Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8c6d732d-9e0e-3455-8055-cb409014e1b1.roa
File:                     8c6d732d-9e0e-3455-8055-cb409014e1b1.roa (raw, json)
Hash identifier:          mReGpdKhfUifWiBIIa5boDRZP7Cdnga7qjWRgiUaaK4=
Subject key identifier:   82:C8:18:01:8B:5E:C6:18:F3:9B:21:9D:71:C0:70:59:E8:4F:64:57
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584DAAE03531C6886EE269A89900
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8c6d732d-9e0e-3455-8055-cb409014e1b1.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     11870
IP address blocks:        167.23.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:35:31:c6:88:6e:e2:69:a8:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=01c50db6-bc22-4580-91c8-3fcdad318303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:ab:06:fe:21:2d:2e:95:e4:64:3a:18:81:
                    85:ab:a3:de:bf:75:ce:23:b3:24:74:3f:81:af:88:
                    24:88:92:a9:ac:1d:9e:54:74:6f:fa:61:b3:ec:24:
                    fe:21:2a:b1:f4:af:1b:e6:1a:66:c9:fd:da:04:6d:
                    99:e5:11:fb:26:7e:87:b5:4b:18:e3:92:e1:b4:05:
                    21:b8:39:1f:af:24:26:f1:bb:06:11:c4:f2:f0:85:
                    1b:42:2b:2e:98:c1:96:72:83:6f:63:dc:3c:b1:32:
                    67:42:6f:69:bd:f5:41:f6:5f:03:69:6c:8d:81:72:
                    27:41:c3:67:2c:6c:80:b4:40:3a:a5:4c:ab:a7:9d:
                    0f:d7:06:f4:f1:34:78:d6:e9:0e:59:a4:0a:c0:06:
                    3e:06:c1:d4:2b:4c:5e:55:22:12:dc:1c:58:29:54:
                    4c:67:4d:58:95:d0:3a:4d:5d:24:b0:01:ae:5f:28:
                    e1:3f:5e:fa:f7:b2:27:23:22:c9:cf:83:d0:aa:26:
                    a2:21:0d:d3:ec:a5:ad:8c:27:d1:1b:c9:ac:b9:97:
                    16:96:fc:de:16:32:95:31:b0:82:25:a1:78:e2:59:
                    90:1d:7f:fe:f7:51:86:3e:0c:4b:13:99:34:86:03:
                    57:bc:68:83:f2:2b:fb:2c:71:29:b4:09:87:90:85:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C8:18:01:8B:5E:C6:18:F3:9B:21:9D:71:C0:70:59:E8:4F:64:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8c6d732d-9e0e-3455-8055-cb409014e1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f6:93:c0:29:7c:09:5d:9a:2e:eb:ff:cd:cb:b2:e7:a1:90:
         81:fd:ba:8e:1d:1d:ab:0b:72:56:88:60:84:80:3a:e9:d5:1d:
         f1:df:72:a7:a2:74:0d:e5:64:8c:c1:25:ca:12:12:b7:42:a2:
         7a:ec:08:a7:76:7a:50:da:69:f4:22:b9:0f:b7:f6:14:6b:24:
         a9:ee:b6:93:54:ff:e8:00:5b:bc:04:87:87:f7:e4:6f:90:2b:
         4f:f6:1d:59:90:ae:82:3c:03:bc:94:88:0a:72:2c:da:8b:ad:
         05:ec:96:e8:38:cf:67:3c:95:c0:8c:68:3d:0a:50:9f:42:11:
         d2:aa:41:60:51:83:fa:93:23:ee:76:a7:3f:70:25:86:70:18:
         a7:3a:81:e4:3d:af:65:3c:87:27:d0:96:46:ad:3f:bc:e7:f2:
         fa:08:26:94:71:fe:62:0f:b6:d4:db:91:cd:3c:27:a4:5e:20:
         45:99:fd:04:3d:69:48:8b:ba:c0:39:6a:df:57:98:57:45:56:
         bd:41:4f:50:bf:45:7a:a2:02:47:c0:1a:5d:fc:17:f0:2f:eb:
         23:1f:ec:19:ff:48:4f:57:20:e0:ec:c6:87:5d:bd:92:44:70:
         f8:b3:43:4c:36:61:3f:97:3f:3e:32:5c:55:80:c5:06:f3:97:
         32:03:b6:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DUxxohu4mmomQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
MDFjNTBkYjYtYmMyMi00NTgwLTkxYzgtM2ZjZGFkMzE4MzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0mrBv4hLS6V5GQ6GIGFq6Pev3XOI7MkdD+B
r4gkiJKprB2eVHRv+mGz7CT+ISqx9K8b5hpmyf3aBG2Z5RH7Jn6HtUsY45LhtAUh
uDkfryQm8bsGEcTy8IUbQisumMGWcoNvY9w8sTJnQm9pvfVB9l8DaWyNgXInQcNn
LGyAtEA6pUyrp50P1wb08TR41ukOWaQKwAY+BsHUK0xeVSIS3BxYKVRMZ01YldA6
TV0ksAGuXyjhP17697InIyLJz4PQqiaiIQ3T7KWtjCfRG8msuZcWlvzeFjKVMbCC
JaF44lmQHX/+91GGPgxLE5k0hgNXvGiD8iv7LHEptAmHkIWx4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILIGAGLXsYY85shnXHAcFnoT2RXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvOGM2ZDczMmQtOWUwZS0z
NDU1LTgwNTUtY2I0MDkwMTRlMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxdYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHD2k8ApfAldmi7r/83LsuehkIH9uo4dHasLclaIYISAOunVHfHfcqei
dA3lZIzBJcoSErdConrsCKd2elDaafQiuQ+39hRrJKnutpNU/+gAW7wEh4f35G+Q
K0/2HVmQroI8A7yUiApyLNqLrQXslug4z2c8lcCMaD0KUJ9CEdKqQWBRg/qTI+52
pz9wJYZwGKc6geQ9r2U8hyfQlkatP7zn8voIJpRx/mIPttTbkc08J6ReIEWZ/QQ9
aUiLusA5at9XmFdFVr1BT1C/RXqiAkfAGl38F/Av6yMf7Bn/SE9XIODsxoddvZJE
cPizQ0w2YT+XPz4yXFWAxQbzlzIDtiE=
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:52 2026 by rpki-client