Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27e57250-ea68-31c0-88c1-6432804a723e.roa
File:                     27e57250-ea68-31c0-88c1-6432804a723e.roa (raw, json)
Hash identifier:          X5SsfCN/JTJ15zhvzIXGrnqzIlhnlHV+AI4l/VKLbX0=
Subject key identifier:   B2:4D:4A:1D:A0:7C:AA:9E:E7:B7:65:32:AE:1E:80:88:C5:1E:CD:C2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E991A528034273D4BAB4E9B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27e57250-ea68-31c0-88c1-6432804a723e.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     30058
IP address blocks:        166.88.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:52:80:34:27:3d:4b:ab:4e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=f669f2ba-6b81-4bed-a324-90a16fde9670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:21:d2:e7:36:5f:df:6d:4a:57:22:28:41:
                    9a:d9:c9:f5:3a:ed:6c:2c:7d:1d:f7:46:f9:9f:a7:
                    7f:2a:4a:76:67:54:5d:99:28:1e:ef:0b:fe:c1:e0:
                    4a:43:e2:bf:33:dd:c4:f8:e3:fd:ed:c3:84:4b:16:
                    25:c1:7f:d2:71:43:e3:0e:8b:56:49:f4:f5:d2:b7:
                    4b:97:73:02:df:e6:51:72:59:d6:30:ee:2a:67:4b:
                    d8:49:bf:bf:5e:a6:f8:29:0b:95:64:c0:14:8e:70:
                    b0:a5:91:5f:d2:22:ed:ba:70:9f:52:d5:9b:5a:0f:
                    6a:af:6c:01:ba:09:97:10:c4:33:b1:40:0c:c0:71:
                    8c:de:3d:f1:4e:6b:15:e6:dd:13:93:ad:68:73:6c:
                    23:50:34:ed:9b:9c:df:3f:fd:22:94:64:44:00:3d:
                    63:3b:6b:b2:bd:26:6b:7a:13:65:83:06:f6:74:bb:
                    4f:b7:e7:b7:c6:e0:c1:c4:db:04:17:b4:44:1f:e4:
                    ed:b2:e7:f6:9a:2d:cb:27:6f:e8:f4:92:1d:aa:99:
                    e1:99:4b:5c:ce:00:db:86:64:b9:b4:06:f5:d7:74:
                    ed:9a:ea:10:e2:73:1a:b0:0f:8c:a3:09:89:aa:a9:
                    2a:e5:68:d6:69:51:62:f8:fe:6c:b4:3c:f8:e8:9d:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:4A:1D:A0:7C:AA:9E:E7:B7:65:32:AE:1E:80:88:C5:1E:CD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27e57250-ea68-31c0-88c1-6432804a723e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:99:fa:d8:fa:8f:a1:26:c5:f9:2b:1a:a4:51:08:c8:a1:
         03:34:f6:60:7c:72:bc:93:f6:ca:1b:48:fc:3f:74:6a:6b:11:
         ba:4e:da:f5:49:98:b7:7c:09:07:ca:02:dd:91:24:64:e5:d7:
         ce:ad:7f:dc:66:f8:75:1c:3c:62:b0:46:bb:ad:bd:8b:6b:44:
         ee:bf:01:11:a7:dc:da:b1:77:ee:4d:f1:32:36:87:9f:44:97:
         b6:06:46:cc:a4:9b:c5:75:f6:29:9c:9b:89:77:7e:af:99:4f:
         fe:c3:f7:6a:c5:24:97:fa:a3:c8:91:85:5b:5d:ed:38:ad:60:
         ff:15:71:4b:35:64:b6:8b:c4:ad:55:b3:d7:26:00:c3:15:a2:
         d2:89:f3:b5:54:bb:77:7c:68:25:ff:b5:f0:c1:df:dd:b4:7b:
         b0:b9:c7:4f:d6:ba:be:47:a2:5c:40:68:af:54:30:ca:03:90:
         e7:64:25:90:fc:59:10:91:0e:af:b1:20:a5:72:c4:b1:a9:ed:
         b8:26:5a:d7:82:ad:e2:d2:79:b0:1c:f6:9f:22:02:e8:b7:8d:
         04:21:bf:25:59:2d:9a:79:8a:d4:13:e5:6c:f6:d3:0d:33:65:
         ab:c0:7e:bd:77:f3:d3:2b:0a:c5:c6:6c:75:f3:d8:d7:0b:24:
         93:c1:c7:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ZGlKANCc9S6tOm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcyMzIxMDAxMVoXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZjY2OWYyYmEtNmI4MS00YmVkLWEzMjQtOTBhMTZmZGU5NjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDoh0uc2X99tSlciKEGa2cn1Ou1sLH0d90b5
n6d/Kkp2Z1RdmSge7wv+weBKQ+K/M93E+OP97cOESxYlwX/ScUPjDotWSfT10rdL
l3MC3+ZRclnWMO4qZ0vYSb+/Xqb4KQuVZMAUjnCwpZFf0iLtunCfUtWbWg9qr2wB
ugmXEMQzsUAMwHGM3j3xTmsV5t0Tk61oc2wjUDTtm5zfP/0ilGREAD1jO2uyvSZr
ehNlgwb2dLtPt+e3xuDBxNsEF7REH+Ttsuf2mi3LJ2/o9JIdqpnhmUtczgDbhmS5
tAb113TtmuoQ4nMasA+MowmJqqkq5WjWaVFi+P5stDz46J2a0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJNSh2gfKqe57dlMq4egIjFHs3CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjdlNTcyNTAtZWE2OC0z
MWMwLTg4YzEtNjQzMjgwNGE3MjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK2mfrY+o+hJsX5KxqkUQjIoQM09mB8cryT9sobSPw/dGprEbpO2vVJ
mLd8CQfKAt2RJGTl186tf9xm+HUcPGKwRrutvYtrRO6/ARGn3Nqxd+5N8TI2h59E
l7YGRsykm8V19imcm4l3fq+ZT/7D92rFJJf6o8iRhVtd7TitYP8VcUs1ZLaLxK1V
s9cmAMMVotKJ87VUu3d8aCX/tfDB3920e7C5x0/Wur5HolxAaK9UMMoDkOdkJZD8
WRCRDq+xIKVyxLGp7bgmWteCreLSebAc9p8iAui3jQQhvyVZLZp5itQT5Wz20w0z
ZavAfr1389MrCsXGbHXz2NcLJJPBxyU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:53 2026 by rpki-client