Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c716a4d-8ff6-3e59-b7c8-a6f9bceb0059.roa
File:                     7c716a4d-8ff6-3e59-b7c8-a6f9bceb0059.roa (raw, json)
Hash identifier:          cOO0C+D4JOD8ZhhmYC9P5Z0LfK0TZU73lnUUx/Dr/+A=
Subject key identifier:   37:CF:DF:7D:D9:41:B6:21:FA:9C:06:03:D3:DC:77:CA:8B:94:A6:E9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D27AACB76EF8ED76583CBE040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c716a4d-8ff6-3e59-b7c8-a6f9bceb0059.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        166.88.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:cb:76:ef:8e:d7:65:83:cb:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=4ed3b5c5-a6d6-4988-afc6-e1508f3b1576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:49:a2:a2:fe:3c:4c:1b:0e:f2:6f:88:9c:
                    61:bf:e6:f4:5a:f2:02:51:b6:d4:70:17:66:83:e4:
                    89:6e:19:6b:8a:a7:5b:8d:bb:f5:19:a9:d9:a3:fd:
                    1c:a1:8a:59:01:ce:11:73:2f:59:b3:0c:3c:d4:28:
                    32:98:3d:6a:38:a7:90:11:51:9f:4a:52:bf:bd:b0:
                    d0:ae:07:2d:fc:1e:39:f9:a5:17:7b:a7:e1:c9:72:
                    37:2b:89:ed:85:e2:71:3f:77:4b:eb:d6:41:cc:2e:
                    db:46:96:1b:af:6e:22:83:db:f2:4f:93:b3:2c:58:
                    03:19:e4:76:b6:19:09:6f:83:aa:43:7a:b6:60:cb:
                    9b:a0:bb:ff:20:45:fe:44:45:95:fc:91:de:c5:65:
                    d6:52:af:46:6a:f3:9f:23:73:c7:15:38:b9:08:13:
                    28:a3:ea:34:b8:6f:50:e4:0d:5a:88:b1:a1:ed:72:
                    65:f1:28:5d:b6:6b:b9:6f:fa:81:2f:b4:10:da:3b:
                    91:9e:62:c0:74:65:9b:37:84:20:22:14:a6:de:92:
                    48:88:22:0b:e3:9d:af:23:92:00:7b:63:b0:f0:ea:
                    02:f8:ad:82:3f:25:24:ea:99:5e:1a:7e:9c:be:1a:
                    53:ed:87:52:89:78:88:f9:aa:f1:1c:b0:54:1e:ef:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:DF:7D:D9:41:B6:21:FA:9C:06:03:D3:DC:77:CA:8B:94:A6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7c716a4d-8ff6-3e59-b7c8-a6f9bceb0059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a7:8d:11:99:4a:f5:77:9b:4a:9e:97:c1:cf:ad:91:09:f1:
         d3:69:1e:76:da:6a:e6:9c:f8:b5:99:9f:84:7e:40:aa:44:c2:
         9d:48:07:5e:91:41:b1:32:20:03:a4:00:1a:ef:4d:55:c5:af:
         71:a3:df:79:aa:bf:c1:6e:b5:f4:72:16:77:f2:9e:ef:81:5e:
         77:74:72:a9:cd:e8:9f:df:a3:1f:60:19:ea:c0:41:7a:84:0c:
         a3:3e:d6:4f:99:25:b7:45:2d:9b:44:8c:6b:6a:03:6f:b7:67:
         da:ba:fa:4c:50:1e:69:cd:1e:af:a8:b8:0e:6f:5f:7e:ac:84:
         89:96:b2:81:7e:00:bc:49:a2:e2:39:29:f4:d7:37:93:94:91:
         a0:f9:9c:4e:65:a5:1b:3b:d5:28:3f:ee:d9:2a:7c:82:9e:dd:
         cb:c0:f9:50:f8:bd:99:f9:fb:f7:da:a2:ee:52:6f:92:c4:67:
         db:92:8c:a4:77:34:b0:15:2d:ba:07:02:b5:f8:67:2b:b0:22:
         9a:ad:e1:34:08:fe:5d:85:9d:49:68:05:d1:3c:3d:62:28:15:
         01:8f:85:83:19:6d:56:22:e2:58:90:a2:55:64:f0:07:23:6a:
         73:9a:68:0a:62:a8:5d:cb:72:6b:26:1b:98:b2:1c:35:b8:4e:
         27:bb:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:17 2026 by rpki-client