Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3658677-03a7-3faf-8dee-b1e8f114471b.roa
File:                     d3658677-03a7-3faf-8dee-b1e8f114471b.roa (raw, json)
Hash identifier:          4BPb13x3z7tSqmovzI5EOHqlODUrFEvqcb7ltCJweiE=
Subject key identifier:   B3:72:B5:B3:00:22:43:BB:2C:FB:5B:46:28:85:3D:DB:8E:21:21:D1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D948AA6512F5CFA5A1F33DF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3658677-03a7-3faf-8dee-b1e8f114471b.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     212669
IP address blocks:        166.88.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a6:51:2f:5c:fa:5a:1f:33:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=142db05e-57df-4ef5-803d-94dd9e45c070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:41:33:81:b2:2c:de:b2:5b:92:21:27:07:
                    8c:9e:59:03:d3:f3:46:38:79:31:09:b5:c5:94:1f:
                    5b:b3:71:63:d2:c6:7d:44:ad:35:f6:81:27:d6:2c:
                    f8:77:f2:ec:7a:a8:89:13:ad:10:cb:9e:04:f1:44:
                    27:52:63:56:35:38:d5:3e:a8:9e:ca:2c:8e:ab:08:
                    81:3e:6e:88:03:f5:1e:a2:88:d7:fb:83:35:6c:ce:
                    dc:02:77:2e:03:58:55:c2:b3:b2:0c:9a:69:fc:9e:
                    97:21:b8:0c:c4:cb:b7:b0:0f:4e:b9:f0:99:44:08:
                    99:51:ad:80:41:de:ab:39:7b:f7:dc:c1:27:3f:5c:
                    e7:0c:d5:46:b0:a5:70:c2:d0:56:a8:98:ca:42:4b:
                    33:9c:33:c7:64:da:c6:48:a2:7d:f4:ed:83:86:03:
                    d4:80:c6:f3:3e:05:ff:3c:11:e7:cc:df:4b:df:22:
                    76:83:ec:83:ae:37:4f:9b:b0:2f:42:9f:50:d7:1c:
                    28:c8:cc:d6:5b:13:bd:a4:64:30:62:1f:ba:d4:97:
                    54:93:05:cf:ef:24:92:f4:04:9a:6a:6f:63:e4:eb:
                    55:76:64:26:f2:f3:b5:2c:14:b7:c4:b8:6d:d6:c9:
                    cb:f1:b3:b8:04:39:9d:94:b5:21:b2:e2:0b:4b:85:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:72:B5:B3:00:22:43:BB:2C:FB:5B:46:28:85:3D:DB:8E:21:21:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3658677-03a7-3faf-8dee-b1e8f114471b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:75:40:c5:85:09:67:4c:c2:48:b4:22:79:e0:9a:e6:75:
         fe:64:74:b0:7f:ab:ad:81:c6:7a:ef:01:5d:20:45:f3:91:2d:
         a4:67:77:bd:7e:77:23:b7:40:5b:22:6b:59:3b:9d:86:2a:f4:
         20:45:3d:97:5d:57:fe:7e:ec:50:98:cc:13:cb:41:1f:18:1f:
         60:dc:ef:e2:64:1d:6e:d9:f8:e7:d8:c9:c3:35:5b:ef:2a:df:
         04:6c:19:e8:04:71:a2:6b:8c:53:a6:ff:cf:df:ee:e9:2d:72:
         b8:a9:49:24:b6:e8:db:4f:4c:36:19:ae:05:8c:66:cf:ce:a7:
         2a:81:83:08:27:b6:7d:fa:f6:b3:7a:60:04:14:13:c4:e3:e8:
         15:2e:2a:78:4a:60:a6:6f:91:0d:f4:19:77:4c:97:64:c7:18:
         86:d7:f3:d6:d8:af:3a:1f:b8:51:43:f0:d4:5f:e3:d0:b0:4f:
         ec:f2:85:c9:38:48:7c:62:ca:42:3d:71:a7:dc:ba:1d:1e:d0:
         d3:56:51:1f:4e:99:11:37:53:81:36:53:99:a7:70:79:31:36:
         b4:79:2c:7c:52:36:fd:ce:5e:99:21:55:26:2f:52:09:26:9b:
         40:4a:fb:ad:46:78:0b:b7:57:c4:22:b9:31:cd:3a:b8:08:db:
         30:82:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:22 2026 by rpki-client