Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/406a7a1a-e539-3488-a206-ae31468fb1d0.roa
File:                     406a7a1a-e539-3488-a206-ae31468fb1d0.roa (raw, json)
Hash identifier:          zobpRUhprl/eU8FigZMWNzKYfX7crJLN8vDetTlYNWg=
Subject key identifier:   FB:E3:1B:AC:69:4F:8E:1C:F2:92:1B:85:5D:F9:B8:DC:1A:83:D0:87
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F1897B7D971ACC99AA154D280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/406a7a1a-e539-3488-a206-ae31468fb1d0.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     43444
IP address blocks:        166.88.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:b7:d9:71:ac:c9:9a:a1:54:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=37730579-5018-447c-8367-ac78fd9839fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:9c:5f:3a:c8:7c:82:a1:cb:86:b2:5d:10:
                    93:8d:c8:23:73:b0:a4:e4:e6:c0:7c:b5:58:78:9b:
                    d4:bc:cf:9b:f0:6a:d4:b4:79:e9:56:df:18:5a:45:
                    b2:79:63:2d:25:1a:1e:7c:bd:5b:3a:af:fa:c9:6d:
                    f7:87:97:01:39:06:d0:60:01:37:f4:d3:f6:21:6e:
                    7b:3a:df:02:dd:e9:7b:2d:c0:91:16:c4:86:77:3b:
                    37:80:46:40:eb:72:ef:b4:72:81:f0:43:61:c4:21:
                    4d:5d:90:92:c7:d8:86:4c:be:a5:a2:f0:21:8e:f7:
                    e9:92:25:f9:c0:aa:ef:bc:4b:73:f0:ba:97:aa:bc:
                    a5:32:6e:0b:85:85:91:96:57:da:0b:51:0b:7e:c7:
                    fc:91:39:79:dd:56:9a:19:5f:ed:a5:66:b9:72:88:
                    9f:d6:c1:f3:c0:b6:d3:de:00:43:04:2c:64:27:19:
                    49:aa:e9:62:6b:9d:12:5b:a0:50:8c:da:14:51:ce:
                    aa:b6:db:b9:77:d4:99:3e:14:b6:27:30:1f:40:41:
                    a5:38:62:df:67:7a:13:65:e3:01:9e:76:c6:3b:bf:
                    1c:a2:0e:38:92:11:41:62:c0:3f:21:56:e3:2b:a7:
                    44:1e:f1:33:22:c5:0f:10:0d:d2:00:ca:0a:0b:48:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:1B:AC:69:4F:8E:1C:F2:92:1B:85:5D:F9:B8:DC:1A:83:D0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/406a7a1a-e539-3488-a206-ae31468fb1d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:50:66:e6:e8:c5:7b:49:fb:62:24:85:3d:2c:07:7b:74:62:
         eb:55:80:d9:1c:a8:ed:17:4a:5f:b6:9b:aa:e6:12:f6:a9:4a:
         9d:20:07:c4:10:42:b2:7d:24:e9:82:c2:9b:de:02:a4:56:eb:
         df:4d:bc:55:c0:c3:bf:48:1f:9d:0e:22:94:c6:94:1c:d7:8e:
         19:65:4f:e8:07:87:e0:84:8b:6b:0c:73:10:dd:b3:6b:77:9e:
         68:29:0a:98:42:5c:0d:fb:5b:b2:95:64:21:fb:51:c3:d1:35:
         24:86:55:7b:9d:97:e4:b3:e2:62:ab:22:1a:75:dc:f7:67:a6:
         fe:ef:fc:ed:1e:71:cd:36:72:f1:be:d5:69:c5:0a:31:8a:14:
         3a:04:e9:4f:36:fd:90:6a:7e:21:6e:ea:88:bf:2c:32:ff:c0:
         ca:a8:f1:70:39:1b:9e:5b:80:20:c8:22:83:54:bc:03:49:83:
         a0:4f:da:b9:21:b3:1a:7a:54:36:d7:86:42:c0:7c:ef:c6:c9:
         c1:6c:29:80:32:c3:22:46:e8:7f:e2:f9:2c:70:ef:c7:c3:6a:
         43:6a:55:11:c1:d4:2f:26:92:6a:21:dd:b8:b0:c7:42:51:9e:
         f6:6c:59:40:7c:db:f9:34:f3:74:40:8c:e7:58:21:29:49:9f:
         4c:78:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:29 2026 by rpki-client