Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d1947b8-cfab-3122-b994-3e57b9740454.roa
File:                     4d1947b8-cfab-3122-b994-3e57b9740454.roa (raw, json)
Hash identifier:          BK9JIwqrPD9d7FQ5XyAhMIQsdzfgZR9m+MpPCAUtbx4=
Subject key identifier:   9B:12:8D:B2:C3:34:13:E8:B6:2D:F8:7B:F4:05:3A:56:6A:06:56:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7979CB2095419091E96F0C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d1947b8-cfab-3122-b994-3e57b9740454.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        166.88.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:9c:b2:09:54:19:09:1e:96:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0ca09a0c-ea00-4f12-a738-8ce3ba581c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:a0:4f:41:b9:a5:5d:e2:c4:da:18:80:1a:
                    35:e5:43:be:3a:5f:47:76:e4:ba:78:1e:44:3e:94:
                    f6:83:37:d9:9f:18:bd:3d:9d:56:97:de:bd:1b:9f:
                    59:1f:f1:3d:1d:d2:4c:08:30:d6:11:26:eb:af:be:
                    b0:58:1f:4d:d5:0a:11:1b:11:e2:a5:ec:7f:6c:7a:
                    b5:e8:6e:c2:c6:3e:b8:0e:04:ba:f2:e0:67:0d:c7:
                    c8:51:5a:66:0d:43:4f:ae:76:08:82:7c:dc:67:d5:
                    28:2d:0f:2e:5c:58:56:eb:2f:75:ab:47:f1:f6:d4:
                    98:e5:ee:79:30:61:15:b4:82:91:f5:29:fe:7c:8b:
                    6c:8b:16:27:89:85:7a:17:c1:98:72:ef:32:da:e6:
                    7e:94:b4:75:29:6c:36:2b:da:fe:5a:45:4c:a0:27:
                    e0:21:6f:19:ac:2e:4e:f3:31:f9:41:81:ef:4c:d2:
                    51:a7:85:89:27:b2:5c:55:8e:23:46:78:7a:53:54:
                    11:89:aa:65:f9:93:e8:63:7b:19:33:4f:14:77:50:
                    2b:2c:c6:18:f6:fa:e8:24:87:71:2c:e1:b6:1c:76:
                    8f:cb:d4:50:53:2d:ed:86:ce:d7:d9:c3:c8:52:4b:
                    4e:73:9f:f2:40:20:df:58:23:0d:61:6b:eb:15:eb:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:12:8D:B2:C3:34:13:E8:B6:2D:F8:7B:F4:05:3A:56:6A:06:56:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d1947b8-cfab-3122-b994-3e57b9740454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:de:3b:33:33:bf:d9:17:52:9d:6b:83:ce:14:18:0d:62:28:
         63:a9:10:67:2f:e4:a9:57:d1:2e:16:75:d9:76:34:59:d3:09:
         93:15:ef:82:20:06:33:20:d3:6f:1d:a7:d4:73:fa:28:4a:18:
         2e:03:af:35:8e:3d:60:97:d4:41:13:0d:c6:e1:fe:29:38:ce:
         b0:59:e4:12:5a:7d:1d:77:19:35:a4:cf:0a:07:82:26:29:c5:
         d4:02:1d:1d:8c:9c:78:8d:40:07:0f:f8:d5:af:60:a8:c5:fa:
         47:58:99:fd:e2:16:21:7f:da:b3:10:d9:8e:e2:e2:d0:99:79:
         2d:bc:fb:e7:ff:9a:90:69:fe:58:13:d6:75:00:bf:82:4b:71:
         01:89:2d:89:75:26:77:67:6b:60:ea:2d:31:3b:6b:52:6e:67:
         db:7e:58:c6:76:1a:65:d0:cc:fd:33:55:64:1c:36:50:8b:41:
         0c:1c:4e:d4:65:11:53:44:4f:4d:ae:05:88:a3:47:65:68:72:
         00:42:80:da:93:55:2d:f4:72:38:93:22:7d:cb:c9:ff:76:72:
         ad:09:28:4a:36:18:7c:7e:db:df:88:77:eb:59:8f:55:50:49:
         26:f7:a4:03:81:1f:63:fb:78:a2:1c:1a:21:77:60:13:cb:60:
         5b:08:dd:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl5yyCVQZCR6W8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MGNhMDlhMGMtZWEwMC00ZjEyLWE3MzgtOGNlM2JhNTgxYzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIigT0G5pV3ixNoYgBo15UO+Ol9HduS6eB5E
PpT2gzfZnxi9PZ1Wl969G59ZH/E9HdJMCDDWESbrr76wWB9N1QoRGxHipex/bHq1
6G7Cxj64DgS68uBnDcfIUVpmDUNPrnYIgnzcZ9UoLQ8uXFhW6y91q0fx9tSY5e55
MGEVtIKR9Sn+fItsixYniYV6F8GYcu8y2uZ+lLR1KWw2K9r+WkVMoCfgIW8ZrC5O
8zH5QYHvTNJRp4WJJ7JcVY4jRnh6U1QRiapl+ZPoY3sZM08Ud1ArLMYY9vroJIdx
LOG2HHaPy9RQUy3ths7X2cPIUktOc5/yQCDfWCMNYWvrFetZawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsSjbLDNBPoti34e/QFOlZqBlaoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGQxOTQ3YjgtY2ZhYi0z
MTIyLWI5OTQtM2U1N2I5NzQwNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjeOzMzv9kXUp1rg84UGA1iKGOpEGcv5KlX0S4Wddl2NFnTCZMV74Ig
BjMg028dp9Rz+ihKGC4DrzWOPWCX1EETDcbh/ik4zrBZ5BJafR13GTWkzwoHgiYp
xdQCHR2MnHiNQAcP+NWvYKjF+kdYmf3iFiF/2rMQ2Y7i4tCZeS28++f/mpBp/lgT
1nUAv4JLcQGJLYl1Jndna2DqLTE7a1JuZ9t+WMZ2GmXQzP0zVWQcNlCLQQwcTtRl
EVNET02uBYijR2VocgBCgNqTVS30cjiTIn3Lyf92cq0JKEo2GHx+29+Id+tZj1VQ
SSb3pAOBH2P7eKIcGiF3YBPLYFsI3Qo=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:14:32 2026 by rpki-client