Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fb898a7-0187-365e-a249-dee00c2c8587.roa
File:                     3fb898a7-0187-365e-a249-dee00c2c8587.roa (raw, json)
Hash identifier:          QCm8szdX2Fz+yMX4JOSrP8u6PGZ5nm9eRREeyXG+sqE=
Subject key identifier:   92:6A:2A:D3:55:33:44:4A:D3:3E:54:2A:43:6D:1B:1F:8D:B1:FE:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7887D8B93C6335304AD3D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fb898a7-0187-365e-a249-dee00c2c8587.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     49608
IP address blocks:        96.126.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:7d:8b:93:c6:33:53:04:ad:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d616bceb-c5df-4db5-92e9-0d0a9e7a7088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:8f:15:d0:01:c4:21:06:70:25:5b:0e:5f:
                    07:da:97:86:15:6f:49:33:b6:9d:dc:4e:b2:d5:24:
                    57:b5:24:a4:b8:ac:22:a5:4f:de:b6:ec:02:58:a2:
                    c7:43:49:c3:49:6a:cd:17:ce:db:58:e1:f5:96:96:
                    da:c9:7f:59:ef:ac:42:9e:8d:8d:7d:52:68:7c:e9:
                    14:48:57:fa:ff:72:be:e4:e2:73:0d:5f:8c:d4:12:
                    c7:0d:2e:4c:62:14:aa:e7:53:f4:55:dd:9b:66:b8:
                    43:fd:f0:8c:ab:20:f4:69:63:22:91:f3:88:6a:93:
                    7b:77:92:57:70:0b:9a:52:03:08:8e:96:59:c3:b5:
                    fa:f4:0a:ce:5f:7b:8f:5e:ad:16:21:e5:0e:16:16:
                    75:ec:fb:39:64:06:86:d1:41:1a:8a:8a:5c:7b:7a:
                    04:af:39:10:c3:35:38:4d:10:0e:1e:1a:8b:47:35:
                    3e:a1:8f:0f:be:4b:a0:30:8d:77:c0:8d:4d:c8:d1:
                    02:69:af:35:f2:8b:01:8a:60:75:59:f6:bf:3c:53:
                    3c:5b:6d:88:99:9a:a3:35:07:49:9d:ea:4d:cd:f6:
                    d6:9e:75:1a:42:1b:8d:6a:63:ee:90:af:d0:45:c7:
                    28:a0:07:6c:77:a3:69:cc:7f:c6:35:ae:bf:bc:1a:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6A:2A:D3:55:33:44:4A:D3:3E:54:2A:43:6D:1B:1F:8D:B1:FE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fb898a7-0187-365e-a249-dee00c2c8587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:8d:36:5a:76:0d:54:7d:c4:f4:3c:dc:bc:88:84:f5:dc:
         0b:e9:39:47:09:2b:0a:aa:a0:8f:89:25:5e:41:35:ac:fa:00:
         f1:a9:78:e8:3e:f5:6d:b7:1a:17:58:b1:73:e6:2c:68:bd:31:
         e4:f8:88:73:7c:71:0f:b5:45:b6:31:f8:ab:3f:04:e6:89:be:
         2f:d4:87:af:1d:f9:e8:fe:61:98:c1:8a:89:ef:7a:68:53:87:
         cb:b4:5f:0e:58:5b:83:f9:db:fe:56:82:94:42:9b:b4:ed:12:
         9f:f3:64:40:d2:0a:cb:4b:df:ba:1e:fc:7e:fb:20:ce:c2:6c:
         74:a3:1c:4a:89:78:78:fb:d0:c3:d3:5a:c4:28:d8:27:17:da:
         36:cd:22:15:06:09:b9:d9:c0:4a:42:1d:25:9e:44:f3:b0:bf:
         97:a4:43:3e:10:a3:15:fe:b4:b1:6d:f9:b8:3a:a3:15:91:39:
         f1:65:8d:6f:c0:5e:db:be:3d:7f:92:0c:46:9a:3f:0e:c9:af:
         c5:ac:1a:3a:7e:62:c7:54:e2:6f:83:cb:b2:ff:b4:46:f4:3b:
         35:14:63:0d:a3:df:df:00:de:19:0f:c9:31:d0:a6:27:3e:48:
         a9:b9:46:02:93:97:24:7f:95:ff:41:5e:19:24:b9:1f:14:c2:
         15:8e:51:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH2Lk8YzUwStPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDYxNmJjZWItYzVkZi00ZGI1LTkyZTktMGQwYTllN2E3MDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2PFdABxCEGcCVbDl8H2peGFW9JM7ad3E6y
1SRXtSSkuKwipU/etuwCWKLHQ0nDSWrNF87bWOH1lpbayX9Z76xCno2NfVJofOkU
SFf6/3K+5OJzDV+M1BLHDS5MYhSq51P0Vd2bZrhD/fCMqyD0aWMikfOIapN7d5JX
cAuaUgMIjpZZw7X69ArOX3uPXq0WIeUOFhZ17Ps5ZAaG0UEaiopce3oErzkQwzU4
TRAOHhqLRzU+oY8PvkugMI13wI1NyNECaa818osBimB1Wfa/PFM8W22ImZqjNQdJ
nepNzfbWnnUaQhuNamPukK/QRccooAdsd6NpzH/GNa6/vBrvPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJqKtNVM0RK0z5UKkNtGx+Nsf5pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2ZiODk4YTctMDE4Ny0z
NjVlLWEyNDktZGVlMDBjMmM4NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCxjTZadg1UfcT0PNy8iIT13AvpOUcJKwqqoI+JJV5BNaz6APGpeOg+
9W23GhdYsXPmLGi9MeT4iHN8cQ+1RbYx+Ks/BOaJvi/Uh68d+ej+YZjBionvemhT
h8u0Xw5YW4P52/5WgpRCm7TtEp/zZEDSCstL37oe/H77IM7CbHSjHEqJeHj70MPT
WsQo2CcX2jbNIhUGCbnZwEpCHSWeRPOwv5ekQz4QoxX+tLFt+bg6oxWROfFljW/A
Xtu+PX+SDEaaPw7Jr8WsGjp+YsdU4m+Dy7L/tEb0OzUUYw2j398A3hkPyTHQpic+
SKm5RgKTlyR/lf9BXhkkuR8UwhWOUTQ=
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:16:06 2026 by rpki-client