Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b012649-4a76-393c-ad41-036c68f5cf27.roa
File:                     9b012649-4a76-393c-ad41-036c68f5cf27.roa (raw, json)
Hash identifier:          q4Ol/KZ1cyzDkdSOsQ8p1EtQ9GEqebLfy+fM9R2MxFg=
Subject key identifier:   3F:37:2A:1D:CC:AB:63:0A:89:10:14:EB:F4:38:38:62:6A:31:B7:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EFE121312D979D9BEF61F31B8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b012649-4a76-393c-ad41-036c68f5cf27.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     47690
IP address blocks:        166.88.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:13:12:d9:79:d9:be:f6:1f:31:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=e2435aca-c1ec-4c0a-bee9-c06fe6cc9a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:90:18:d4:c3:22:1c:b1:1d:06:25:d2:0b:88:
                    10:85:1a:69:40:6f:9a:e2:9f:84:8c:c0:e6:04:83:
                    fc:aa:95:36:30:7a:9e:a0:72:3b:46:e4:ae:c4:65:
                    17:8d:72:71:3b:62:13:7e:22:15:e8:b0:d4:64:d5:
                    e2:04:3e:df:01:cb:07:49:31:0e:52:b3:2f:31:90:
                    25:f5:fc:ba:75:90:68:61:b2:92:06:30:40:8d:b1:
                    16:65:fb:cc:b7:fc:59:1a:b1:2c:be:53:d1:e5:8d:
                    a0:24:24:18:55:ae:21:fa:c7:7e:21:68:a2:f1:01:
                    e6:d5:10:88:87:ab:8c:ba:8e:61:45:8d:90:41:71:
                    4c:e0:df:0b:fe:26:bb:7c:23:25:83:1d:e8:f3:37:
                    c9:48:6f:16:8a:1b:03:69:28:3f:e5:c8:a9:45:9c:
                    82:f1:66:74:ce:4a:9f:7b:69:10:27:32:6e:0d:6f:
                    c1:94:3f:89:40:8e:72:26:dd:21:8c:10:c1:0f:f0:
                    4f:d7:5a:1b:26:14:56:85:7c:f6:83:35:61:8e:d7:
                    97:76:8d:85:0b:74:84:66:32:6e:7c:79:43:0f:9b:
                    11:03:a7:ab:c3:34:79:9c:e7:28:3d:70:c0:61:16:
                    a9:fd:ef:b1:74:e7:fb:2d:cb:f3:f0:d4:69:b6:81:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:2A:1D:CC:AB:63:0A:89:10:14:EB:F4:38:38:62:6A:31:B7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b012649-4a76-393c-ad41-036c68f5cf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:61:03:8c:f0:4e:cb:17:70:95:d6:f6:f0:1d:69:61:b8:f4:
         79:e8:6b:17:63:37:d4:c2:5a:34:b6:75:76:04:68:24:29:1d:
         a5:0a:5f:b4:a7:a6:cf:13:be:35:ce:77:22:87:98:d8:bb:23:
         7d:a5:91:2a:3c:87:a3:9d:ac:7b:0c:88:9d:09:d5:4e:10:84:
         4d:c2:f1:0f:ea:ec:43:9f:74:d6:d1:3d:a7:92:8b:63:c1:ff:
         6c:18:b1:ad:62:ab:66:63:1f:1f:e0:18:2e:c1:fc:e8:56:41:
         36:0a:1a:2f:0e:48:5a:0f:6b:8f:75:c6:5e:23:7f:68:97:49:
         65:e6:4d:cc:f4:df:5d:83:f4:f8:07:5a:8f:69:4c:c1:b8:d6:
         25:85:e8:f2:ae:45:da:8b:44:ac:e3:ad:57:7a:39:12:a3:2a:
         f1:a2:dc:9c:86:91:55:bf:2f:62:26:45:fd:0a:1c:c9:b0:6c:
         58:63:de:2f:c3:0f:7b:28:95:c9:6f:2f:9c:0a:67:7c:b6:7b:
         a6:d8:f1:d5:cc:82:d8:f9:35:a4:90:ab:a3:7a:74:6b:c5:26:
         5e:17:ed:a4:32:b7:35:cf:d0:d5:04:54:62:a7:84:60:4a:21:
         06:95:4d:74:a7:8e:ed:92:f9:1f:36:9f:56:d1:2d:12:cd:e5:
         59:78:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:21:05 2026 by rpki-client