Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa
File:                     97323aa4-4c62-3939-8fc0-39273a9a2b71.roa (raw, json)
Hash identifier:          R3MZsor6DBAL2JfLZ3yZ9jjJsDt2JfHFLVw0cygSDVo=
Subject key identifier:   CF:E4:F2:A4:79:D8:5C:EF:25:68:2C:1B:7D:60:BF:D3:86:22:A2:EA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0912A4E36FECADA7ADEFCF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     149440
IP address blocks:        166.88.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:a4:e3:6f:ec:ad:a7:ad:ef:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=ff108536-fb61-40f2-8bbb-7c381f492922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:39:47:83:50:7f:b2:eb:95:62:33:c3:6d:
                    7b:e6:a1:18:05:7d:c4:02:3c:b3:55:e2:1a:89:28:
                    d8:23:43:59:6f:f6:50:5b:9a:13:d2:b9:7e:21:0e:
                    c5:2f:fb:c3:ea:ea:97:33:d3:cf:8c:c7:0b:aa:5a:
                    f9:2e:01:c9:ea:33:48:56:fe:97:a9:4c:65:c0:58:
                    0f:f3:00:4f:67:91:48:98:40:2f:85:81:89:15:17:
                    55:67:19:0e:c2:d8:c4:cd:3c:50:ab:2b:cb:53:a4:
                    70:bc:30:8b:24:d7:54:9b:29:4a:d0:ee:8c:9e:e9:
                    e7:79:d2:a2:22:32:c6:0d:76:2c:25:71:17:07:9f:
                    bc:fd:d2:ee:2c:d7:a3:f7:cd:06:42:15:d3:2f:0c:
                    43:dd:ec:68:b7:3f:56:cb:06:b2:63:67:d1:e8:90:
                    55:ab:d2:7a:9d:86:b5:52:65:bd:ae:d7:7a:61:97:
                    a2:ee:9a:da:40:2d:ee:c8:ca:c6:c8:b6:19:47:0f:
                    d8:25:c8:8f:75:01:b7:f5:c2:56:22:5e:d6:24:c5:
                    af:3e:2c:22:16:af:f7:6d:52:a3:b6:f4:27:fa:4f:
                    73:07:20:36:18:ca:36:7f:e5:35:85:69:eb:df:8c:
                    79:86:02:34:fa:dd:a7:80:97:58:9a:97:48:b3:7a:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E4:F2:A4:79:D8:5C:EF:25:68:2C:1B:7D:60:BF:D3:86:22:A2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d6:02:dd:ef:3e:ff:ed:ff:49:68:7d:7d:0f:58:31:23:24:
         e4:50:c7:4b:9d:75:ae:54:49:3f:2f:5e:a1:3d:e5:54:99:d0:
         08:c2:f6:1c:3a:d6:80:0e:9a:b6:d7:5d:70:da:04:b3:5d:b7:
         57:a1:7d:18:7e:03:8a:f9:94:81:e4:b1:32:d2:6b:e6:71:c3:
         95:4d:2b:c6:9c:90:63:dc:5a:28:e1:60:6a:5f:f2:3e:fb:36:
         52:22:08:30:ba:48:63:a5:43:e1:5f:ee:43:f4:75:d0:ac:41:
         02:46:66:16:69:c6:b9:a6:e7:41:3b:90:c7:25:8b:e9:45:d8:
         dd:13:c7:7e:26:6d:64:46:c1:58:a6:58:78:27:8b:42:29:2a:
         85:5c:bd:13:17:91:76:14:91:da:72:86:62:f6:60:05:b8:43:
         5c:60:8a:7b:9d:75:1e:76:c5:d6:77:f7:7f:fa:f0:b5:67:70:
         01:cf:34:8d:28:ed:71:14:f1:66:a3:4c:df:dd:5b:e1:46:32:
         76:2f:9c:bc:5f:8b:b2:3a:f8:ca:44:7d:b6:50:45:c6:24:19:
         5b:bc:ea:9e:de:47:95:d1:46:23:ae:79:d4:ba:d6:7c:56:85:
         9a:cc:e5:ae:fc:11:51:21:72:3c:88:ec:f0:c3:3f:b8:f7:34:
         d4:71:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:08 2026 by rpki-client