Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa
File:                     86f61352-45a4-3d85-9f07-9a73694b819e.roa (raw, json)
Hash identifier:          ls4wuG1ifuPeOLfH5LZQEU8K4gSVI2SQIKhv1qxIkb8=
Subject key identifier:   C4:11:B0:B7:2B:05:33:35:6C:CD:F2:C9:A2:6E:0C:D5:8A:A8:83:E6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D2644C97A1BAF4BE829736100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     9312
IP address blocks:        166.88.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c9:7a:1b:af:4b:e8:29:73:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=640851e2-41f8-49bf-b876-01fc888fefc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:d8:4e:ed:c4:71:52:54:1b:aa:62:d0:8e:
                    7d:49:78:60:e7:65:8e:ae:b8:10:51:13:bc:e7:a6:
                    05:a0:c6:75:7d:3b:ff:3e:ef:01:cd:81:6c:60:a2:
                    12:43:c7:4a:91:29:25:5e:24:bb:61:d5:bb:50:37:
                    75:32:58:51:89:1f:a0:61:c6:a3:24:27:a7:54:cd:
                    10:d1:65:88:e6:92:da:a7:56:85:c0:64:36:60:5a:
                    72:b8:be:66:0a:33:4e:a4:a8:0b:03:52:e8:52:0e:
                    17:e8:ac:15:a1:2a:54:1e:ee:5f:e6:97:5c:a0:95:
                    85:56:16:bd:95:93:b6:fb:e6:80:c0:b3:22:6a:77:
                    56:61:10:66:9e:2c:57:6f:db:75:f8:83:be:c9:26:
                    92:4e:93:57:e4:4a:9b:7d:d7:fd:24:4a:0b:a1:c2:
                    38:48:b0:55:1a:80:39:49:36:f0:df:0b:b2:0f:66:
                    58:0e:79:76:8b:c0:3b:ca:ba:c0:34:0c:17:ac:e8:
                    b7:86:90:4f:25:02:91:82:1d:0e:7b:f6:ac:dc:c4:
                    9f:5b:14:d1:f0:59:2c:64:57:fe:89:16:73:94:06:
                    86:38:2c:ad:0e:dd:e7:e3:b6:ca:79:58:17:d9:13:
                    c4:a5:ab:03:b8:53:6e:90:b4:57:8a:33:49:95:b4:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:11:B0:B7:2B:05:33:35:6C:CD:F2:C9:A2:6E:0C:D5:8A:A8:83:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f61352-45a4-3d85-9f07-9a73694b819e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:34:37:7c:90:aa:88:1a:6e:70:85:86:7b:4c:95:f2:f6:d4:
         f6:6e:81:24:be:ce:77:ad:2c:bd:c0:39:8f:5a:55:5a:96:57:
         9e:41:64:cf:69:d5:6e:b3:24:e1:bd:9f:26:6d:c4:91:e0:1d:
         60:a2:48:31:57:40:0d:7c:3b:99:72:8b:44:32:97:81:bc:e5:
         7f:c0:57:36:c0:a7:fe:de:7b:38:4d:f4:f5:5c:d6:0f:3f:98:
         38:22:cd:b5:0c:c8:78:9c:0f:a7:81:b9:af:b9:63:5e:45:80:
         5f:30:95:f1:a9:bc:39:2f:04:8f:9c:66:72:de:8d:e0:d4:59:
         59:10:6c:6d:a4:ca:14:2b:e0:a9:8b:b0:04:f4:1c:85:6f:b0:
         8d:ed:36:7d:c1:3e:81:e1:61:10:42:15:77:f3:01:f4:ed:e6:
         47:d2:31:81:84:fa:22:43:b2:e1:f4:d6:cb:c8:9e:0c:35:39:
         dd:58:fa:3a:43:0b:7b:f0:49:1b:d4:8f:df:0f:62:43:9a:86:
         dc:bf:3b:9c:e0:a8:c4:0c:15:c8:0d:b0:3e:80:dd:5b:a1:07:
         3d:76:5a:09:4b:93:36:af:70:f6:7a:93:0a:26:09:7a:18:36:
         56:29:d5:fa:3a:3c:c8:02:57:0f:21:5b:cb:ce:50:9f:3e:51:
         68:10:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:06 2026 by rpki-client