Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d48b9718-f9ba-3db3-8889-132dcad50e1f.roa
File:                     d48b9718-f9ba-3db3-8889-132dcad50e1f.roa (raw, json)
Hash identifier:          ygq8KRUiSDB7U16EOMCNLvsQ5XhAUDorE3wnD6nPf2U=
Subject key identifier:   F5:0E:87:D2:D2:BB:6A:03:49:0A:AF:02:75:B5:7D:4F:29:89:92:AF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F70882488AB87E589CC80FE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d48b9718-f9ba-3db3-8889-132dcad50e1f.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     395839
IP address blocks:        166.88.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:24:88:ab:87:e5:89:cc:80:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=3987ce16-03cb-4de1-aeb4-135f95d9be33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:80:9b:c9:62:b9:63:f8:67:fe:81:51:d7:
                    da:f4:c7:36:5e:99:d5:b6:1c:46:63:8e:7e:65:e1:
                    ca:a1:63:ab:66:7d:6e:da:4e:68:b0:63:97:66:a3:
                    dc:78:3a:5e:c4:b7:e3:e3:4c:9b:13:85:e3:64:36:
                    91:d7:7d:69:44:06:f3:56:44:b5:ba:02:a2:9a:9f:
                    98:2e:9b:58:75:a5:7c:93:b4:2b:9b:50:89:39:ae:
                    0a:fe:ee:7e:54:8a:14:2d:46:6f:35:27:fb:6f:f4:
                    c4:5a:49:67:82:b2:2a:2f:7d:1a:2d:dc:d1:ac:36:
                    7f:04:ab:ce:58:73:fb:c6:c6:a9:1e:29:37:25:73:
                    83:ec:66:b7:5a:75:a2:43:1c:2d:a2:c8:bf:15:de:
                    f4:9e:40:ba:37:5c:c5:b5:80:41:78:d7:a9:4e:34:
                    a9:b5:54:30:4e:8e:78:5f:92:82:5d:8f:8c:d5:fc:
                    be:d8:cd:84:65:45:d4:89:02:b9:bd:38:37:05:80:
                    f3:43:40:4c:09:88:74:8e:d5:ec:9e:4c:9c:af:33:
                    70:09:1c:dd:17:4b:8a:7c:7d:a8:e9:d4:0b:0f:28:
                    b9:0c:45:c2:68:22:93:65:1b:c4:5d:79:c8:d2:47:
                    44:cf:f3:26:ad:3e:0b:90:43:56:88:d8:07:a2:42:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0E:87:D2:D2:BB:6A:03:49:0A:AF:02:75:B5:7D:4F:29:89:92:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d48b9718-f9ba-3db3-8889-132dcad50e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:2d:5b:8d:e6:53:cb:c3:88:ba:5c:aa:f4:b1:24:ef:05:
         9e:ab:4d:08:0d:6b:ad:55:1e:1b:40:f0:2d:97:e6:85:7e:82:
         ee:6a:f7:59:3c:01:33:b4:15:5f:70:b9:7e:9c:b9:b7:e0:03:
         c8:e7:85:f0:0a:b7:08:11:df:0f:6c:12:3b:02:a2:2b:bf:8e:
         82:cd:b9:c6:27:41:3a:c6:c1:83:fb:0f:f9:33:d6:fc:83:66:
         e2:71:7a:56:0b:28:a1:e7:c8:a3:a1:8f:94:2d:59:66:d9:c1:
         65:34:ec:be:00:18:aa:b4:9c:60:3a:13:b2:5b:de:3b:98:fe:
         1a:62:b8:f2:fe:90:36:bb:62:fb:ca:e8:14:c4:b4:98:24:a1:
         95:65:51:1f:e5:28:08:34:ad:03:82:f3:c9:b1:6a:36:93:f1:
         b5:e3:31:57:1a:de:58:91:36:7f:55:51:e1:11:8c:98:ef:65:
         90:71:bb:cd:1b:06:91:fa:76:70:95:56:72:92:64:0a:9a:19:
         c0:aa:1b:f8:08:55:ea:e4:e5:a6:26:11:1e:69:4f:b9:0b:89:
         98:c3:02:8b:2a:9b:0b:a4:d4:66:f1:50:c6:b9:73:0e:1c:12:
         e4:6c:24:7e:1e:d2:1c:e2:0a:54:47:4c:87:24:e8:5d:c2:88:
         03:50:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:27:16 2026 by rpki-client