Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09da6a77-34f3-3882-803f-a5d263ae34b0.roa
File:                     09da6a77-34f3-3882-803f-a5d263ae34b0.roa (raw, json)
Hash identifier:          D2KeHOmiS96yb72lccq7VvRlZPHmKR9bRprx/G3QW5s=
Subject key identifier:   4A:9F:75:BC:6A:BA:0E:FE:29:7B:C7:74:3D:A9:B8:33:20:93:DB:CF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D87FA97EAA7928EA38E790B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09da6a77-34f3-3882-803f-a5d263ae34b0.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     13536
IP address blocks:        108.171.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:97:ea:a7:92:8e:a3:8e:79:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=bcd1ed91-9511-4b17-94a9-45d837b609cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:3e:f7:0a:cc:8e:97:97:e5:1d:32:98:ba:
                    ed:93:1c:6b:ec:2b:2b:8d:28:e6:9f:8b:81:27:04:
                    5e:a8:20:2d:d4:0e:7e:31:b5:bb:d8:dc:2f:67:85:
                    55:a2:03:35:fe:52:c7:7c:d5:d3:80:48:b7:d2:34:
                    34:7b:84:71:6d:7e:46:83:5c:cd:8c:85:06:8c:39:
                    84:af:c2:8e:bb:fd:c0:dc:55:60:10:24:63:e1:57:
                    28:78:b4:d5:3e:ab:f6:f9:f3:16:46:28:ca:fd:7f:
                    23:09:b2:31:85:ee:8d:e0:8a:a4:65:6f:de:f4:f0:
                    17:82:fc:b0:7d:4e:ae:a3:21:1d:4f:4e:cd:10:e3:
                    20:f9:77:c7:36:80:21:aa:54:35:88:b3:3c:f6:5f:
                    ed:0a:42:3a:6d:d9:43:43:d8:aa:ce:2d:9a:2a:ee:
                    dd:85:e4:c4:08:6f:98:24:b6:0a:c3:f7:77:a3:b8:
                    39:64:da:65:2e:31:8c:cc:c1:b4:10:56:5d:54:2b:
                    c9:be:cb:4c:3b:d1:23:8c:7d:73:54:e9:c3:ac:00:
                    9f:9e:db:03:21:9b:c5:7a:a0:0f:94:b0:9f:2d:30:
                    58:f6:58:18:87:db:30:27:7d:18:1a:c8:f5:cd:f4:
                    39:fb:09:8a:8e:b9:0d:80:65:ca:af:4e:fa:b5:58:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9F:75:BC:6A:BA:0E:FE:29:7B:C7:74:3D:A9:B8:33:20:93:DB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09da6a77-34f3-3882-803f-a5d263ae34b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:bb:7d:8b:60:26:26:9d:0e:a7:f9:e3:ec:18:46:ea:1b:
         fa:eb:f7:c7:18:da:56:8f:75:33:52:e2:1c:25:c7:b2:b9:c9:
         33:ac:fa:a5:ae:ef:c0:dc:91:94:15:67:da:cc:88:4d:df:f6:
         af:21:93:6c:54:2f:e1:2f:64:45:2c:b9:d9:81:c8:62:7b:63:
         41:b6:f7:42:9c:98:d4:82:98:32:7a:80:c9:77:b8:90:89:52:
         b5:e1:f6:06:c5:a7:16:6f:13:4b:82:0e:8f:e9:3c:03:29:71:
         a6:4f:7a:bb:d6:0e:64:cb:41:56:b5:7a:b9:e5:a7:e0:4a:36:
         92:23:fe:a7:42:36:6f:5f:4e:77:29:0a:a1:c2:49:8c:32:26:
         6e:71:ba:f2:ed:bd:a4:a0:c1:97:28:d7:f3:79:3e:12:36:ba:
         c9:b8:f8:1e:fd:3a:29:36:fd:fe:25:71:eb:cd:59:f3:63:ae:
         7e:ea:72:9b:31:cd:ad:94:95:e1:37:ec:ce:1f:af:e9:ab:19:
         6e:a6:b0:f6:3a:ad:00:f9:84:1e:96:97:77:04:66:4e:95:09:
         f6:2f:0b:6b:30:17:b2:57:b3:e7:1a:6c:78:a9:c1:51:94:c0:
         50:a7:58:10:9c:93:47:9b:33:37:f6:57:b3:13:b7:54:e9:3f:
         33:46:63:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pfqp5KOo455CwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk
YmNkMWVkOTEtOTUxMS00YjE3LTk0YTktNDVkODM3YjYwOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrY+9wrMjpeX5R0ymLrtkxxr7CsrjSjmn4uB
JwReqCAt1A5+MbW72NwvZ4VVogM1/lLHfNXTgEi30jQ0e4RxbX5Gg1zNjIUGjDmE
r8KOu/3A3FVgECRj4VcoeLTVPqv2+fMWRijK/X8jCbIxhe6N4IqkZW/e9PAXgvyw
fU6uoyEdT07NEOMg+XfHNoAhqlQ1iLM89l/tCkI6bdlDQ9iqzi2aKu7dheTECG+Y
JLYKw/d3o7g5ZNplLjGMzMG0EFZdVCvJvstMO9EjjH1zVOnDrACfntsDIZvFeqAP
lLCfLTBY9lgYh9swJ30YGsj1zfQ5+wmKjrkNgGXKr076tVjjnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqfdbxqug7+KXvHdD2puDMgk9vPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDlkYTZhNzctMzRmMy0z
ODgyLTgwM2YtYTVkMjYzYWUzNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKs6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDsu32LYCYmnQ6n+ePsGEbqG/rr98cY2laPdTNS4hwlx7K5yTOs+qWu
78DckZQVZ9rMiE3f9q8hk2xUL+EvZEUsudmByGJ7Y0G290KcmNSCmDJ6gMl3uJCJ
UrXh9gbFpxZvE0uCDo/pPAMpcaZPervWDmTLQVa1ernlp+BKNpIj/qdCNm9fTncp
CqHCSYwyJm5xuvLtvaSgwZco1/N5PhI2usm4+B79Oik2/f4lcevNWfNjrn7qcpsx
za2UleE37M4fr+mrGW6msPY6rQD5hB6Wl3cEZk6VCfYvC2swF7JXs+cabHipwVGU
wFCnWBCck0ebMzf2V7MTt1TpPzNGY5Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:10 2026 by rpki-client