Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e970da33-abbb-35b3-9c2d-b1f820ba731e.roa
File:                     e970da33-abbb-35b3-9c2d-b1f820ba731e.roa (raw, json)
Hash identifier:          hDA/IIGclBZd5es+TpbU1Oa4yfIR/caIilI20c+aHmw=
Subject key identifier:   95:C5:47:84:47:57:DB:AF:04:85:83:DE:D6:1D:DE:50:BC:B6:43:20
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E2F6DD930D4AFA7B09AD0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e970da33-abbb-35b3-9c2d-b1f820ba731e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        166.88.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:2f:6d:d9:30:d4:af:a7:b0:9a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a7dc1afd-45ce-49ee-b72a-da70a354b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:72:aa:cc:cd:32:b6:1a:51:d1:0a:83:ce:
                    16:82:bf:ac:74:70:d3:42:c5:45:ac:2a:99:89:ce:
                    58:31:34:a0:99:12:00:23:87:cf:17:ba:3e:44:21:
                    6e:fe:17:f3:47:e4:f4:82:32:06:a9:3f:70:a7:03:
                    85:db:c8:1f:a1:d8:e1:47:82:22:99:e7:cd:37:14:
                    82:b6:be:ab:f9:63:7c:fa:4f:b8:1d:c1:5e:88:aa:
                    f9:d2:1b:bb:f7:9f:d4:02:e5:e7:a0:c7:0b:47:00:
                    92:4a:a9:9a:d0:be:ed:cb:fb:1f:78:ce:f0:ef:cc:
                    3c:09:f3:4a:a2:13:6f:fc:a9:48:52:21:09:42:37:
                    72:0d:d5:72:21:4c:80:cc:94:f2:43:7d:a2:bb:be:
                    84:70:10:57:39:c6:84:9a:8c:0e:04:12:41:a7:88:
                    b8:99:e7:6a:e3:6f:77:b9:98:f2:96:ee:74:4b:72:
                    29:8d:7b:76:25:50:fe:57:c3:f1:76:35:ed:ca:24:
                    00:45:08:28:6b:a9:6f:bd:50:2d:c1:c6:de:ad:f0:
                    af:5a:7d:fa:40:91:a0:19:0e:b6:e6:35:17:16:9a:
                    7b:36:68:37:45:7c:31:9c:5d:b0:43:a1:a3:54:f1:
                    71:33:4c:4b:8c:dc:e3:c2:e9:98:58:e0:90:7b:dc:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:47:84:47:57:DB:AF:04:85:83:DE:D6:1D:DE:50:BC:B6:43:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e970da33-abbb-35b3-9c2d-b1f820ba731e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:29:3d:d2:ae:cb:a5:1a:35:06:14:ed:91:5e:15:82:73:
         69:4a:bb:26:80:ff:38:18:27:91:24:b9:ee:c7:d6:75:80:fa:
         1e:c5:e0:b9:df:3f:32:da:b9:ca:d2:79:93:ac:a6:a0:30:29:
         bb:b3:7a:70:08:a4:09:9f:ca:fc:2a:1d:12:b6:f9:f3:ec:b5:
         43:f3:7a:e4:7e:89:ed:41:46:d3:b5:82:5e:82:48:4e:a2:d3:
         30:d6:9f:46:76:55:06:d5:18:d1:2e:cc:0e:91:e4:9a:fd:4a:
         02:ec:79:85:52:f0:c1:2b:ea:2a:8e:99:b5:6a:a0:a8:1b:4e:
         8e:01:8a:82:f9:36:44:e6:04:aa:55:81:4a:cf:dd:30:2a:d3:
         b3:42:62:59:31:68:6b:a7:92:d2:7e:29:c2:3f:a5:a3:75:2b:
         ce:92:31:b8:d4:a9:7b:32:e7:2a:ce:1b:da:54:92:95:5f:1b:
         a8:b2:c0:5e:f0:ba:d5:fa:39:c8:e4:2c:15:18:d8:f7:21:f1:
         01:ff:40:4d:6b:2a:fa:5b:12:30:8b:e7:31:b9:09:23:92:ac:
         5f:b7:10:12:30:40:90:64:63:b7:78:85:e7:36:b2:44:2b:75:
         05:92:bc:55:a0:90:39:77:7a:90:fc:04:5b:d6:b1:23:f4:8c:
         9a:6c:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:08:44 2026 by rpki-client