Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2478573c-918f-3938-8a4a-dbeeba10cfa3.roa
File:                     2478573c-918f-3938-8a4a-dbeeba10cfa3.roa (raw, json)
Hash identifier:          wlZ6hxXviKFcSjJSfNH6Ppw4u1IExd6FcPGM+wfPfro=
Subject key identifier:   BC:77:1D:84:51:BC:EF:88:E7:5E:62:17:34:0E:31:C7:AB:5C:43:FE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F166E1F2B489450EDA51A38C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2478573c-918f-3938-8a4a-dbeeba10cfa3.roa
Signing time:             Sun 06 Sep 2026 18:25:07 +0000
ROA not before:           Sun 06 Sep 2026 18:25:07 +0000
ROA not after:            Sat 05 Dec 2026 19:25:07 +0000
asID:                     218964
IP address blocks:        166.88.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:16:6e:1f:2b:48:94:50:ed:a5:1a:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  6 18:25:07 2026 GMT
            Not After : Dec  5 19:25:07 2026 GMT
        Subject: CN=49602a48-a31f-41a7-9e3d-457f4e79c523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:7c:c6:37:28:b3:8a:0c:c2:31:d9:5a:a3:
                    00:b6:c6:42:d9:ac:c1:df:a9:9d:c1:ba:ed:75:52:
                    0a:09:e9:b4:7c:d4:66:93:87:e5:3f:8d:2f:8b:91:
                    d1:09:e7:7d:76:40:10:5d:c1:21:85:2e:94:d8:44:
                    f1:63:c0:29:1c:f2:24:64:1a:a4:cd:64:c1:3f:e1:
                    14:4f:a7:25:b4:28:86:db:08:86:82:ff:6a:dc:f9:
                    62:f6:18:db:a1:7a:a5:ab:ac:a7:5f:e4:9d:f7:65:
                    16:45:d3:df:4e:42:77:73:85:42:23:f1:dc:40:54:
                    a5:8e:fa:b9:7a:50:65:49:7f:b2:57:75:af:bb:d3:
                    db:d6:ab:c9:11:91:15:b1:6d:be:0a:03:df:6f:97:
                    12:be:fb:e7:bc:85:3c:8e:2b:e0:ec:d7:0c:41:c8:
                    de:26:ef:fb:3d:bd:14:f6:3b:f8:4f:4b:92:95:48:
                    88:81:84:57:c8:5c:ed:27:75:f5:40:fc:c5:28:ed:
                    df:66:ca:13:24:e2:fe:eb:51:01:41:1a:2a:7f:be:
                    75:f2:9d:18:73:00:f0:28:7b:20:65:d7:fb:1e:ef:
                    46:87:56:2f:85:4a:92:88:3d:a0:02:33:5d:66:fe:
                    68:00:82:46:50:99:d8:26:a7:8b:e8:14:79:1d:56:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:1D:84:51:BC:EF:88:E7:5E:62:17:34:0E:31:C7:AB:5C:43:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2478573c-918f-3938-8a4a-dbeeba10cfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:99:66:37:a4:e7:7b:50:31:d7:38:36:79:ac:75:ee:6e:c6:
         6d:aa:c0:49:f7:84:16:01:de:36:e5:fd:e3:09:a0:51:1a:84:
         bf:01:05:52:b7:b3:74:ff:cf:37:a6:cd:5f:4f:c4:0a:64:ba:
         25:cb:72:39:f7:06:65:96:9a:1d:ed:15:0e:3d:17:a2:f7:8e:
         30:d7:d8:db:5e:a9:6e:07:65:8b:3b:d4:96:e7:26:07:bb:57:
         ec:cb:e8:87:63:95:72:d2:ab:94:b6:31:79:e8:b8:8f:ab:df:
         0b:9b:a7:2d:86:86:9d:22:8e:25:df:f4:fb:12:68:37:7a:9e:
         a3:a7:ea:de:1a:45:5e:02:0a:43:87:d1:dd:6e:d9:30:c5:40:
         ce:b8:23:17:e3:a3:3d:1d:1e:17:26:4e:fa:dc:79:04:35:98:
         f8:f1:e8:6c:5f:54:f0:26:78:4c:b3:11:80:e2:b0:4e:fb:66:
         73:4f:15:59:ea:da:22:88:4c:3c:27:ec:02:0d:10:88:ad:a9:
         dd:9e:6e:83:84:eb:88:c8:a9:d7:57:e6:bd:82:d7:d5:6b:f9:
         b7:2b:f3:ee:22:ce:6e:19:52:3a:ca:60:d9:43:a8:56:76:79:
         e9:6f:f6:7d:ef:f8:97:e1:5f:71:c0:d5:65:5d:05:8d:3a:9d:
         24:32:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:31 2026 by rpki-client