Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3834d51-1c0e-38fd-bc96-87b403ede362.roa
File:                     d3834d51-1c0e-38fd-bc96-87b403ede362.roa (raw, json)
Hash identifier:          o6U/5LG3STPM/cxBop57OtvR+Fqes4OmI5Oxgy9rABE=
Subject key identifier:   AE:0A:75:8A:44:50:C0:47:2C:F0:F6:44:C5:4D:30:99:9C:78:C3:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E7A64E5CE8AF1B9A9C9C45110
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3834d51-1c0e-38fd-bc96-87b403ede362.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     5650
IP address blocks:        168.93.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e5:ce:8a:f1:b9:a9:c9:c4:51:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=cffb336b-0b07-4c7a-8073-6d2858ebd216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:25:33:d3:9f:eb:68:d2:72:13:74:cc:ca:
                    84:d1:7c:0b:8d:b1:44:9a:7e:0c:29:9c:e6:3e:11:
                    d9:79:0f:e2:ba:91:07:75:53:42:b5:fd:bf:af:19:
                    51:77:43:7a:99:28:8f:86:a6:86:3a:43:3e:5b:8a:
                    2a:55:02:8d:ee:cf:9b:5c:98:68:d3:c7:db:9c:16:
                    d7:0e:73:c6:46:89:d9:55:4d:34:af:fa:39:bc:31:
                    18:52:04:55:29:61:69:f0:ce:e5:58:cd:89:8e:26:
                    c8:9c:a5:e2:f2:0e:8e:2c:0d:c0:60:63:12:b9:83:
                    9f:ae:fe:e6:e7:fc:bc:8a:8c:5a:5a:0a:cb:66:78:
                    3a:b6:02:00:6a:28:f1:b8:69:54:ee:e0:ad:e7:76:
                    3e:0d:d1:ca:62:e0:4b:c0:58:22:03:7c:d7:db:f2:
                    e0:5b:9b:93:cc:a5:8f:fc:2d:7d:d8:e9:44:0e:8a:
                    c8:ab:98:69:eb:81:f4:85:ef:6c:50:0d:45:0a:a6:
                    4d:f2:4c:76:50:6a:38:e5:7d:44:2a:c5:96:ee:b5:
                    de:6c:c1:2f:1f:df:16:5c:30:27:19:95:60:04:4e:
                    ba:49:59:88:27:be:c4:2c:b0:36:f4:ac:a6:c9:83:
                    3a:e2:7e:19:2b:78:7f:bd:63:32:59:5f:b8:3a:0b:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0A:75:8A:44:50:C0:47:2C:F0:F6:44:C5:4D:30:99:9C:78:C3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3834d51-1c0e-38fd-bc96-87b403ede362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:62:a5:0b:16:12:10:e8:51:23:68:f8:bf:ac:00:63:d9:
         23:3e:6b:c7:8a:84:e8:6c:72:19:c5:92:c1:e9:29:bf:9d:45:
         0b:8a:0d:15:70:02:a9:82:8d:68:a4:b1:fd:14:7c:ff:75:9b:
         fe:70:ae:27:e5:0f:c5:e6:6b:f0:20:9a:c2:6b:61:1c:1b:2c:
         1f:70:8f:68:d4:ad:65:61:72:4c:c8:17:2b:61:41:53:26:0d:
         63:db:46:e1:23:18:b8:73:28:46:0c:2b:d0:6d:55:b8:e0:8f:
         a3:91:64:2e:7b:8d:03:aa:e4:7d:2b:0c:98:e1:84:e8:e5:ad:
         5a:8d:44:ce:60:09:36:94:d4:cc:2a:96:12:eb:0e:ef:ee:6f:
         2d:f8:2c:ed:bc:54:07:07:ca:83:af:a5:ec:64:61:b9:a0:55:
         74:2f:66:8f:a9:98:38:32:1d:20:c9:87:d3:aa:bc:9a:02:27:
         41:80:4f:eb:cf:3b:d4:32:2b:a8:93:5c:ea:ed:13:44:4c:f4:
         3c:9c:bd:23:60:ad:4c:45:81:d8:3e:26:99:55:1d:9b:1c:2d:
         fd:3e:62:9d:bd:0f:ac:4b:7b:75:10:1d:48:f1:86:70:a0:2e:
         e0:7b:aa:6b:e7:fa:2b:c9:a8:02:a2:e2:23:7c:28:59:64:2c:
         d7:4a:aa:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOXOivG5qcnEURAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
Y2ZmYjMzNmItMGIwNy00YzdhLTgwNzMtNmQyODU4ZWJkMjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpwlM9Of62jSchN0zMqE0XwLjbFEmn4MKZzm
PhHZeQ/iupEHdVNCtf2/rxlRd0N6mSiPhqaGOkM+W4oqVQKN7s+bXJho08fbnBbX
DnPGRonZVU00r/o5vDEYUgRVKWFp8M7lWM2JjibInKXi8g6OLA3AYGMSuYOfrv7m
5/y8ioxaWgrLZng6tgIAaijxuGlU7uCt53Y+DdHKYuBLwFgiA3zX2/LgW5uTzKWP
/C192OlEDorIq5hp64H0he9sUA1FCqZN8kx2UGo45X1EKsWW7rXebMEvH98WXDAn
GZVgBE66SVmIJ77ELLA29KymyYM64n4ZK3h/vWMyWV+4Ogv6aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4KdYpEUMBHLPD2RMVNMJmceMN5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDM4MzRkNTEtMWMwZS0z
OGZkLWJjOTYtODdiNDAzZWRlMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF31MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9zYqULFhIQ6FEjaPi/rABj2SM+a8eKhOhschnFksHpKb+dRQuKDRVw
AqmCjWiksf0UfP91m/5wriflD8Xma/AgmsJrYRwbLB9wj2jUrWVhckzIFythQVMm
DWPbRuEjGLhzKEYMK9BtVbjgj6ORZC57jQOq5H0rDJjhhOjlrVqNRM5gCTaU1Mwq
lhLrDu/uby34LO28VAcHyoOvpexkYbmgVXQvZo+pmDgyHSDJh9OqvJoCJ0GAT+vP
O9QyK6iTXOrtE0RM9DycvSNgrUxFgdg+JplVHZscLf0+Yp29D6xLe3UQHUjxhnCg
LuB7qmvn+ivJqAKi4iN8KFlkLNdKqn8=
-----END CERTIFICATE-----
Generated at Mon Jul 13 11:40:55 2026 by rpki-client