Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb06c644-98e6-301c-96c3-f19069b36250.roa
File:                     cb06c644-98e6-301c-96c3-f19069b36250.roa (raw, json)
Hash identifier:          +EtcE4+CMhcODfgzcvUrsYDVBIF5w68APHAJYJXqNUU=
Subject key identifier:   B0:D8:E4:30:B3:1B:CE:9A:97:16:7F:36:5D:FF:C5:FD:DD:62:75:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E07009C780F5393F7AB04EE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb06c644-98e6-301c-96c3-f19069b36250.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     14618
IP address blocks:        166.88.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9c:78:0f:53:93:f7:ab:04:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=dace3a8b-b38b-4150-91d8-eb99e1e2260b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:0b:ff:98:25:cc:4a:e5:01:e4:2b:2f:26:
                    12:eb:61:ec:e0:2c:0c:9b:a7:3e:38:2d:e4:bb:8a:
                    d9:f2:79:39:45:80:14:d1:6e:de:cf:b0:54:e9:b9:
                    7b:58:79:23:87:d5:b5:c2:a2:b6:c6:ab:91:be:11:
                    bc:20:0b:7e:a9:ab:d4:4b:f8:6d:4f:e5:4b:ea:1e:
                    13:c5:0a:7d:56:af:f3:12:c6:17:ba:59:95:b7:03:
                    52:f0:b6:1b:c5:e1:3e:fb:e3:88:5c:a3:7d:bb:2a:
                    82:ae:90:12:9d:6a:72:29:7a:10:ac:51:ec:92:57:
                    a2:1f:50:b6:02:22:34:7c:70:ec:20:71:ad:39:13:
                    26:b6:47:81:29:de:f7:3d:53:2c:4c:a4:e9:b0:33:
                    bf:11:ce:f4:1b:2d:f1:76:66:5d:68:f9:95:7b:fe:
                    3e:01:06:ae:81:c0:2e:6d:c0:a5:fc:a1:ac:0e:78:
                    8a:2e:5f:39:66:2a:90:8f:e7:61:76:e1:6a:f5:fa:
                    80:12:94:b8:69:d5:d8:19:13:5c:e4:36:8b:03:81:
                    5e:f7:38:be:0c:c7:1e:ba:44:10:62:c5:fe:3a:99:
                    ca:bb:47:22:0d:9c:77:d0:6e:a9:ad:a4:83:74:8a:
                    42:1e:58:a2:d0:17:2e:05:b2:a2:3f:6a:19:fb:06:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:E4:30:B3:1B:CE:9A:97:16:7F:36:5D:FF:C5:FD:DD:62:75:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb06c644-98e6-301c-96c3-f19069b36250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:ff:d4:34:c1:65:8d:04:63:1a:d2:2a:de:61:24:a6:51:
         96:28:77:25:1b:fb:f0:26:18:7d:4a:e2:79:e2:72:f9:e1:8b:
         a0:07:1a:44:fc:75:55:1a:92:14:5f:6c:f8:7b:b8:92:4f:d4:
         fe:bb:4d:90:24:ac:99:83:23:68:6f:d4:3b:5a:45:02:95:5d:
         34:f7:79:a4:53:86:cc:49:b6:2a:3a:63:98:dd:16:3e:01:32:
         65:c9:27:f3:66:53:9c:c7:85:a3:f5:29:76:6e:73:e2:a6:19:
         28:f0:ba:48:14:a4:a5:4e:9d:1b:67:6a:aa:b1:55:a3:01:92:
         0b:6b:2e:0b:ab:6a:ad:18:a4:6b:15:f4:f9:cf:9b:3f:17:7f:
         4c:5c:f0:af:e7:f7:40:b2:75:f2:e8:99:d9:2a:da:de:b7:17:
         ca:ea:07:80:6d:62:3e:d8:ce:27:0e:d5:70:c6:39:2b:8f:5f:
         50:c7:b0:2c:bb:3e:16:6f:38:1c:dc:16:56:6c:8b:f6:b4:cd:
         73:5b:a1:42:70:0c:1f:b6:0c:09:79:37:ae:ed:56:da:52:2c:
         74:fc:f2:c6:6a:82:ae:a5:be:c3:ad:de:a7:a9:71:bb:a0:0c:
         f5:ec:3d:dd:80:0c:dc:7d:d0:a5:87:98:75:a2:b9:9e:c2:85:
         7f:2d:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:10 2026 by rpki-client