Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa
File:                     98cdc532-d434-3d0a-b6d1-140130e6240b.roa (raw, json)
Hash identifier:          t+LilTe0r6e+6Bh8cGP3XDNE/TcU2hmF27TLzYhXCQc=
Subject key identifier:   6A:24:CC:0D:47:35:E2:E1:E7:A5:CC:34:2A:F2:BF:36:7E:2F:6C:B0
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F549DAB578A80F6C91D5C8FC0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     12037
IP address blocks:        167.176.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ab:57:8a:80:f6:c9:1d:5c:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=15870c70-b45c-4351-8f1b-0960ef42f694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:d8:e6:e5:f1:f5:b3:96:25:e1:de:42:14:
                    18:b5:be:45:90:75:a3:22:00:6d:67:d2:b2:ec:08:
                    fd:1a:a0:65:c9:0d:f4:5c:c9:65:7c:cd:98:8b:b9:
                    8f:32:54:f7:44:51:98:12:5e:73:1c:0b:bd:af:2a:
                    d3:f1:72:52:e7:66:a0:6d:9d:dd:2a:2d:ce:80:fb:
                    02:d6:97:73:b0:b0:5c:e4:16:b7:47:01:86:9c:84:
                    b4:39:f6:a6:4f:42:42:82:1f:9c:c3:fd:85:ad:ba:
                    83:0a:45:fa:ed:b6:eb:8b:ff:bf:d0:02:25:b5:55:
                    a9:47:c4:e2:34:6b:e2:f9:86:04:5c:c5:79:d0:11:
                    0c:f3:40:4c:06:a3:7d:a1:0a:8a:a0:5a:35:bb:1b:
                    aa:3c:b5:be:7c:2f:a9:93:11:d4:36:45:70:f5:5c:
                    55:58:92:fa:e7:dd:b4:9e:68:62:20:2c:4c:43:9a:
                    80:51:6e:cb:0f:99:6c:fc:f5:08:3d:57:64:f6:65:
                    88:61:9a:92:e6:24:5f:ea:76:91:c8:93:e3:6f:70:
                    3c:6a:03:ca:03:30:5e:50:df:c4:84:d6:9b:2a:06:
                    e9:b4:10:ca:45:ff:a5:22:44:45:63:83:f1:e3:27:
                    73:a1:ad:5b:4b:90:84:00:7d:14:d9:5f:be:9b:72:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:CC:0D:47:35:E2:E1:E7:A5:CC:34:2A:F2:BF:36:7E:2F:6C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:57:52:69:00:63:3e:da:6d:7c:d3:d7:ca:f6:50:4c:22:f9:
         0c:ef:61:1c:8c:08:a6:14:60:98:d9:02:b4:bf:1c:eb:0a:76:
         82:a4:0f:eb:3f:f3:39:10:de:93:0b:db:01:5c:e6:52:28:37:
         ec:db:a0:a1:2b:71:0b:c2:7e:a8:2d:d3:28:0c:20:78:11:4f:
         0f:9b:61:68:76:d0:74:92:0a:11:7a:34:6c:f2:98:3b:cf:f8:
         35:f1:00:74:b2:76:95:4d:11:37:af:34:71:4a:6a:a0:3a:ae:
         d7:13:4b:d3:e1:7b:df:93:58:28:52:0b:eb:61:32:f5:f3:bd:
         76:3f:27:64:f7:fa:1f:c8:d4:a5:b7:36:fe:fa:66:b3:92:f3:
         20:f6:f5:04:b4:65:4c:b7:8a:65:0c:82:a8:09:58:8f:11:1c:
         a1:e8:2f:54:61:ee:a3:a5:be:19:5d:13:2e:cf:0f:c1:94:e2:
         e6:f9:1e:30:6c:c2:e5:63:03:4c:64:ef:68:7b:e8:72:76:0f:
         ec:5d:20:9b:18:89:e2:1e:ab:a2:34:81:50:1a:89:0f:e6:5b:
         6f:b2:c2:4d:7d:d3:8d:23:be:6d:1f:61:dc:9b:63:0e:8e:81:
         6d:5e:73:3d:bb:0b:af:05:06:a3:5f:62:5e:c7:43:88:ba:24:
         52:21:57:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnatXioD2yR1cj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTU4NzBjNzAtYjQ1Yy00MzUxLThmMWItMDk2MGVmNDJmNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+nY5uXx9bOWJeHeQhQYtb5FkHWjIgBtZ9Ky
7Aj9GqBlyQ30XMllfM2Yi7mPMlT3RFGYEl5zHAu9ryrT8XJS52agbZ3dKi3OgPsC
1pdzsLBc5Ba3RwGGnIS0OfamT0JCgh+cw/2FrbqDCkX67bbri/+/0AIltVWpR8Ti
NGvi+YYEXMV50BEM80BMBqN9oQqKoFo1uxuqPLW+fC+pkxHUNkVw9VxVWJL65920
nmhiICxMQ5qAUW7LD5ls/PUIPVdk9mWIYZqS5iRf6naRyJPjb3A8agPKAzBeUN/E
hNabKgbptBDKRf+lIkRFY4Px4ydzoa1bS5CEAH0U2V++m3K2xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGokzA1HNeLh56XMNCryvzZ+L2ywMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvOThjZGM1MzItZDQzNC0z
ZDBhLWI2ZDEtMTQwMTMwZTYyNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxXUmkAYz7abXzT18r2UEwi+QzvYRyMCKYUYJjZArS/HOsKdoKkD+s/
8zkQ3pML2wFc5lIoN+zboKErcQvCfqgt0ygMIHgRTw+bYWh20HSSChF6NGzymDvP
+DXxAHSydpVNETevNHFKaqA6rtcTS9Phe9+TWChSC+thMvXzvXY/J2T3+h/I1KW3
Nv76ZrOS8yD29QS0ZUy3imUMgqgJWI8RHKHoL1Rh7qOlvhldEy7PD8GU4ub5HjBs
wuVjA0xk72h76HJ2D+xdIJsYieIeq6I0gVAaiQ/mW2+ywk19040jvm0fYdybYw6O
gW1ecz27C68FBqNfYl7HQ4i6JFIhV0g=
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:21 2026 by rpki-client