Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8eec10f7-e7ed-3e00-8e27-944894619518.roa
File:                     8eec10f7-e7ed-3e00-8e27-944894619518.roa (raw, json)
Hash identifier:          DEHvB1WbKM+1jR1gCPoPqqKUf35BsYvm1FUwphR5cyQ=
Subject key identifier:   0F:99:DC:3B:71:2A:D3:43:D8:CC:5B:54:86:14:79:50:91:1A:2F:07
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F11A13CCB63396A3EA0F01D10
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8eec10f7-e7ed-3e00-8e27-944894619518.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     27411
IP address blocks:        166.88.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:3c:cb:63:39:6a:3e:a0:f0:1d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1f26d2ac-ce8b-45a5-88ae-e12f0d071ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:53:bc:54:c0:ab:0a:92:18:17:06:74:d5:
                    a1:ac:84:e1:7e:bb:10:77:07:dd:45:ae:e2:65:18:
                    71:30:58:59:95:08:1d:a9:0e:23:60:ea:3f:fd:20:
                    23:4e:af:cc:4c:c3:ea:51:ad:e1:f9:86:6d:c7:4d:
                    98:26:a8:1c:aa:f3:d6:9d:8b:86:fc:05:ad:39:b3:
                    f6:b4:e9:b4:c0:ea:8f:8a:b1:f9:53:52:a5:22:50:
                    95:d2:2a:0d:8b:5d:4a:c9:6e:66:7e:f6:0f:86:fc:
                    ab:bd:6f:3a:b1:af:01:b2:32:b1:88:b2:b7:21:ed:
                    a1:0f:68:ef:d6:6b:bb:19:0c:bd:14:81:13:40:33:
                    93:88:04:8f:05:b1:77:4f:67:b7:a0:ba:cb:a8:52:
                    a0:34:57:26:f5:8f:f8:6e:97:3e:95:36:ab:b1:ef:
                    93:bf:e7:17:dd:93:81:e6:ae:12:a4:bd:bf:30:37:
                    2b:c3:a5:3a:22:0d:db:0d:c9:06:27:9b:7b:d3:6b:
                    df:a3:8d:78:8f:03:61:44:bf:60:4b:e8:87:c0:9a:
                    01:0b:3a:c5:74:ec:3c:68:21:d9:94:3f:c2:fc:32:
                    6e:db:34:28:e9:c9:14:fa:90:99:08:be:15:55:8a:
                    64:23:40:d1:c1:34:b8:56:18:ef:4b:f9:61:e8:aa:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:99:DC:3B:71:2A:D3:43:D8:CC:5B:54:86:14:79:50:91:1A:2F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8eec10f7-e7ed-3e00-8e27-944894619518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:f7:2c:69:1c:40:1b:06:59:1c:a4:69:90:50:df:59:d2:
         44:87:24:ed:de:74:c3:40:d4:b3:d4:a5:6f:eb:00:e3:1a:8e:
         6f:46:00:47:85:00:c0:1c:4f:45:12:2f:7c:bb:e2:fa:41:13:
         a7:05:f3:d6:97:56:5f:e4:93:cb:7a:dd:5e:6a:41:3b:ab:12:
         b9:a5:f6:62:5a:d6:0a:6b:45:32:75:11:72:de:05:cb:b2:b9:
         18:02:b6:96:bb:90:78:2b:61:6f:6a:06:38:e5:13:64:bd:3d:
         0d:2a:78:a1:a0:fd:6d:c4:bd:a0:07:35:a3:fa:79:c3:e1:9c:
         e0:6c:70:71:73:01:5b:76:80:cc:94:57:2c:cc:b0:d9:53:47:
         c9:f7:17:5f:0b:5f:f2:e6:53:2c:a5:52:ca:3d:85:70:dc:e7:
         a0:30:6f:fc:d8:bd:c7:a5:ec:0f:0f:24:6b:5b:52:bc:53:4a:
         85:a1:2c:db:27:cf:17:3b:8e:eb:dc:1e:66:9f:48:82:87:7e:
         0c:62:d8:1f:d6:ad:8a:ca:7e:d4:41:13:0a:ef:87:10:0b:f6:
         b3:02:81:b7:a7:97:58:60:a4:63:c1:9f:7c:70:f5:47:d6:d7:
         d3:ec:7a:02:43:ed:ac:f3:d9:8c:af:79:5c:2f:c4:58:d7:cc:
         92:a1:94:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoTzLYzlqPqDwHRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWYyNmQyYWMtY2U4Yi00NWE1LTg4YWUtZTEyZjBkMDcxZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEJTvFTAqwqSGBcGdNWhrIThfrsQdwfdRa7i
ZRhxMFhZlQgdqQ4jYOo//SAjTq/MTMPqUa3h+YZtx02YJqgcqvPWnYuG/AWtObP2
tOm0wOqPirH5U1KlIlCV0ioNi11KyW5mfvYPhvyrvW86sa8BsjKxiLK3Ie2hD2jv
1mu7GQy9FIETQDOTiASPBbF3T2e3oLrLqFKgNFcm9Y/4bpc+lTarse+Tv+cX3ZOB
5q4SpL2/MDcrw6U6Ig3bDckGJ5t702vfo414jwNhRL9gS+iHwJoBCzrFdOw8aCHZ
lD/C/DJu2zQo6ckU+pCZCL4VVYpkI0DRwTS4VhjvS/lh6Kq//wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+Z3DtxKtND2MxbVIYUeVCRGi8HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGVlYzEwZjctZTdlZC0z
ZTAwLThlMjctOTQ0ODk0NjE5NTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfs9yxpHEAbBlkcpGmQUN9Z0kSHJO3edMNA1LPUpW/rAOMajm9GAEeF
AMAcT0USL3y74vpBE6cF89aXVl/kk8t63V5qQTurErml9mJa1gprRTJ1EXLeBcuy
uRgCtpa7kHgrYW9qBjjlE2S9PQ0qeKGg/W3EvaAHNaP6ecPhnOBscHFzAVt2gMyU
VyzMsNlTR8n3F18LX/LmUyylUso9hXDc56Awb/zYvcel7A8PJGtbUrxTSoWhLNsn
zxc7juvcHmafSIKHfgxi2B/WrYrKftRBEwrvhxAL9rMCgbenl1hgpGPBn3xw9UfW
19PsegJD7azz2YyveVwvxFjXzJKhlJI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:49:54 2026 by rpki-client