Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa
File:                     88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa (raw, json)
Hash identifier:          UZ6VKOj8c2MtrmdOU19TdUvXfgE5m/rcBiTpvLQGKUo=
Subject key identifier:   8E:3E:DB:EA:E3:B9:9A:28:8B:24:1C:2A:B5:BD:E0:70:68:2D:C1:88
Certificate issuer:       /CN=7167ea5f-811a-4441-8916-556d83efd033
Certificate serial:       010D0C9F4328584DA815797AF31E5ABE2BA20000
Authority key identifier: 39:79:53:0C:27:5C:8F:B6:9B:A2:FC:BF:03:C4:39:6E:A3:D9:14:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     19846
IP address blocks:        172.83.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/7167ea5f-811a-4441-8916-556d83efd033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/7167ea5f-811a-4441-8916-556d83efd033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:79:7a:f3:1e:5a:be:2b:a2:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7167ea5f-811a-4441-8916-556d83efd033
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=98538ea4-4b89-45e0-94a0-f880e3d58d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:5a:66:c4:a5:d2:5f:e9:b3:98:c0:0a:00:
                    41:a5:ad:2a:04:35:f8:f4:65:d2:dd:ce:9e:8a:99:
                    74:c1:19:cd:01:17:62:d5:6f:8e:5a:0d:f5:ad:d3:
                    7b:e5:63:d3:13:54:c1:f8:fb:47:52:46:61:1b:47:
                    95:18:5c:41:0c:55:ea:3c:a6:c7:12:a8:40:14:6b:
                    ee:8c:32:c6:d4:70:32:35:16:f5:e0:c8:68:bf:a9:
                    7d:17:91:fd:ce:50:1f:dd:a4:67:68:3b:b0:7d:e8:
                    88:ee:d2:85:52:04:f7:84:ab:a5:6a:fb:ad:30:0e:
                    cc:2f:1c:45:95:58:2c:82:a7:21:cb:8a:2a:75:a7:
                    31:dd:53:ad:0c:42:e9:f4:3e:94:f4:d1:99:c1:34:
                    00:af:be:70:a3:eb:29:e0:7c:a5:a8:e4:f6:8c:72:
                    63:57:63:8f:c6:4d:7d:4a:d4:a6:d0:5f:11:bd:1b:
                    30:d0:6d:52:f6:2a:10:24:3f:b4:19:9c:3f:2c:59:
                    eb:bc:e5:70:62:11:e2:62:36:f3:e7:5c:16:00:ef:
                    a8:3d:01:4b:07:cf:dc:a7:dc:05:85:5e:b3:d3:06:
                    4a:a6:3b:1e:b4:22:27:6f:45:f5:f9:b4:af:50:07:
                    47:de:8b:8a:53:bc:c1:3a:0d:3a:a5:36:fc:13:32:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:DB:EA:E3:B9:9A:28:8B:24:1C:2A:B5:BD:E0:70:68:2D:C1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/88c4e6b8-172c-3ade-933f-aa3f36db79aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033/7167ea5f-811a-4441-8916-556d83efd033.crl

            X509v3 Authority Key Identifier:
                keyid:39:79:53:0C:27:5C:8F:B6:9B:A2:FC:BF:03:C4:39:6E:A3:D9:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7167ea5f-811a-4441-8916-556d83efd033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:8a:61:d5:df:27:03:da:8d:16:09:d5:b5:3e:94:6b:5e:
