50:95:25:
                    d3:0a:63:d0:02:d4:40:a6:47:7c:05:ff:a1:b8:d8:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:75:CB:A9:64:DF:E2:60:3B:57:87:84:36:ED:7E:4C:49:66:45:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7603b277-0777-39f1-be21-1cb367a7693c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:fd:77:01:aa:93:7e:60:ac:0e:33:a7:9b:44:3f:4b:8a:
         ae:e9:2a:82:4a:4e:e6:49:90:ca:29:a6:b4:4b:00:63:54:4f:
         ff:df:c8:c9:91:fa:f9:50:11:70:91:d0:87:90:0c:ec:ed:fb:
         63:25:96:c1:bd:d2:4c:fb:1a:25:64:01:9c:11:58:4f:32:24:
         d8:9d:19:70:54:33:b6:3c:28:5f:f0:b6:b7:67:79:8f:89:07:
         26:8c:4c:39:96:32:f0:82:e9:05:82:9a:08:52:ac:11:09:1b:
         51:bd:37:7b:0e:e1:eb:1e:5b:af:e2:ba:26:e5:5d:a7:df:91:
         ea:06:aa:d0:00:dc:8c:86:c2:59:96:fd:da:b7:07:b3:b6:d1:
         5b:4a:ae:fc:48:66:71:d6:85:5b:62:1b:e7:cf:d5:ee:5c:e0:
         d6:94:21:f9:34:66:69:14:9d:1c:73:42:b5:fe:6d:33:c9:88:
         1e:70:27:f3:63:05:4e:6f:20:ab:d0:b2:08:84:2b:e5:c9:95:
         dd:79:37:e0:62:1c:ef:94:a3:21:3c:25:0b:91:b3:dd:75:83:
         3c:f9:ab:24:40:97:9a:0c:68:69:08:03:43:f6:e4:5a:2e:eb:
         c9:62:1b:b1:d6:35:1e:33:5b:aa:53:ab:fa:80:4d:33:38:36:
         34:c0:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:09 2026 by rpki-client