Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa
File:                     cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa (raw, json)
Hash identifier:          y4z4wcdkSvrqIHdTKzYpV4bbASJVIjHk3/Eakjnk988=
Subject key identifier:   7B:BE:D5:67:3B:D6:9C:23:D3:58:AC:67:78:8A:51:98:80:AE:AE:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D7C063602EA488CEA300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        166.88.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d7:c0:63:60:2e:a4:88:ce:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=15411279-3fb4-43bb-91f1-631a36248c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:f4:9c:e6:a8:0c:76:d7:29:d2:8e:b9:d8:
                    94:8d:bf:79:07:fe:83:3b:e3:fb:fa:96:05:da:f8:
                    ed:ff:78:2c:76:76:8b:00:37:61:2e:97:1c:af:12:
                    6f:07:8c:2b:77:2f:73:09:99:19:fd:72:f5:a0:1a:
                    ef:d6:2a:99:11:97:ac:94:8e:94:c2:cf:61:c1:6a:
                    dc:ac:a8:12:13:24:ab:91:dc:42:2d:d8:53:1f:10:
                    97:0c:96:45:3a:1e:8e:b9:0c:ed:16:a8:98:dc:2d:
                    e0:e2:46:67:84:af:1d:09:19:1f:ed:61:6c:11:fb:
                    07:70:42:af:08:3a:ba:9e:aa:95:d9:2a:d0:f8:d7:
                    57:5b:0c:df:f4:a5:26:5d:4a:ae:93:7c:bf:d7:fb:
                    a9:3c:d2:6a:e3:65:2a:fc:81:15:27:40:f8:56:52:
                    55:7b:ce:d0:2b:55:db:ac:e0:7c:1e:3e:da:c0:29:
                    ac:87:fe:e6:a1:85:33:70:9c:80:fc:d2:6d:ba:1c:
                    5e:a3:2e:60:05:70:71:8f:4f:76:cf:9d:96:c8:89:
                    2b:6c:8f:be:26:f6:09:3d:d1:c1:1a:d6:ab:17:1e:
                    d2:df:8b:6e:eb:58:7d:cf:be:40:37:26:d1:03:be:
                    a9:e9:a6:cf:c8:22:f9:04:d3:d4:6d:77:1e:d7:fa:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:D5:67:3B:D6:9C:23:D3:58:AC:67:78:8A:51:98:80:AE:AE:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:ce:45:07:dd:0f:f5:39:45:cf:0d:34:06:41:2b:91:05:
         7e:3a:3d:77:7c:8d:63:4a:4b:fb:10:57:75:91:6d:83:f3:8a:
         8e:d1:22:e1:29:e1:61:ed:52:c5:4c:59:de:6e:73:9d:30:a8:
         05:54:ff:e0:ec:cf:4a:a0:63:0c:bd:fc:7e:61:44:83:8b:73:
         7c:1a:b9:8b:7b:66:a8:ad:ef:ee:d7:43:9a:47:7e:45:f7:29:
         55:ae:0b:bc:33:4e:8d:62:ce:f2:b2:75:78:49:53:b8:73:c2:
         6d:3d:ca:94:73:df:df:54:d8:bc:80:67:e4:3e:d3:18:6e:1b:
         6d:89:ec:e6:b8:fe:89:60:53:7a:a5:3d:ba:40:53:14:6d:0f:
         4c:f3:a5:c3:60:8a:0c:2d:2a:a6:83:b8:1c:7c:12:39:1d:19:
         6b:75:8f:ee:26:81:d3:a4:d9:da:3f:0d:92:e4:fe:88:1a:02:
         f3:93:52:91:22:4d:58:db:20:69:76:a2:6b:ee:69:ec:5d:21:
         be:04:c5:f7:9b:a0:65:d0:57:1f:0d:74:1b:6d:f2:7e:d1:d9:
         75:99:96:31:bc:a2:7e:7b:2a:c8:d3:38:0e:0d:e6:5d:7a:ac:
         07:2c:bd:0c:c6:f5:ea:1d:93:bb:d2:71:4a:06:2e:e4:c3:27:
         7a:7c:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:14 2026 by rpki-client