Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/47708e0d-9c01-3d26-a6f6-0d5091155b72.roa
File:                     47708e0d-9c01-3d26-a6f6-0d5091155b72.roa (raw, json)
Hash identifier:          3DpGNJ+JviMqjsC+s3JctySqGlt6ibQIrGxFtdQbOzE=
Subject key identifier:   7F:12:F9:39:59:D3:5C:B3:5F:73:6B:53:2C:30:11:4A:A1:8E:30:F3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F0D6CF8B89B6972CEAD6D4500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/47708e0d-9c01-3d26-a6f6-0d5091155b72.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     399646
IP address blocks:        166.88.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f8:b8:9b:69:72:ce:ad:6d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=984709dc-0412-47d4-9a47-cfa201926057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0d:4e:b7:d5:4e:e8:0a:36:f3:7f:b4:74:ba:
                    43:02:4f:36:78:fd:53:6c:f4:21:12:22:d7:a8:df:
                    56:d4:35:d6:2f:a3:c5:fe:7a:e0:1b:c7:4b:a3:c8:
                    68:7f:60:b0:29:e9:c2:fc:33:eb:72:27:3e:8e:ce:
                    ff:22:53:19:22:49:f7:04:f3:4d:c2:29:97:8a:c1:
                    1c:06:3e:fa:19:be:91:23:99:fe:e1:f9:cc:c7:21:
                    87:0b:0c:8f:98:80:09:56:aa:66:9d:ca:9e:6c:5a:
                    6d:79:c7:5d:1c:8b:c3:42:44:61:b2:d4:f3:c7:e5:
                    51:af:fa:26:aa:8f:4b:6d:96:e9:73:56:6d:19:4e:
                    38:27:4e:a5:97:36:db:8a:a0:41:09:ab:d0:3a:b1:
                    c0:f9:55:54:9f:5f:97:80:52:1a:6d:90:e2:1e:46:
                    ce:7b:27:1c:04:62:66:3d:89:7c:8e:bf:4b:f5:b8:
                    13:c4:58:96:85:ba:51:73:cd:88:4d:50:07:03:e0:
                    9d:b5:4e:bd:9f:d9:58:ac:e4:cf:84:74:26:0f:34:
                    f3:d9:1e:e5:ee:be:af:32:b1:18:0c:90:dc:ef:b9:
                    06:ec:2c:e2:7f:8d:53:de:d2:06:85:0c:66:46:87:
                    67:e6:db:0f:21:0a:a6:8e:f0:d0:ea:7b:63:f7:36:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:F9:39:59:D3:5C:B3:5F:73:6B:53:2C:30:11:4A:A1:8E:30:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/47708e0d-9c01-3d26-a6f6-0d5091155b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:29:46:88:90:7b:84:45:97:f3:83:9c:10:eb:f4:5b:de:a6:
         60:cd:89:b7:b6:2e:37:aa:8b:93:82:99:76:4b:86:be:15:30:
         09:e0:56:7a:27:68:3f:d9:b8:90:7b:55:67:f4:8a:ad:c4:bb:
         4a:8e:da:8e:cc:a9:93:6b:48:bf:25:28:ae:42:16:48:56:71:
         79:76:f4:9d:9d:b8:ed:7f:c0:71:5a:e9:35:43:5c:a9:1c:c6:
         c7:e5:2d:2e:80:ed:d9:ac:9b:eb:4a:8e:f6:9a:d7:11:46:6a:
         db:7f:20:42:b4:22:42:ed:11:0e:83:73:ae:f6:be:69:f1:71:
         48:57:ad:9b:cb:d4:c9:1e:5c:8f:f8:ca:c7:6d:d9:ec:a5:d0:
         a2:78:93:ed:f6:60:95:d6:8e:1d:eb:a1:dc:1b:f4:1e:56:7e:
         52:7d:cd:e9:6e:bb:81:04:20:a9:3d:14:ab:2b:53:9b:8f:89:
         0e:07:50:1f:41:f3:21:0f:f5:2a:58:24:0c:a7:21:92:44:08:
         cb:a8:29:a1:97:80:5c:41:eb:29:46:0b:43:60:de:ad:30:a2:
         3e:0b:9b:03:23:90:c0:48:44:39:64:1d:2e:94:ef:1b:21:a3:
         1e:1b:7a:97:9a:c4:dc:46:c7:50:4d:21:e3:29:57:3a:4a:06:
         f2:f4:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:54:29 2026 by rpki-client