Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c6047c7-6d51-35a1-93ea-0b195d8125aa.roa
File:                     7c6047c7-6d51-35a1-93ea-0b195d8125aa.roa (raw, json)
Hash identifier:          69EW2A+R4Szd1Jpxnu2AP6caDY3uZ7PjqKM1/6+hU0Q=
Subject key identifier:   50:98:6B:B4:17:6E:5C:A1:4E:20:E1:24:5A:C3:04:5D:CE:7F:E5:0D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F4985C92EB64328DF6E09B380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c6047c7-6d51-35a1-93ea-0b195d8125aa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        166.88.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:c9:2e:b6:43:28:df:6e:09:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b3a06789-9f05-434d-b106-41fed2dc2a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:5d:29:5a:a5:82:50:86:11:e6:0a:a7:80:
                    3e:be:d7:80:d2:aa:75:f3:b8:0f:c8:9d:86:8a:ba:
                    78:ec:af:86:40:a9:a8:82:2f:3f:cd:96:e5:a7:af:
                    2f:77:bc:93:90:a4:6f:f5:9d:60:06:87:5f:20:20:
                    ce:00:8c:24:4b:38:eb:31:b4:af:3d:fc:a6:da:18:
                    53:5b:50:ae:f1:7c:9b:92:1b:89:96:7c:8f:17:35:
                    72:68:34:34:d6:74:02:16:ac:c5:37:42:25:3f:35:
                    8c:2d:e4:a5:18:ac:ee:7a:fc:df:d2:db:f3:ef:1a:
                    ca:1b:d6:3a:03:3d:ca:f2:73:d8:54:3e:89:9f:c8:
                    ce:32:e3:29:a3:e5:fd:77:56:93:09:28:2f:bb:b7:
                    ae:1a:6c:66:c0:5a:c3:81:5f:60:9d:0e:8b:f4:a3:
                    cf:04:0c:ec:91:d1:2f:5a:ad:58:0f:5f:92:f0:99:
                    64:c0:99:35:18:f8:6d:8a:07:58:54:fd:2c:b7:8a:
                    64:7e:7a:08:40:8d:28:e1:bc:4c:ed:d2:ff:2c:7a:
                    5a:f9:d4:69:ed:26:7a:62:6a:32:c9:55:ae:72:8b:
                    3a:b6:1a:1f:38:25:15:2e:fc:98:10:f3:0b:36:fb:
                    e9:b3:14:e0:7f:7d:74:8b:d1:37:e4:70:34:8d:ab:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:98:6B:B4:17:6E:5C:A1:4E:20:E1:24:5A:C3:04:5D:CE:7F:E5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c6047c7-6d51-35a1-93ea-0b195d8125aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:20:8d:6d:a5:a9:3b:6d:23:98:33:62:a6:61:08:c9:af:e3:
         9a:bd:a3:06:f3:a8:f4:b6:0a:e1:d1:9e:9f:14:54:bc:25:7d:
         d8:92:13:1a:6e:0d:32:7d:03:6d:08:98:4d:e9:72:e2:b2:b1:
         69:2f:fd:6b:1d:2b:1a:3b:28:e9:e3:46:4e:16:87:2c:e6:73:
         a4:17:35:55:f1:d9:3a:8b:e3:49:99:0f:ae:54:ed:77:72:57:
         bf:d1:38:1c:4a:40:14:2d:df:1b:a8:1f:df:41:b9:a8:39:56:
         36:3f:72:90:eb:9d:3e:db:04:9a:c5:14:c2:b1:50:e9:66:a2:
         7e:62:d0:eb:57:3a:00:6f:f1:5d:20:dc:f4:0c:0d:7e:12:8e:
         94:f9:7c:0d:56:44:09:fc:0c:89:a6:ac:55:2c:28:00:9c:86:
         02:5f:e8:a4:ba:81:e7:53:83:b0:da:75:56:a8:c4:3e:69:25:
         08:ee:bd:23:48:d4:22:c6:67:b1:47:db:17:88:34:cf:24:7b:
         bd:4e:99:b1:6d:c4:4d:a1:31:bf:d2:00:6c:65:45:5f:01:04:
         44:06:70:b8:d5:e3:79:fe:6c:cc:90:47:0b:07:60:53:27:e3:
         01:45:c4:69:bd:d5:2a:51:46:1b:b4:bd:fd:28:37:54:90:39:
         dc:a4:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:44:14 2026 by rpki-client