Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9dd317e0-bce9-30fd-b9c6-5b2fdbe8b851.roa
File:                     9dd317e0-bce9-30fd-b9c6-5b2fdbe8b851.roa (raw, json)
Hash identifier:          +QFiCX2uUwTXj9hNmi34IPIWrsoDwVDnzBTmyNAxHA4=
Subject key identifier:   B5:B7:E0:84:C5:9A:10:C5:F1:58:B5:4C:6E:C6:A7:B1:CA:85:62:64
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5F1BA4678B0C6C3D7D240DC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9dd317e0-bce9-30fd-b9c6-5b2fdbe8b851.roa
Signing time:             Fri 02 Oct 2026 19:12:56 +0000
ROA not before:           Fri 02 Oct 2026 19:12:56 +0000
ROA not after:            Thu 31 Dec 2026 20:12:56 +0000
asID:                     401152
IP address blocks:        166.88.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:1b:a4:67:8b:0c:6c:3d:7d:24:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  2 19:12:56 2026 GMT
            Not After : Dec 31 20:12:56 2026 GMT
        Subject: CN=1f168c89-621c-40e6-8c2e-a2cc7e8c9573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:1f:07:cc:30:c1:ec:e2:61:3f:41:ee:86:
                    af:1a:47:53:2d:6c:1b:07:31:fc:24:99:9e:d8:ff:
                    b3:4d:78:7c:34:bf:2f:73:c4:fd:a3:0c:58:47:62:
                    46:51:63:b4:ab:5c:ff:66:e9:c9:89:14:3d:8d:3e:
                    c4:74:f8:65:cd:87:78:81:60:32:d7:77:70:e0:6c:
                    61:d7:c4:f8:db:e4:08:97:63:4d:20:72:3a:88:c3:
                    0d:af:79:de:05:e2:70:4e:0b:76:45:44:67:df:fe:
                    53:60:35:77:12:0c:41:1e:dc:39:8c:55:c4:38:13:
                    88:31:64:5f:2f:8b:5f:63:41:54:13:45:cb:d9:78:
                    40:a0:f1:bf:3d:47:48:88:da:85:af:88:35:9a:73:
                    09:08:41:55:c9:6b:01:8c:34:9d:31:2e:7b:31:3e:
                    5f:d7:a4:4a:1d:3e:47:fe:28:22:5b:84:83:a8:f2:
                    ab:0c:d8:09:72:8c:ef:a8:11:87:25:5b:ab:c9:5e:
                    88:fb:ab:6e:b1:b1:83:45:ba:a7:a8:95:4b:bc:19:
                    ba:32:df:fb:29:53:a3:8a:09:82:27:ae:96:f6:41:
                    8f:e3:0e:2c:bd:e7:07:96:70:62:49:23:21:34:c4:
                    7c:21:6b:66:5e:68:dd:c7:5d:8e:12:64:2d:f5:93:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B7:E0:84:C5:9A:10:C5:F1:58:B5:4C:6E:C6:A7:B1:CA:85:62:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9dd317e0-bce9-30fd-b9c6-5b2fdbe8b851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:dd:77:2b:3f:48:f0:a9:60:75:d5:a0:cf:78:49:f6:68:
         e8:c9:01:0b:2a:e3:cd:78:82:4f:31:77:40:b2:40:29:ac:e4:
         c6:6d:00:bf:5e:0b:bb:3b:f1:f7:f9:9e:ea:13:71:9e:66:93:
         e5:35:84:1b:16:a5:b1:3c:36:3d:58:a8:f1:7d:66:d7:10:85:
         07:3b:b7:14:e2:0c:3d:44:dd:cd:98:5d:76:78:80:17:61:ef:
         26:4b:b0:88:9a:fd:1c:dd:a3:af:a5:8b:bf:cd:cf:3e:b5:dd:
         d2:4f:ea:6b:22:d2:58:ed:2a:c3:1a:2f:3c:3a:59:c3:c0:86:
         ba:04:9b:76:2d:3c:64:e1:99:de:a2:3d:56:d8:82:f4:1e:85:
         dd:a3:e1:1b:7f:db:4f:ef:d3:0f:bf:b3:12:e7:da:71:2c:cb:
         6f:e5:5b:e5:f7:15:1e:43:d6:c6:e0:11:6e:e1:9e:05:b5:31:
         4e:79:e7:e8:65:18:17:90:8d:4f:76:52:fb:34:46:67:6f:07:
         dd:d5:86:f7:9a:ea:1c:67:00:25:0c:0e:0f:24:bb:77:5b:2f:
         e8:d4:f0:f5:d2:6c:9f:e9:a3:08:2c:0f:ca:ac:52:8a:cc:8d:
         dc:0e:59:33:3e:4f:9e:63:a9:a7:46:72:e2:84:25:81:06:ad:
         30:3e:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:43:30 2026 by rpki-client