Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4557400-3987-35bb-838a-a4e8b0662bbb.roa
File:                     b4557400-3987-35bb-838a-a4e8b0662bbb.roa (raw, json)
Hash identifier:          v7px6el5aLS/XmEwnHcy5oSOxCMAmB7Ipg2wnIx8s0Y=
Subject key identifier:   63:E4:F0:1B:2B:B0:44:ED:2A:5A:89:00:A3:86:D4:71:1B:02:64:F4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1F4A15A8B4D7D9A099F9F980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4557400-3987-35bb-838a-a4e8b0662bbb.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        166.88.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:15:a8:b4:d7:d9:a0:99:f9:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=bbcafa82-cdb0-4dfb-a2aa-0169e26079f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:84:77:97:97:2a:6d:af:e6:0c:a7:98:aa:
                    b9:cb:52:ee:6e:88:3b:b0:c5:b0:8e:32:51:6f:ba:
                    3c:dc:fc:96:19:e1:14:ba:2f:52:21:8c:40:c0:64:
                    ef:32:ce:cf:85:1a:08:26:cb:6e:92:0d:e7:c1:ee:
                    ce:c3:e8:b0:c6:6e:81:ea:ae:ba:04:6c:be:34:3a:
                    5f:ca:91:8e:6d:e4:f5:08:4f:b4:f4:ce:97:b2:c0:
                    b5:fe:22:0a:bb:6e:79:b7:35:9b:e3:3f:f9:32:0f:
                    e4:da:4b:b1:49:3a:1b:bc:d7:2f:94:56:0c:98:c8:
                    db:3b:7e:6d:a7:16:37:3d:f0:f3:5a:bb:c7:a9:be:
                    45:5d:96:24:9a:39:2c:3a:9d:b2:a9:68:a6:c7:06:
                    ce:79:26:fa:33:bd:06:c3:b9:44:ca:70:e4:3a:b8:
                    4b:47:57:7e:d5:21:bd:7f:7b:ff:b5:50:87:77:47:
                    71:48:75:2a:65:5d:e0:79:99:99:9b:f3:e2:5b:b8:
                    29:bb:92:95:50:33:a5:1e:b6:f6:15:0f:4b:a9:a6:
                    79:f3:5e:9c:30:4a:97:e3:42:f2:db:e0:38:b8:69:
                    eb:76:7d:47:a4:92:83:59:6c:58:e3:ae:5c:c7:6e:
                    f3:64:bc:28:16:d0:2d:e3:7c:87:8b:f1:5e:33:d5:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E4:F0:1B:2B:B0:44:ED:2A:5A:89:00:A3:86:D4:71:1B:02:64:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4557400-3987-35bb-838a-a4e8b0662bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:36:bb:c3:12:67:e6:01:7b:36:96:d4:9a:9d:10:f9:1f:
         32:1a:09:ec:a8:d0:45:05:5e:4c:84:bb:e1:16:87:3c:f7:0e:
         fe:d2:a8:a8:d6:4d:5e:fb:1c:09:58:f4:b6:49:38:df:9e:2e:
         23:74:80:44:d8:fa:6f:cf:dd:7a:0b:62:61:19:05:3d:37:d9:
         6f:e3:09:b9:de:54:1c:a8:44:a8:81:51:2e:5d:0d:9c:ba:3f:
         97:2d:08:33:61:fd:9d:30:ef:17:84:99:15:21:e1:af:80:5a:
         60:d1:2a:e1:4c:28:0a:b9:cf:11:ee:9d:b6:4f:78:ec:97:cd:
         2d:48:2e:b9:f7:23:b9:a5:81:cc:fd:98:fd:5f:e8:0d:b0:fb:
         b3:1e:39:2e:dd:b6:95:5f:00:70:98:a5:1d:b5:fd:97:98:b9:
         11:aa:c2:54:e8:88:8a:d5:85:ac:2c:58:54:67:22:c9:3b:65:
         b2:00:17:1b:49:b7:8a:5c:84:2d:db:12:ca:97:05:25:21:2f:
         20:eb:20:c4:47:79:80:0a:7f:50:d5:49:63:7a:66:1d:7a:b8:
         07:0d:0d:ee:97:3f:09:92:ad:c3:2e:a6:25:cc:dd:1a:29:aa:
         bb:17:ae:f9:20:77:db:17:4e:4b:af:0c:2b:0a:cc:b4:bf:47:
         77:e7:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:59 2026 by rpki-client