         6f:be:f9:5f:2c:d2:b8:de:8e:73:18:ce:5a:60:7a:e7:fb:41:
         fc:05:91:44:54:0d:46:af:d8:79:1b:d0:c8:12:d6:73:e3:8a:
         0d:ee:9c:67:9c:9e:df:31:ea:dc:02:f5:7c:08:49:42:da:e8:
         e8:92:2b:49:a4:51:95:ac:1f:df:1a:b5:c0:ba:d8:16:39:f4:
         2b:dc:55:81:c8:b4:2b:ff:20:f1:48:66:e3:d5:69:e9:c5:53:
         18:bc:76:fd:d0:f2:27:69:44:16:69:71:fb:43:42:1a:cf:e8:
         e7:d5:5e:60:97:6a:01:66:af:b9:8a:c8:b7:2c:2e:19:f7:79:
         f2:40:af:f6:e6:97:92:04:4d:08:76:10:6f:e1:24:7e:c7:06:
         9c:0b:f2:5e:05:c7:be:af:9d:ad:b9:01:89:05:16:23:85:26:
         83:b1:0b:8c:8b:86:90:67:42:92:c2:2e:20:81:e3:05:96:1e:
         db:24:aa:12:f8:b0:2b:37:65:9a:83:15:c1:72:59:f5:b6:d5:
         e0:5a:a4:45:81:c7:3d:ff:6b:5a:1a:51:23:e5:49:d8:50:2d:
         9e:a6:04:43:f9:0f:d4:d8:96:91:a0:71:8e:88:37:9b:e9:37:
         36:c7:31:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXl68x5aviuiAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE2N2VhNWYtODExYS00NDQxLTg5MTYtNTU2ZDgzZWZk
MDMzMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
OTg1MzhlYTQtNGI4OS00NWUwLTk0YTAtZjg4MGUzZDU4ZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0BaZsSl0l/ps5jACgBBpa0qBDX49GXS3c6e
ipl0wRnNARdi1W+OWg31rdN75WPTE1TB+PtHUkZhG0eVGFxBDFXqPKbHEqhAFGvu
jDLG1HAyNRb14Mhov6l9F5H9zlAf3aRnaDuwfeiI7tKFUgT3hKulavutMA7MLxxF
lVgsgqchy4oqdacx3VOtDELp9D6U9NGZwTQAr75wo+sp4HylqOT2jHJjV2OPxk19
StSm0F8RvRsw0G1S9ioQJD+0GZw/LFnrvOVwYhHiYjbz51wWAO+oPQFLB8/cp9wF
hV6z0wZKpjsetCInb0X1+bSvUAdH3ouKU7zBOg06pTb8EzLIWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4+2+rjuZooiyQcKrW94HBoLcGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MTY3
ZWE1Zi04MTFhLTQ0NDEtODkxNi01NTZkODNlZmQwMzMvODhjNGU2YjgtMTcyYy0z
YWRlLTkzM2YtYWEzZjM2ZGI3OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzE2N2VhNWYtODExYS00NDQxLTg5
MTYtNTU2ZDgzZWZkMDMzLzcxNjdlYTVmLTgxMWEtNDQ0MS04OTE2LTU1NmQ4M2Vm
ZDAzMy5jcmwwHwYDVR0jBBgwFoAUOXlTDCdcj7abovy/A8Q5bqPZFNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MTY3ZWE1Zi04MTFhLTQ0NDEtODkxNi01NTZk
ODNlZmQwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFNSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABraimHV3ycD2o0WCdW1PpRrXm+++V8s0rjejnMYzlpgeuf7QfwFkURU
DUav2Hkb0MgS1nPjig3unGecnt8x6twC9XwISULa6OiSK0mkUZWsH98atcC62BY5
9CvcVYHItCv/IPFIZuPVaenFUxi8dv3Q8idpRBZpcftDQhrP6OfVXmCXagFmr7mK
yLcsLhn3efJAr/bml5IETQh2EG/hJH7HBpwL8l4Fx76vna25AYkFFiOFJoOxC4yL
hpBnQpLCLiCB4wWWHtskqhL4sCs3ZZqDFcFyWfW21eBapEWBxz3/a1oaUSPlSdhQ
LZ6mBEP5D9TYlpGgcY6IN5vpNzbHMU0=
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:14 2026 by rpki-client