Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9061883-2c8e-3480-8d0d-d9d1abc96947.roa
File:                     c9061883-2c8e-3480-8d0d-d9d1abc96947.roa (raw, json)
Hash identifier:          SD408r+Yz6WKnEFbhY4an0T0H3bF71ZuAbbzR1fa7Pc=
Subject key identifier:   D8:27:66:04:5F:B1:6A:10:36:4F:E8:FE:20:B6:81:8C:3C:1E:2B:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E104F2E4CCB669FA240783B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9061883-2c8e-3480-8d0d-d9d1abc96947.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     215728
IP address blocks:        166.88.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2e:4c:cb:66:9f:a2:40:78:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=9ae370c7-59a2-4eeb-afcc-e7e517e6372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:31:7a:71:7d:b4:d0:a4:2e:0c:00:73:ce:
                    32:17:83:a3:9f:15:e0:23:d2:5a:46:62:ee:5e:62:
                    ae:df:e0:f2:12:f0:b1:85:cf:c4:85:6e:dd:cb:db:
                    79:a9:b9:02:b6:8c:02:ed:f1:e3:e3:8d:5d:92:49:
                    16:7c:47:d5:32:09:b4:80:78:10:e1:b5:52:2f:c4:
                    58:a2:35:a2:b7:3c:9b:b4:34:c0:36:a7:dd:97:ec:
                    f5:f0:0d:85:8b:0c:4a:db:57:4f:38:e5:12:43:df:
                    6a:bb:10:37:5d:3b:93:48:90:08:34:52:95:4f:11:
                    53:a2:51:92:fc:ed:2b:fa:01:9f:a1:c8:53:45:66:
                    3e:5d:10:a5:ad:63:67:21:09:d9:21:b9:3c:c5:e6:
                    1c:cd:2b:46:ae:70:40:bb:d2:db:1e:73:85:05:77:
                    9d:82:e1:20:e8:8d:ba:75:a9:04:1a:1c:89:62:2e:
                    ec:e4:08:ac:4a:5d:08:c7:8f:aa:ff:78:f7:ee:17:
                    b3:51:d2:21:b3:aa:aa:04:f6:f6:64:3b:30:fc:11:
                    30:f5:73:7d:49:ce:49:37:f1:6d:f9:83:94:ac:1e:
                    58:ac:9c:38:fe:b1:2c:79:c2:56:b4:57:30:9b:2c:
                    b5:a0:d7:d0:1f:41:d1:97:d2:97:5d:27:94:df:41:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:27:66:04:5F:B1:6A:10:36:4F:E8:FE:20:B6:81:8C:3C:1E:2B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9061883-2c8e-3480-8d0d-d9d1abc96947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e6:88:4a:b8:87:27:07:09:be:4a:2c:c7:03:52:9e:c0:33:
         3b:75:be:1f:fc:d2:b4:af:9c:4d:4a:cc:71:db:32:59:e5:5c:
         6f:2b:e8:07:a2:44:17:49:1b:4e:3f:92:1b:ad:de:ce:ec:32:
         a7:16:18:28:33:92:d7:e7:19:a6:92:28:fb:87:3a:69:84:42:
         90:5d:5d:fb:82:3a:fc:57:4c:9c:8b:f8:d3:8f:60:67:c5:f1:
         b7:57:38:4f:94:99:33:2f:b2:27:95:b6:fc:a7:c8:61:e3:50:
         da:17:13:ea:f7:f1:b3:1f:29:4d:97:e7:12:13:7b:96:08:41:
         48:0c:06:27:64:48:64:82:c4:ee:c9:9a:c0:e9:c2:d0:d5:da:
         b7:d2:25:cb:7a:fd:65:cb:86:37:65:1f:cf:5e:4c:b3:66:0f:
         fb:8d:71:c4:54:fe:a5:db:5a:4f:de:26:b8:29:95:49:97:8c:
         dc:e4:32:92:24:2d:b4:70:bf:f1:d6:9d:b2:fb:aa:28:25:31:
         50:df:81:7a:c9:48:c1:61:e9:62:8b:fe:ca:26:3d:11:51:a5:
         55:8b:0e:c6:c8:17:c6:3b:4f:19:51:fe:53:04:c9:f8:06:fd:
         14:de:31:e6:c7:a6:75:b1:8e:04:80:d3:f0:88:57:71:9b:c0:
         11:6b:f5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:11 2026 by rpki-client