Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa
File:                     fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa (raw, json)
Hash identifier:          UCFevEFnznWK87NNhkzoGe5pzyKQIO+1pVuVKEkALAg=
Subject key identifier:   7E:87:B8:7F:C2:C5:3A:91:1C:E5:1C:1B:9E:EF:D5:64:63:A2:FC:63
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F49866CEB91724E7543F30840
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        166.88.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:6c:eb:91:72:4e:75:43:f3:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b60748c3-2a98-4fe7-941a-f6416a35b9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:32:7c:13:71:72:83:68:da:65:58:8d:be:
                    f3:05:4d:69:f0:ae:02:df:f2:e9:97:c1:b5:46:a2:
                    30:ae:c0:04:b1:e7:cc:d1:61:82:e6:d5:13:d6:a3:
                    8c:13:a0:99:ea:66:18:e5:71:63:a2:13:80:eb:2b:
                    a6:0f:e5:73:25:f2:d6:ed:eb:fa:91:8e:a6:13:4f:
                    26:2d:65:99:e9:4e:2a:ef:90:f8:3c:f2:6e:f1:78:
                    27:8e:2b:bc:a2:45:37:86:49:80:60:ec:90:71:39:
                    01:7b:c2:c7:73:f8:d5:3d:8c:a9:37:a6:0a:06:1b:
                    39:90:0b:f1:30:db:2c:37:95:78:39:41:86:57:0e:
                    18:44:ea:f9:df:5c:3b:21:2b:5f:83:c2:9d:18:00:
                    9d:68:c4:54:bb:5e:27:0b:36:c9:d8:78:6b:1c:2e:
                    a4:e4:3d:68:6e:77:59:9a:50:91:30:31:f4:11:c1:
                    c9:0e:52:8c:14:ff:c8:8c:12:9d:fd:e0:24:32:c2:
                    f7:90:ad:90:8a:4a:cf:c2:d7:7a:d8:ff:a8:ce:4a:
                    c1:5e:28:5c:ce:54:f7:fe:fe:e9:1c:a0:4a:2d:ae:
                    be:05:89:ec:d2:ec:d5:14:fd:80:35:ba:32:94:b1:
                    37:dc:9e:51:cc:35:6e:44:7f:ee:d0:b1:2a:18:0c:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:87:B8:7F:C2:C5:3A:91:1C:E5:1C:1B:9E:EF:D5:64:63:A2:FC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fea58d46-a9bb-35a7-a1ad-0e22f66a0337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:96:00:5d:53:01:f9:4a:d0:d2:2f:5a:24:08:70:ad:db:
         06:74:9d:6c:60:de:e4:de:92:43:35:d0:13:9b:52:1b:09:11:
         fa:e1:f8:01:2f:e6:f7:5a:5d:7d:cf:ba:49:57:b9:91:4d:0f:
         84:04:a1:e5:46:6e:c3:02:25:52:df:49:14:a0:10:95:33:11:
         60:2d:ec:9c:3c:1e:23:f5:2b:fd:26:8d:02:24:ba:6e:88:02:
         62:10:dd:2a:90:ce:45:ed:9e:88:5b:02:c2:d8:2e:7e:77:22:
         05:8e:32:dd:90:bc:b4:69:78:79:07:ad:25:d8:e6:cb:69:d7:
         8c:e2:e9:66:72:7b:57:3f:95:dd:2e:c4:d8:65:d1:84:9e:2d:
         86:2a:30:c3:ce:38:af:06:7e:a4:7d:fe:a2:80:7d:94:f0:d0:
         a5:7a:04:e5:cb:95:fc:aa:30:ff:ea:e1:75:33:1c:08:e1:f4:
         43:bd:fc:7e:32:fd:43:65:df:a5:21:c3:72:7e:66:e5:27:9a:
         10:8c:cf:72:67:93:68:95:0f:ce:0d:c9:e8:e4:55:ea:71:b4:
         47:41:74:14:c0:5c:f8:ee:1d:be:52:79:b6:85:ab:70:44:50:
         f5:03:d9:6b:8a:bf:b6:88:74:98:ad:a6:7f:0d:fb:9a:db:c6:
         9f:c4:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:14:55 2026 by rpki-client