Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa
File:                     59f6afbb-919b-3388-ab22-83582473d385.roa (raw, json)
Hash identifier:          /CM5/jM3nKvRGZtwROiBk4vwA/LZvIhXRykTe15phw8=
Subject key identifier:   68:0C:CA:16:32:CB:F1:21:12:7F:92:52:CC:66:38:12:F4:2C:E5:FD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F549D8054ED204602D56EB4C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     26383
IP address blocks:        166.88.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:80:54:ed:20:46:02:d5:6e:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=4008b9ee-c2ff-47a3-821d-243719e1f196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:92:3f:c6:e7:ea:b8:29:19:70:98:e2:2a:
                    03:85:1d:72:6b:b6:3c:4d:9b:0d:1a:22:06:bb:47:
                    66:ba:4e:b3:97:a2:c5:57:a0:51:76:03:65:19:aa:
                    b6:33:be:01:43:29:c9:8c:fe:90:9e:78:b5:b7:21:
                    21:a7:df:11:63:db:d5:7d:00:f9:79:e9:91:a3:1c:
                    69:d2:bc:54:57:56:db:eb:94:87:77:a8:ac:6d:96:
                    a6:42:40:c4:c8:a5:b7:4e:f3:a3:6c:e7:e2:ea:ce:
                    46:c4:a7:f0:79:3a:09:cd:da:b9:ba:43:28:a3:e0:
                    c6:f6:bf:15:f3:2f:cf:2e:ac:52:52:9f:44:08:cb:
                    d0:24:fd:1f:92:9b:11:d7:46:84:36:5a:ff:f8:ea:
                    ae:35:a5:74:13:c6:22:93:60:2f:3d:77:c7:94:92:
                    1d:5f:93:e1:5f:d6:dc:20:b6:b5:57:11:59:7f:c6:
                    d4:cf:a7:50:13:93:d6:d3:3b:4b:a6:35:54:be:10:
                    4a:96:cb:72:c6:33:27:5a:50:bb:e8:71:d9:6f:25:
                    80:b2:9a:94:a8:fd:ff:f9:d2:21:33:cc:e4:e2:e0:
                    70:f2:8e:e8:9c:ca:c5:02:5d:b8:90:c7:08:0d:0e:
                    c9:47:19:b5:c2:c8:0a:96:0e:38:04:05:ae:e6:d7:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0C:CA:16:32:CB:F1:21:12:7F:92:52:CC:66:38:12:F4:2C:E5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59f6afbb-919b-3388-ab22-83582473d385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:40:7a:3a:31:bf:56:fd:b3:08:89:fe:ea:53:41:26:bb:
         73:7c:de:8d:69:26:6c:ed:cf:a6:6f:8e:44:37:51:2b:e2:61:
         28:99:bc:7a:da:42:c3:82:a6:72:95:56:20:5d:20:49:6e:c7:
         74:ad:66:a3:ef:a9:4e:c9:c4:d3:e5:97:bf:23:68:b6:a6:2a:
         1b:96:e9:eb:7d:10:e5:0b:41:e1:64:f3:7a:5e:87:8b:90:a5:
         78:2b:1f:11:57:36:55:f9:7d:bc:e3:1f:8e:91:5e:4e:ba:0c:
         a9:5a:51:ff:7b:2e:45:bb:27:f2:95:c5:d6:26:2b:aa:c1:50:
         77:e9:43:47:b8:e1:71:5f:f7:84:a3:4d:ec:c6:ab:8d:61:75:
         57:b5:7f:63:6f:8a:f1:95:de:0b:78:a3:56:27:0e:59:11:da:
         ff:96:b1:b2:9f:0d:ca:3c:f2:32:cd:d7:f1:7e:7f:4b:25:b2:
         7c:13:99:4a:ec:50:99:ec:2d:4a:8e:47:3c:c3:a0:54:74:72:
         3e:ae:17:2d:fc:fd:7f:d1:20:d8:46:a1:0b:54:6f:2a:e3:4a:
         37:44:cb:fa:31:80:2a:29:82:7e:de:46:f8:b2:df:4b:d4:bb:
         f9:01:e5:91:85:0a:16:9f:84:ca:64:b6:ff:74:17:1b:4b:b9:
         28:e0:aa:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnYBU7SBGAtVutMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NDAwOGI5ZWUtYzJmZi00N2EzLTgyMWQtMjQzNzE5ZTFmMTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD+SP8bn6rgpGXCY4ioDhR1ya7Y8TZsNGiIG
u0dmuk6zl6LFV6BRdgNlGaq2M74BQynJjP6Qnni1tyEhp98RY9vVfQD5eemRoxxp
0rxUV1bb65SHd6isbZamQkDEyKW3TvOjbOfi6s5GxKfweToJzdq5ukMoo+DG9r8V
8y/PLqxSUp9ECMvQJP0fkpsR10aENlr/+OquNaV0E8Yik2AvPXfHlJIdX5PhX9bc
ILa1VxFZf8bUz6dQE5PW0ztLpjVUvhBKlstyxjMnWlC76HHZbyWAspqUqP3/+dIh
M8zk4uBw8o7onMrFAl24kMcIDQ7JRxm1wsgKlg44BAWu5tdfJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgMyhYyy/EhEn+SUsxmOBL0LOX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTlmNmFmYmItOTE5Yi0z
Mzg4LWFiMjItODM1ODI0NzNkMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoQQHo6Mb9W/bMIif7qU0Emu3N83o1pJmztz6ZvjkQ3USviYSiZvHra
QsOCpnKVViBdIElux3StZqPvqU7JxNPll78jaLamKhuW6et9EOULQeFk83peh4uQ
pXgrHxFXNlX5fbzjH46RXk66DKlaUf97LkW7J/KVxdYmK6rBUHfpQ0e44XFf94Sj
TezGq41hdVe1f2NvivGV3gt4o1YnDlkR2v+WsbKfDco88jLN1/F+f0slsnwTmUrs
UJnsLUqORzzDoFR0cj6uFy38/X/RINhGoQtUbyrjSjdEy/oxgCopgn7eRviy30vU
u/kB5ZGFChafhMpktv90FxtLuSjgqpI=
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:07:04 2026 by rpki-client