Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9fdc66fd-3a8b-3efb-a69d-d61519970ebb.roa
File:                     9fdc66fd-3a8b-3efb-a69d-d61519970ebb.roa (raw, json)
Hash identifier:          uFDO3VXOUt05X/k274AeoT9h9RFJNd4BnrldYPpy8yM=
Subject key identifier:   18:D4:99:6E:9C:08:3A:DD:31:DD:B5:4B:71:75:51:2D:E3:F7:E2:1B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DB075883569C72A7918FB7480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9fdc66fd-3a8b-3efb-a69d-d61519970ebb.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     8881
IP address blocks:        168.93.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:88:35:69:c7:2a:79:18:fb:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=b04191db-ced4-4c50-89d3-fef47c66657c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:9c:5e:61:11:15:69:bc:3b:94:95:b3:f3:
                    62:de:f9:72:5c:de:52:d7:21:4f:ac:91:f8:bc:81:
                    1a:99:d5:9e:80:7a:c4:ff:4d:7c:26:1d:4c:1a:67:
                    19:5d:e2:fd:7b:58:dc:16:cd:ba:d8:87:30:75:6f:
                    e0:cb:f4:12:da:e5:bd:81:b0:4e:95:22:8a:59:61:
                    c8:e2:2a:29:5e:58:eb:74:d7:bd:44:b5:f8:cc:4e:
                    05:e8:c7:40:d0:de:95:09:85:0f:3f:ac:48:90:94:
                    32:da:1f:f5:8e:09:b4:94:d5:a1:4a:3c:c0:76:b6:
                    58:91:d2:f5:73:46:d2:3e:f7:bd:c4:15:a2:eb:17:
                    21:bb:18:59:8a:cd:ec:6f:91:38:f1:15:9a:1d:af:
                    33:3c:36:7b:a4:d5:fc:31:94:a1:dd:7f:34:ce:52:
                    d3:3c:4a:dc:43:fd:55:70:84:90:ae:5f:2c:92:b0:
                    c1:3f:89:9e:72:00:90:46:31:12:9f:e6:e7:f4:81:
                    01:fc:91:a4:de:6e:06:ed:b1:64:8f:04:f9:f5:ab:
                    d8:a3:c4:11:33:74:a6:86:63:2b:b5:78:5e:65:0c:
                    87:ff:4a:60:66:cb:86:82:67:dc:c3:93:2c:0b:07:
                    9f:3a:9e:35:08:62:72:ec:10:b3:af:37:6d:8a:2f:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D4:99:6E:9C:08:3A:DD:31:DD:B5:4B:71:75:51:2D:E3:F7:E2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9fdc66fd-3a8b-3efb-a69d-d61519970ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:10:9d:87:60:1d:3d:45:14:dc:8f:af:aa:96:c7:1d:d6:77:
         2e:f8:80:6f:e5:5b:ee:d0:83:de:37:c0:e7:ef:a9:ca:2e:33:
         d9:39:f1:1c:8d:d1:b2:94:13:c4:6f:6a:f7:c6:3d:87:e1:88:
         cd:e5:1a:64:e9:cf:e9:39:3e:75:ba:5b:e5:02:2e:62:58:dd:
         7f:66:62:32:dc:6c:8e:b1:07:95:9d:93:2e:e6:30:0d:8d:b0:
         f5:c8:a3:bc:de:37:4a:98:0b:92:37:f2:33:02:65:33:05:f1:
         79:2b:3c:a9:eb:5e:26:74:88:ce:e9:8e:09:6e:cd:59:3d:af:
         89:7d:6c:9b:21:a4:98:51:5a:9f:81:24:ca:5f:da:d5:dc:b3:
         b2:f7:9f:e1:00:29:9a:7f:ca:e8:02:a3:7e:28:27:de:15:32:
         84:5a:37:bd:70:8d:27:91:bd:b4:54:f0:02:d1:f1:d8:29:77:
         33:8e:16:be:db:06:86:15:aa:ef:2e:21:85:14:ed:3e:49:d8:
         6c:37:fa:d5:6c:cb:0f:45:00:a3:ac:13:90:2a:f1:83:e6:60:
         b0:db:39:4f:51:97:bb:fd:5b:98:ad:5a:8d:e4:72:b6:c9:73:
         50:63:ab:a4:75:72:bc:9f:ee:d0:59:4c:65:5f:f3:90:c8:71:
         40:00:9f:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdYg1accqeRj7dIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
YjA0MTkxZGItY2VkNC00YzUwLTg5ZDMtZmVmNDdjNjY2NTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvqcXmERFWm8O5SVs/Ni3vlyXN5S1yFPrJH4
vIEamdWegHrE/018Jh1MGmcZXeL9e1jcFs262IcwdW/gy/QS2uW9gbBOlSKKWWHI
4iopXljrdNe9RLX4zE4F6MdA0N6VCYUPP6xIkJQy2h/1jgm0lNWhSjzAdrZYkdL1
c0bSPve9xBWi6xchuxhZis3sb5E48RWaHa8zPDZ7pNX8MZSh3X80zlLTPErcQ/1V
cISQrl8skrDBP4mecgCQRjESn+bn9IEB/JGk3m4G7bFkjwT59avYo8QRM3SmhmMr
tXheZQyH/0pgZsuGgmfcw5MsCwefOp41CGJy7BCzrzdtii8cqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjUmW6cCDrdMd21S3F1US3j9+IbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWZkYzY2ZmQtM2E4Yi0z
ZWZiLWE2OWQtZDYxNTE5OTcwZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMQnYdgHT1FFNyPr6qWxx3Wdy74gG/lW+7Qg943wOfvqcouM9k58RyN
0bKUE8RvavfGPYfhiM3lGmTpz+k5PnW6W+UCLmJY3X9mYjLcbI6xB5Wdky7mMA2N
sPXIo7zeN0qYC5I38jMCZTMF8XkrPKnrXiZ0iM7pjgluzVk9r4l9bJshpJhRWp+B
JMpf2tXcs7L3n+EAKZp/yugCo34oJ94VMoRaN71wjSeRvbRU8ALR8dgpdzOOFr7b
BoYVqu8uIYUU7T5J2Gw3+tVsyw9FAKOsE5Aq8YPmYLDbOU9Rl7v9W5itWo3kcrbJ
c1Bjq6R1cryf7tBZTGVf85DIcUAAn/A=
-----END CERTIFICATE-----
Generated at Wed May 13 07:28:09 2026 by rpki-client