Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f5b7b8b-c15c-36c5-80fe-47322be1ed1f.roa
File:                     0f5b7b8b-c15c-36c5-80fe-47322be1ed1f.roa (raw, json)
Hash identifier:          A+TeCpMREPrIUdjChN2iLC77sjFrloCt1inW6n8dEeM=
Subject key identifier:   7F:40:22:AD:43:04:86:AB:E2:54:B1:90:A9:B6:C1:A9:86:7A:0B:91
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DAE4FC2B4769E9C2814A84540
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f5b7b8b-c15c-36c5-80fe-47322be1ed1f.roa
Signing time:             Thu 30 Apr 2026 18:32:56 +0000
ROA not before:           Thu 30 Apr 2026 18:32:56 +0000
ROA not after:            Wed 29 Jul 2026 18:32:56 +0000
asID:                     214238
IP address blocks:        166.88.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:c2:b4:76:9e:9c:28:14:a8:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 30 18:32:56 2026 GMT
            Not After : Jul 29 18:32:56 2026 GMT
        Subject: CN=d20316b2-a650-4655-8f39-bf1ad5ed96fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:d6:01:40:80:c2:47:ce:33:56:67:00:1a:
                    95:76:ce:d1:a0:54:11:70:12:22:7f:a9:95:71:26:
                    26:21:da:31:75:dd:4d:bc:a8:e9:63:6f:75:48:d4:
                    59:bd:c6:b7:b0:a7:2d:d2:8b:be:50:b3:ac:17:e5:
                    83:d9:9e:f9:3e:85:eb:bc:17:1f:ee:ca:a4:00:5f:
                    0b:51:39:76:1c:82:15:97:cc:a0:26:66:d5:75:bc:
                    5d:7d:1b:c8:a3:e5:1b:85:f0:a7:3c:be:e5:03:d6:
                    dd:78:a8:9e:33:6f:42:01:de:99:d3:e0:16:70:07:
                    11:7c:16:65:83:fa:ee:85:a2:55:dc:cc:f8:51:44:
                    61:9c:23:16:5f:f7:cc:92:53:41:b2:96:d6:92:6a:
                    b1:16:d8:3f:cc:79:b4:15:a9:96:c4:1b:e6:17:6a:
                    2c:da:fa:6b:0b:e4:66:3a:95:15:a5:e0:c6:e7:ac:
                    37:3a:78:f6:fe:ac:11:a4:52:02:ea:34:fd:5c:6c:
                    26:db:ab:3f:b1:22:56:35:3c:77:24:7d:f9:a5:3a:
                    b1:94:a9:47:81:41:db:8f:46:ce:f4:d3:47:9e:0f:
                    e9:98:2a:84:96:72:f2:6e:2b:78:cd:96:3c:e3:45:
                    26:29:54:d9:01:8f:5d:0d:bb:3d:04:3d:bb:9b:43:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:22:AD:43:04:86:AB:E2:54:B1:90:A9:B6:C1:A9:86:7A:0B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f5b7b8b-c15c-36c5-80fe-47322be1ed1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:08:ce:87:43:e7:15:2e:05:00:ae:ec:39:8e:07:41:c7:
         9a:98:e4:a0:d6:59:5c:0b:d3:09:2d:b0:88:2d:7f:69:64:50:
         75:d9:b7:91:7e:3c:dc:4c:a3:72:4f:41:9d:38:91:e7:69:c0:
         9e:69:9b:01:02:98:aa:5b:34:d0:8a:83:b2:21:ee:c9:fb:35:
         18:0c:3f:69:3f:c6:ba:8d:9a:30:19:aa:d0:19:6b:f1:ff:b6:
         cd:11:5a:80:e3:ae:bd:0f:d5:c2:9a:e7:c1:e3:c6:7a:e4:06:
         07:9f:69:0e:08:ce:98:68:84:83:e5:4e:ac:ba:75:b4:88:26:
         54:f9:36:63:bf:23:8e:30:02:91:92:55:c7:a9:7d:93:eb:69:
         bf:3b:1a:a3:64:ab:31:e3:a5:ec:07:ad:97:61:71:ed:5e:88:
         0f:85:e4:c0:72:ea:7b:27:26:0e:f0:bf:71:53:01:0a:b5:3f:
         36:4e:ca:fd:f5:39:c9:fb:64:4a:fa:e3:56:12:52:bb:8e:fd:
         51:ce:5c:b0:9d:7c:b8:67:1c:dc:d2:5c:1b:da:5c:5e:de:93:
         02:8c:32:5d:89:2c:8d:9f:c8:53:d4:1a:5a:7e:5b:ca:60:8d:
         3a:92:77:c7:ea:81:8f:cb:73:1d:b6:9d:64:30:8a:94:36:c4:
         ff:d8:97:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8K0dp6cKBSoRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDQzMDE4MzI1NloXDTI2MDcyOTE4MzI1NlowLzEtMCsGA1UEAxMk
ZDIwMzE2YjItYTY1MC00NjU1LThmMzktYmYxYWQ1ZWQ5NmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM/WAUCAwkfOM1ZnABqVds7RoFQRcBIif6mV
cSYmIdoxdd1NvKjpY291SNRZvca3sKct0ou+ULOsF+WD2Z75PoXrvBcf7sqkAF8L
UTl2HIIVl8ygJmbVdbxdfRvIo+UbhfCnPL7lA9bdeKieM29CAd6Z0+AWcAcRfBZl
g/ruhaJV3Mz4UURhnCMWX/fMklNBspbWkmqxFtg/zHm0FamWxBvmF2os2vprC+Rm
OpUVpeDG56w3Onj2/qwRpFIC6jT9XGwm26s/sSJWNTx3JH35pTqxlKlHgUHbj0bO
9NNHng/pmCqElnLybit4zZY840UmKVTZAY9dDbs9BD27m0NdyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9AIq1DBIar4lSxkKm2wamGeguRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGY1YjdiOGItYzE1Yy0z
NmM1LTgwZmUtNDczMjJiZTFlZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplihMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6aCM6HQ+cVLgUAruw5jgdBx5qY5KDWWVwL0wktsIgtf2lkUHXZt5F+
PNxMo3JPQZ04kedpwJ5pmwECmKpbNNCKg7Ih7sn7NRgMP2k/xrqNmjAZqtAZa/H/
ts0RWoDjrr0P1cKa58HjxnrkBgefaQ4IzphohIPlTqy6dbSIJlT5NmO/I44wApGS
VcepfZPrab87GqNkqzHjpewHrZdhce1eiA+F5MBy6nsnJg7wv3FTAQq1PzZOyv31
Ocn7ZEr641YSUruO/VHOXLCdfLhnHNzSXBvaXF7ekwKMMl2JLI2fyFPUGlp+W8pg
jTqSd8fqgY/Lcx22nWQwipQ2xP/Yl0w=
-----END CERTIFICATE-----
Generated at Wed May 13 07:36:15 2026 by rpki-client