Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5895adb0-fd36-3f51-8d82-acd29e37ad37.roa
File:                     5895adb0-fd36-3f51-8d82-acd29e37ad37.roa (raw, json)
Hash identifier:          BIkbSuqxZfbxbZSX5jhxjJoYl6iUUUua7VHw5uRSZxo=
Subject key identifier:   30:14:B0:00:B8:FE:59:0E:BE:85:FA:15:FE:30:FA:B8:1F:0C:B2:7E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD8F0837ECBF36607A8D05980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5895adb0-fd36-3f51-8d82-acd29e37ad37.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     19695
IP address blocks:        168.93.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:83:7e:cb:f3:66:07:a8:d0:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=bdda3874-8957-4e6a-8bb5-474031ede435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:a1:44:a0:fa:e5:85:fd:ed:fb:d2:b9:da:
                    1d:4f:c2:93:d5:9f:f0:6f:56:0f:9c:47:21:fb:18:
                    b1:ab:6f:d3:8f:74:26:8d:6b:fe:3e:6a:cb:e2:37:
                    d9:f8:cc:c1:9e:41:a1:a8:5c:ce:d1:00:ba:b3:8d:
                    16:db:47:30:b8:a6:3a:e1:32:4b:22:31:da:d9:c0:
                    ee:32:b4:91:19:0f:d4:c0:ea:cd:37:70:67:63:a3:
                    6f:55:09:e1:a6:26:36:be:ce:d5:0c:5b:91:3b:f5:
                    6d:9f:1a:6a:80:74:cd:1e:2e:a8:da:21:49:92:ab:
                    7e:c6:9e:43:a0:4f:23:c9:89:2a:fc:b8:af:6e:84:
                    55:b5:a8:68:e2:2e:93:1a:b7:3e:33:f4:62:3f:72:
                    c0:ee:e9:e6:db:85:91:79:3a:6a:95:b9:6a:4e:e9:
                    33:a2:70:d5:e1:5e:f1:6c:bd:71:d0:c6:72:4a:26:
                    6f:82:3e:76:54:0b:3b:ad:ed:55:8b:74:b7:91:33:
                    d2:7c:f4:5e:34:59:a1:96:6c:9c:c5:5b:22:4c:69:
                    4b:64:cb:52:29:cb:a1:cf:d0:a9:6c:a3:2f:a5:09:
                    07:ce:45:ce:35:ee:25:a5:0b:9b:61:8c:41:92:c8:
                    bf:87:dd:39:7f:04:f5:96:c6:03:09:e0:bd:16:c1:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:B0:00:B8:FE:59:0E:BE:85:FA:15:FE:30:FA:B8:1F:0C:B2:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5895adb0-fd36-3f51-8d82-acd29e37ad37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:f3:95:1b:5c:5f:e2:00:29:85:2c:f5:bd:ec:37:50:9e:
         04:91:a8:e2:ee:4d:be:c9:e7:c5:1d:d8:cd:55:d1:d3:ad:a4:
         83:e9:0b:48:1a:8c:0a:5c:6d:a6:7e:5d:4e:56:d5:89:af:5e:
         24:33:98:fd:b5:26:3d:ce:a8:6a:f0:78:1f:da:2a:4f:4e:99:
         5c:02:fb:d2:5f:06:73:37:62:1d:c2:34:83:0e:1a:7c:81:b0:
         9d:e3:5b:b3:4a:23:12:db:19:65:2e:43:70:0d:c9:80:6b:aa:
         bc:77:74:95:2a:ee:f7:a3:32:ee:4b:8e:16:ca:22:5b:40:82:
         a7:ed:88:2b:76:6b:79:e9:38:de:1d:4d:e6:18:fb:4a:e1:8d:
         61:75:93:01:9e:43:11:48:32:f4:ae:14:06:a1:80:b1:96:6d:
         8a:f3:3d:63:e7:32:aa:a5:55:5d:77:de:7f:8c:f2:a3:be:88:
         00:1b:93:1a:95:a4:af:c7:2b:a5:f2:98:48:e3:60:86:95:da:
         ff:17:84:68:9e:31:c7:ce:ce:23:11:e0:c8:02:9b:7c:7b:43:
         b6:f7:f8:7b:90:9f:0b:d4:7b:bb:a6:96:41:c9:86:bb:cc:20:
         7a:52:c6:8d:d2:e2:38:29:35:da:e8:02:db:de:fa:23:99:46:
         bf:10:e7:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8IN+y/NmB6jQWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
YmRkYTM4NzQtODk1Ny00ZTZhLThiYjUtNDc0MDMxZWRlNDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ahRKD65YX97fvSudodT8KT1Z/wb1YPnEch
+xixq2/Tj3QmjWv+PmrL4jfZ+MzBnkGhqFzO0QC6s40W20cwuKY64TJLIjHa2cDu
MrSRGQ/UwOrNN3BnY6NvVQnhpiY2vs7VDFuRO/VtnxpqgHTNHi6o2iFJkqt+xp5D
oE8jyYkq/LivboRVtaho4i6TGrc+M/RiP3LA7unm24WReTpqlblqTukzonDV4V7x
bL1x0MZySiZvgj52VAs7re1Vi3S3kTPSfPReNFmhlmycxVsiTGlLZMtSKcuhz9Cp
bKMvpQkHzkXONe4lpQubYYxBksi/h905fwT1lsYDCeC9FsGZzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAUsAC4/lkOvoX6Ff4w+rgfDLJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTg5NWFkYjAtZmQzNi0z
ZjUxLThkODItYWNkMjllMzdhZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqF3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKmK85UbXF/iACmFLPW97DdQngSRqOLuTb7J58Ud2M1V0dOtpIPpC0ga
jApcbaZ+XU5W1YmvXiQzmP21Jj3OqGrweB/aKk9OmVwC+9JfBnM3Yh3CNIMOGnyB
sJ3jW7NKIxLbGWUuQ3ANyYBrqrx3dJUq7vejMu5LjhbKIltAgqftiCt2a3npON4d
TeYY+0rhjWF1kwGeQxFIMvSuFAahgLGWbYrzPWPnMqqlVV133n+M8qO+iAAbkxqV
pK/HK6XymEjjYIaV2v8XhGieMcfOziMR4MgCm3x7Q7b3+HuQnwvUe7umlkHJhrvM
IHpSxo3S4jgpNdroAtve+iOZRr8Q528=
-----END CERTIFICATE-----
Generated at Thu May 28 17:14:57 2026 by rpki-client