Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/94fb18e6-e7ec-324f-87cc-70652381780e.roa
File:                     94fb18e6-e7ec-324f-87cc-70652381780e.roa (raw, json)
Hash identifier:          uONelhXFEHkEAcjRtYZkT1iSLuFrnOM1sin5+tVALI0=
Subject key identifier:   B5:AC:84:CD:11:14:60:4D:85:91:54:70:6C:AA:92:25:0C:B2:74:C8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CC34747B91886322304EFBA60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/94fb18e6-e7ec-324f-87cc-70652381780e.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     26548
IP address blocks:        166.88.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:47:b9:18:86:32:23:04:ef:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=6c7c2209-7453-4190-bf59-db224ba42f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:4c:09:66:92:41:5b:d8:6a:52:28:aa:0a:
                    8e:bf:e2:3a:ed:ee:b2:e5:24:72:fb:a0:6f:86:81:
                    fa:05:20:f5:c2:7b:0a:94:21:44:7c:b5:1d:b1:c2:
                    a1:8f:69:25:de:d2:8a:55:e9:aa:18:24:16:bb:e2:
                    09:55:57:9f:2e:4f:90:0a:8f:4a:a7:dc:0d:1c:20:
                    ac:c1:84:1e:45:27:00:a5:b9:d7:b8:c7:89:04:d7:
                    c0:9c:cd:a8:dc:ee:76:1d:0a:bf:94:f0:4d:c8:9f:
                    8c:39:b5:8c:d1:f5:78:dd:92:38:74:3c:c8:91:ef:
                    74:34:11:d5:9d:af:07:55:6f:92:1c:32:cf:a3:b3:
                    ac:f2:a4:67:ed:3c:e1:9a:49:6b:05:1b:08:6b:2a:
                    42:4e:87:1e:85:f4:4e:92:24:e7:e5:65:b2:3f:33:
                    02:08:ca:15:c0:2c:5f:b4:bb:c3:39:b6:a1:62:85:
                    d3:03:8c:05:82:87:5c:ca:f7:64:07:bc:b4:78:cf:
                    8e:4b:b8:85:a2:6f:87:fa:41:93:f9:f9:83:1c:e1:
                    3f:b5:a6:7c:25:d4:ab:24:f4:5d:1b:bb:e0:ee:24:
                    0e:e3:14:79:84:cf:9c:89:a8:10:1d:b8:76:95:3e:
                    f6:6d:21:c2:80:97:b5:36:13:82:21:53:d9:5c:70:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:84:CD:11:14:60:4D:85:91:54:70:6C:AA:92:25:0C:B2:74:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/94fb18e6-e7ec-324f-87cc-70652381780e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a6:7a:27:79:36:cc:fa:a4:c7:36:c3:40:01:42:e8:ea:4d:
         85:1d:36:f2:37:70:b7:ff:b4:57:31:88:c3:5f:ce:7b:6b:21:
         24:8f:2f:9b:b5:3c:23:88:be:60:e6:18:47:4b:2c:3e:a8:a1:
         f0:5a:23:52:4f:50:9d:24:19:da:18:77:ee:44:e4:c5:02:e5:
         6f:95:dd:5a:03:2e:63:e2:0f:94:16:be:7f:96:3a:d8:24:45:
         a7:e6:9c:52:f2:04:b4:3b:f1:bc:54:44:fd:f1:31:4e:f8:78:
         30:64:f1:49:4b:42:f3:fe:7e:f7:28:3d:72:6b:a3:20:fe:af:
         08:3f:a5:68:b3:2e:7e:43:fd:29:24:b3:af:53:75:fc:5f:48:
         e2:79:4b:3e:00:09:45:00:fd:0e:21:fa:9d:95:1b:ad:0a:3c:
         5a:67:f6:ff:a0:bb:bd:5e:90:8e:9a:e7:95:dd:82:42:5d:63:
         d6:95:b6:1f:82:0b:28:6d:b7:2e:00:1d:18:13:fd:fd:92:ca:
         13:a5:8f:60:6f:9e:fc:f7:4d:6e:a5:59:19:d0:ed:1c:27:23:
         32:3e:91:80:e0:ec:e8:10:a1:33:e1:34:0a:ce:98:32:73:be:
         25:29:c3:e9:88:46:a5:d3:92:ec:66:03:a9:5f:93:4b:39:ab:
         11:91:51:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0e5GIYyIwTvumAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
NmM3YzIyMDktNzQ1My00MTkwLWJmNTktZGIyMjRiYTQyZjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnThMCWaSQVvYalIoqgqOv+I67e6y5SRy+6Bv
hoH6BSD1wnsKlCFEfLUdscKhj2kl3tKKVemqGCQWu+IJVVefLk+QCo9Kp9wNHCCs
wYQeRScApbnXuMeJBNfAnM2o3O52HQq/lPBNyJ+MObWM0fV43ZI4dDzIke90NBHV
na8HVW+SHDLPo7Os8qRn7TzhmklrBRsIaypCTocehfROkiTn5WWyPzMCCMoVwCxf
tLvDObahYoXTA4wFgodcyvdkB7y0eM+OS7iFom+H+kGT+fmDHOE/taZ8JdSrJPRd
G7vg7iQO4xR5hM+ciagQHbh2lT72bSHCgJe1NhOCIVPZXHBa/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWshM0RFGBNhZFUcGyqkiUMsnTIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTRmYjE4ZTYtZTdlYy0z
MjRmLTg3Y2MtNzA2NTIzODE3ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplisMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOmeid5Nsz6pMc2w0ABQujqTYUdNvI3cLf/tFcxiMNfzntrISSPL5u1
PCOIvmDmGEdLLD6oofBaI1JPUJ0kGdoYd+5E5MUC5W+V3VoDLmPiD5QWvn+WOtgk
RafmnFLyBLQ78bxURP3xMU74eDBk8UlLQvP+fvcoPXJroyD+rwg/pWizLn5D/Skk
s69TdfxfSOJ5Sz4ACUUA/Q4h+p2VG60KPFpn9v+gu71ekI6a55XdgkJdY9aVth+C
Cyhtty4AHRgT/f2SyhOlj2Bvnvz3TW6lWRnQ7RwnIzI+kYDg7OgQoTPhNArOmDJz
viUpw+mIRqXTkuxmA6lfk0s5qxGRUQo=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:17 2026 by rpki-client