Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/0dc9af79-82e5-3b7f-a1f1-944175dd2658.roa
File:                     0dc9af79-82e5-3b7f-a1f1-944175dd2658.roa (raw, json)
Hash identifier:          GXduBwu8qjI0xPI9GJTw7bjUW9hFU1d6HzM7jnvG+PM=
Subject key identifier:   93:BB:3F:1C:6B:F4:33:2E:DE:FB:61:00:11:17:25:39:D8:B4:4F:AE
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F58CD66EF928533DC16497A60
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/0dc9af79-82e5-3b7f-a1f1-944175dd2658.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     12037
IP address blocks:        167.176.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:66:ef:92:85:33:dc:16:49:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=44708192-4aec-4e99-a156-b8152de702fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:cd:9c:63:9a:05:44:6a:fc:9e:c9:5d:2d:
                    e2:a3:fa:3b:ee:a2:3c:85:38:3d:a3:72:5d:d8:0a:
                    04:a8:01:9a:d7:91:98:69:ba:79:10:5d:b4:ea:0c:
                    a8:86:19:5c:cd:6a:1a:4c:b5:84:d0:79:16:47:00:
                    65:74:74:ae:14:31:36:19:3d:c5:9b:2e:e5:36:10:
                    01:bd:fe:c5:ff:6d:c5:61:45:27:b9:ac:fc:8d:de:
                    10:10:8e:da:69:96:dc:28:4d:18:d6:3e:e5:2d:5a:
                    4d:c8:92:d3:8b:5b:b2:ec:40:f3:e3:5a:df:59:47:
                    a2:b0:4a:bc:93:20:aa:82:f5:cb:3c:51:e1:ff:ab:
                    42:3d:a8:cb:e5:c0:76:5c:f8:2b:13:a2:7b:fc:db:
                    ac:41:47:17:bf:c8:a5:78:25:fa:42:ee:31:08:fd:
                    60:b8:a3:97:ca:47:3d:ff:3e:d6:c2:04:f5:06:c5:
                    e1:bb:29:f4:e7:90:6c:45:9b:5d:ce:33:09:92:91:
                    98:59:e2:a2:c8:b4:52:ec:07:42:e7:7c:e3:07:64:
                    12:53:83:f9:6e:08:93:c3:6d:51:e0:a9:1d:13:39:
                    27:75:6e:be:87:97:4d:80:33:60:e8:80:4a:63:82:
                    8d:45:7a:d1:bf:64:99:f1:2b:df:46:46:2b:4d:3c:
                    1c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:3F:1C:6B:F4:33:2E:DE:FB:61:00:11:17:25:39:D8:B4:4F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/0dc9af79-82e5-3b7f-a1f1-944175dd2658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:57:37:8e:d6:d6:5c:3d:24:86:e3:ad:b5:71:4c:cc:67:30:
         52:b7:e5:11:6f:83:27:b7:d5:01:c5:8b:b6:53:b0:81:2b:ee:
         74:1e:d1:2e:a0:72:2c:38:51:54:8a:33:61:d1:8f:2f:f7:46:
         c3:ca:0f:ba:7f:2c:3d:23:b1:2b:9b:1f:53:0f:5d:ca:09:ac:
         3f:02:0e:78:0a:f8:e5:ee:c5:50:d5:05:6f:50:98:6c:0b:1c:
         c3:9a:cd:87:ac:5f:61:81:eb:2f:25:08:c5:2b:e8:83:0b:08:
         0b:1b:39:7d:70:ab:9b:91:34:ca:1c:1e:34:02:9b:94:22:01:
         72:59:98:03:86:f8:de:61:e3:11:20:81:ef:2f:ab:b5:5f:bf:
         e1:0b:ed:ad:96:28:6c:98:0c:19:0b:29:8d:46:5e:21:f7:e4:
         d7:3a:e4:c6:92:8b:07:fd:11:dd:01:3c:0e:c7:f7:67:22:b3:
         84:47:a1:6e:bd:a7:11:2e:cc:56:06:02:96:10:1a:bc:92:56:
         b8:e8:79:62:51:91:98:ba:18:32:ee:6c:07:32:3a:f7:c6:e8:
         9c:38:e8:17:86:9d:27:72:1e:c4:18:15:f8:7b:77:c1:f3:22:
         71:e3:60:6f:26:1e:4b:ff:6b:7a:10:7a:04:bb:fb:3a:83:2c:
         38:18:3a:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWbvkoUz3BZJemAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk
NDQ3MDgxOTItNGFlYy00ZTk5LWExNTYtYjgxNTJkZTcwMmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvujNnGOaBURq/J7JXS3io/o77qI8hTg9o3Jd
2AoEqAGa15GYabp5EF206gyohhlczWoaTLWE0HkWRwBldHSuFDE2GT3Fmy7lNhAB
vf7F/23FYUUnuaz8jd4QEI7aaZbcKE0Y1j7lLVpNyJLTi1uy7EDz41rfWUeisEq8
kyCqgvXLPFHh/6tCPajL5cB2XPgrE6J7/NusQUcXv8ileCX6Qu4xCP1guKOXykc9
/z7WwgT1BsXhuyn055BsRZtdzjMJkpGYWeKiyLRS7AdC53zjB2QSU4P5bgiTw21R
4KkdEzkndW6+h5dNgDNg6IBKY4KNRXrRv2SZ8SvfRkYrTTwcEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJO7Pxxr9DMu3vthABEXJTnYtE+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMGRjOWFmNzktODJlNS0z
YjdmLWExZjEtOTQ0MTc1ZGQyNjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7DBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClXN47W1lw9JIbjrbVxTMxnMFK35RFvgye31QHFi7ZTsIEr7nQe0S6g
ciw4UVSKM2HRjy/3RsPKD7p/LD0jsSubH1MPXcoJrD8CDngK+OXuxVDVBW9QmGwL
HMOazYesX2GB6y8lCMUr6IMLCAsbOX1wq5uRNMocHjQCm5QiAXJZmAOG+N5h4xEg
ge8vq7Vfv+EL7a2WKGyYDBkLKY1GXiH35Nc65MaSiwf9Ed0BPA7H92cis4RHoW69
pxEuzFYGApYQGrySVrjoeWJRkZi6GDLubAcyOvfG6Jw46BeGnSdyHsQYFfh7d8Hz
InHjYG8mHkv/a3oQegS7+zqDLDgYOtQ=
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:29 2026 by rpki-client