Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41f3ae18-3a00-3004-baf0-b221838261e0.roa
File:                     41f3ae18-3a00-3004-baf0-b221838261e0.roa (raw, json)
Hash identifier:          7vly2lBoGQdSJL1MYJ1L5VDBNctUXx3+dpyekKXOMIk=
Subject key identifier:   72:C1:14:CA:4C:10:B8:55:CF:5C:88:F1:5E:0F:71:1C:6B:EC:D2:E8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CFB7F022A5F293763CC087790
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41f3ae18-3a00-3004-baf0-b221838261e0.roa
Signing time:             Wed 25 Feb 2026 17:18:26 +0000
ROA not before:           Wed 25 Feb 2026 17:18:26 +0000
ROA not after:            Tue 26 May 2026 16:18:26 +0000
asID:                     9009
IP address blocks:        166.88.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:7f:02:2a:5f:29:37:63:cc:08:77:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 25 17:18:26 2026 GMT
            Not After : May 26 16:18:26 2026 GMT
        Subject: CN=a676d98c-7227-445d-b3aa-ad1a1773eb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:1d:09:0c:63:a5:43:73:fa:00:a5:18:b8:
                    79:e1:67:a2:6e:89:39:0c:0e:eb:66:59:08:82:5f:
                    9b:65:15:93:21:fb:46:df:93:eb:03:37:71:b9:0e:
                    ec:93:36:8d:f9:a9:c8:78:04:18:66:9f:a1:37:12:
                    10:71:f7:94:9c:71:ee:c2:56:e0:c7:f4:25:11:23:
                    83:93:a5:ab:a7:0a:15:25:16:c2:fd:87:8f:0b:49:
                    aa:7b:fb:43:f9:1a:fc:16:58:42:5d:df:11:1a:b9:
                    3c:b3:d8:ea:b6:fe:7e:cc:b6:a6:8f:5e:e7:be:f9:
                    bb:68:54:f7:2e:eb:75:d3:63:82:84:d0:11:72:3f:
                    c2:d7:93:15:c1:76:16:95:14:02:5c:68:10:68:aa:
                    2c:6a:80:f1:e4:bd:f8:6e:a5:c5:da:ad:d0:09:27:
                    f9:e5:f5:c4:99:e4:53:3f:33:24:8a:71:dc:c0:c1:
                    38:03:0a:32:a5:26:db:95:5f:1a:2c:21:b1:62:6b:
                    5f:fa:1b:cd:1f:31:95:72:11:26:c8:63:62:f9:bd:
                    aa:fb:51:b1:23:59:04:94:5e:fa:69:e8:e2:cd:5c:
                    89:58:a3:3c:b8:81:57:85:5a:c9:c9:d1:de:33:d7:
                    a7:7e:8a:09:cd:80:5e:a2:e2:57:68:18:b8:fc:22:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C1:14:CA:4C:10:B8:55:CF:5C:88:F1:5E:0F:71:1C:6B:EC:D2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41f3ae18-3a00-3004-baf0-b221838261e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b9:0d:b9:04:34:5b:ea:0c:76:04:c2:84:d8:d2:eb:41:33:
         66:a8:01:0f:f3:d1:90:dc:db:52:62:07:38:13:3b:74:b5:9a:
         1e:28:20:11:80:20:da:77:e2:a5:0c:c8:e2:17:ad:ed:95:81:
         bf:12:be:d2:02:49:6d:fc:3e:04:2d:6c:bb:48:88:af:3f:de:
         3f:5d:61:9c:ac:53:0c:66:a8:97:3c:a7:d3:51:c6:27:47:b2:
         36:e5:53:de:7d:0c:9e:fa:ae:e7:64:c8:9e:23:4f:c9:d8:2c:
         ec:1e:82:17:32:a5:88:69:da:d2:ff:c4:21:88:2e:1c:9d:e9:
         78:b4:2c:8c:df:8b:3e:bc:06:58:5d:ef:4f:61:d0:12:56:4e:
         4b:b2:b8:51:77:eb:58:e7:d8:48:93:f0:8d:47:ea:12:86:15:
         7c:60:f0:3d:99:22:e3:dc:35:c0:de:c5:9a:a3:90:82:c6:65:
         6b:44:54:9e:3f:06:41:a5:85:63:94:49:51:ab:31:16:23:de:
         ec:a5:97:0a:ec:49:1e:b1:52:e3:32:e6:9a:dd:b9:09:0f:79:
         57:27:20:25:69:ff:f3:20:81:bf:54:09:7a:16:82:8b:85:45:
         a1:5c:ca:a9:ca:23:5b:79:8c:45:32:d7:a3:f6:9b:e4:bb:a1:
         73:35:4b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:16 2026 by rpki-client