Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d472c05d-11e9-3e04-8656-7dbb489ce4b5.roa
File:                     d472c05d-11e9-3e04-8656-7dbb489ce4b5.roa (raw, json)
Hash identifier:          1/lCc3vVlb8tZzI/+NBDYAlap2XjgfM7XDQoQCttnzc=
Subject key identifier:   EB:2B:07:24:A7:00:AE:E6:B3:40:0B:9F:8C:50:9B:B0:D0:24:6C:64
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEF45F3E09BBE5B1B5D49BC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d472c05d-11e9-3e04-8656-7dbb489ce4b5.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     18779
IP address blocks:        166.88.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:f3:e0:9b:be:5b:1b:5d:49:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=2be43bcf-0883-49ae-b0e3-f4c32124c91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f9:48:8e:94:86:b9:0f:39:21:db:cb:ef:d0:
                    94:4c:80:67:a6:01:38:72:f1:b8:72:83:cf:e3:c8:
                    7e:ca:30:b8:a4:88:2f:8c:68:3d:8b:97:a1:be:4b:
                    ca:92:ef:49:af:5a:d5:3b:87:4c:ae:f5:93:e0:4c:
                    98:f0:54:72:6e:89:6f:b6:2d:64:0c:1f:ef:f3:ac:
                    cd:fb:fd:4b:c6:ff:66:f3:36:e9:ec:1b:e7:c9:e5:
                    2c:30:58:82:4c:36:9d:cb:56:37:24:86:74:7d:2a:
                    d4:fc:9b:e2:98:29:f5:41:08:55:19:58:6d:bb:c9:
                    38:ba:18:b4:1d:69:22:44:07:67:ed:95:12:fe:d5:
                    71:35:23:10:2d:25:a2:87:48:42:e8:12:c7:a8:c4:
                    28:73:2c:9a:09:8b:3e:2b:5b:80:83:40:8b:22:bf:
                    a3:2d:3c:8f:d6:26:a7:0f:2d:44:f7:1a:03:54:a9:
                    da:14:29:57:05:e9:c1:f4:a0:08:fc:38:0d:de:2d:
                    8f:4f:b0:06:bf:01:1e:8c:08:95:60:6d:1c:32:ed:
                    de:34:c1:57:79:e2:45:64:4d:c2:b2:fb:26:3f:32:
                    ff:83:b5:73:a9:25:af:db:fb:b1:80:31:f0:dc:e2:
                    1f:8d:60:23:22:b6:e1:ad:01:24:ee:8a:24:51:8d:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:07:24:A7:00:AE:E6:B3:40:0B:9F:8C:50:9B:B0:D0:24:6C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d472c05d-11e9-3e04-8656-7dbb489ce4b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:c3:9c:6c:51:87:20:71:06:f7:8f:94:b3:c3:49:ea:b8:
         cb:10:18:d1:dc:f8:e0:31:b5:52:0a:58:8f:80:8f:39:63:ee:
         67:45:1b:31:9a:64:9b:56:03:ab:1e:67:a1:5c:e0:bf:91:d1:
         8d:ba:a5:20:00:42:94:5a:6f:7c:c9:90:97:09:fb:4c:d3:ed:
         86:a5:19:a1:70:40:35:af:db:fb:0e:6f:dd:2b:a6:a6:41:be:
         40:b1:98:ff:20:8b:68:85:32:0c:c0:91:49:c1:d3:62:e2:e5:
         f7:57:42:de:c3:d1:bd:ef:aa:74:56:fa:03:13:39:6b:6d:39:
         13:6b:9a:1c:c9:00:62:fc:1e:07:f8:11:01:3e:8c:e7:bd:76:
         e1:69:87:de:f3:c8:ec:57:4a:99:55:ba:bc:d2:33:56:a4:3e:
         2c:68:59:ca:a5:b0:72:ea:7b:43:e0:ea:f9:e2:a7:ad:74:73:
         5b:33:18:73:71:e3:5b:b4:ff:2a:e6:f7:2f:f4:bf:31:c8:78:
         34:ae:b3:dc:2e:3f:90:9b:42:88:31:27:eb:6f:b5:d1:7f:89:
         d8:11:63:b7:c8:98:99:33:47:39:8b:d1:b0:be:07:e6:ac:62:
         b5:dd:d7:42:11:f5:fe:4d:c2:cc:ad:f2:7e:6c:6c:7b:a5:89:
         41:a9:19:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRfPgm75bG11JvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
MmJlNDNiY2YtMDg4My00OWFlLWIwZTMtZjRjMzIxMjRjOTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PlIjpSGuQ85IdvL79CUTIBnpgE4cvG4coPP
48h+yjC4pIgvjGg9i5ehvkvKku9Jr1rVO4dMrvWT4EyY8FRybolvti1kDB/v86zN
+/1Lxv9m8zbp7BvnyeUsMFiCTDady1Y3JIZ0fSrU/JvimCn1QQhVGVhtu8k4uhi0
HWkiRAdn7ZUS/tVxNSMQLSWih0hC6BLHqMQocyyaCYs+K1uAg0CLIr+jLTyP1ian
Dy1E9xoDVKnaFClXBenB9KAI/DgN3i2PT7AGvwEejAiVYG0cMu3eNMFXeeJFZE3C
svsmPzL/g7VzqSWv2/uxgDHw3OIfjWAjIrbhrQEk7ookUY0z5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsrBySnAK7ms0ALn4xQm7DQJGxkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDQ3MmMwNWQtMTFlOS0z
ZTA0LTg2NTYtN2RiYjQ4OWNlNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMOw5xsUYcgcQb3j5Szw0nquMsQGNHc+OAxtVIKWI+Ajzlj7mdFGzGa
ZJtWA6seZ6Fc4L+R0Y26pSAAQpRab3zJkJcJ+0zT7YalGaFwQDWv2/sOb90rpqZB
vkCxmP8gi2iFMgzAkUnB02Li5fdXQt7D0b3vqnRW+gMTOWttORNrmhzJAGL8Hgf4
EQE+jOe9duFph97zyOxXSplVurzSM1akPixoWcqlsHLqe0Pg6vnip610c1szGHNx
41u0/yrm9y/0vzHIeDSus9wuP5CbQogxJ+tvtdF/idgRY7fImJkzRzmL0bC+B+as
YrXd10IR9f5Nwsyt8n5sbHuliUGpGa4=
-----END CERTIFICATE-----
Generated at Thu May 28 17:14:18 2026 by rpki-client