Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b97d08f7-d3af-3aff-aa9a-126cc1aed69b.roa
File:                     b97d08f7-d3af-3aff-aa9a-126cc1aed69b.roa (raw, json)
Hash identifier:          eFmc9PpfW1XmFcRG0evH8HgAeGdCWEVZWNsj7szGBxw=
Subject key identifier:   87:57:49:09:81:1B:15:87:C7:0E:DF:28:94:74:3C:E0:B0:0F:DC:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E147EE1EF9EE3221F1B498240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b97d08f7-d3af-3aff-aa9a-126cc1aed69b.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     10103
IP address blocks:        166.88.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:e1:ef:9e:e3:22:1f:1b:49:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=96cd09fe-68f0-4d76-933b-2608033f43cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:ec:2b:a0:89:b4:28:0a:e3:12:a9:ec:0f:
                    3b:a0:97:ce:65:40:e3:24:8c:97:c8:ed:e5:dd:cc:
                    ce:9e:53:5a:f8:e0:fa:53:18:ba:5c:b4:50:0c:3d:
                    4c:25:45:84:a2:1c:86:78:4f:0b:e9:91:3a:47:f4:
                    34:22:99:34:05:9b:c9:02:bd:65:42:9e:b2:0e:06:
                    33:bd:51:c3:68:c0:f4:cb:ec:f1:4d:9e:01:af:3c:
                    0f:83:30:5b:75:bc:56:54:b0:69:65:27:0f:99:72:
                    29:52:d4:cd:20:4e:c7:99:6f:28:fe:1a:fc:1f:27:
                    24:ed:e3:53:a2:21:b7:d1:28:0a:5c:a2:35:92:9f:
                    b9:ce:08:93:1a:7c:ac:df:f4:62:fb:0e:b5:26:38:
                    56:67:f1:2b:90:07:c7:15:51:cc:3a:05:56:13:6e:
                    51:b2:03:6f:d2:03:1d:d2:e6:c9:8b:90:e0:be:80:
                    a3:d7:98:ca:38:3d:9e:14:b6:87:9f:9a:70:ed:c9:
                    da:91:80:2e:7f:e3:99:fc:31:97:52:d4:67:f9:a9:
                    05:1c:0a:3a:a2:13:35:27:cb:51:3b:87:9f:f9:42:
                    46:8c:1a:db:66:90:2e:92:3c:fa:38:e7:b8:db:2d:
                    d7:d7:ca:08:d0:e0:42:da:e1:b7:80:80:a6:5f:95:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:49:09:81:1B:15:87:C7:0E:DF:28:94:74:3C:E0:B0:0F:DC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b97d08f7-d3af-3aff-aa9a-126cc1aed69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:31:bd:c9:f5:7c:ec:2e:2d:54:58:66:5d:5a:b0:27:f2:26:
         bf:0d:cc:23:82:64:4e:45:dc:98:61:fb:b2:b4:41:68:b7:a9:
         b0:cf:b7:be:60:b0:5b:cf:e6:f9:0f:a7:0b:bd:50:32:9f:d4:
         04:a0:1d:93:6a:24:97:61:0c:48:14:41:5e:32:c6:00:f2:11:
         73:21:d1:98:d5:75:0e:5b:14:24:28:d1:b3:f8:89:78:87:4e:
         df:d8:72:6a:fe:b7:58:3b:cf:20:f8:ca:c3:e5:c6:dc:c3:44:
         a0:b4:93:e0:bd:e9:20:de:1f:b7:f9:dd:49:d0:77:2e:1c:31:
         e5:a6:6d:bb:59:c8:10:20:fe:8f:2d:6f:fd:03:5b:c8:67:11:
         6c:c3:99:d5:3a:6a:ad:e4:7f:06:5b:67:83:9c:94:66:73:3e:
         be:3a:1a:2b:2b:14:75:1f:76:54:24:ed:dc:5b:de:cf:e2:6b:
         7a:1d:6d:a7:75:ab:db:bb:ad:b3:5c:07:56:87:6a:03:b0:25:
         b5:77:33:18:7c:07:9f:14:d0:56:b3:05:3d:6b:4b:83:6e:08:
         c7:f2:76:97:b4:26:6b:ec:2a:ba:4b:25:13:5a:22:51:3a:ec:
         42:26:1d:ab:f6:0d:1d:d3:52:1d:c0:5f:72:a1:5f:88:3c:81:
         d9:dc:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:44 2026 by rpki-client