Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3834d51-1c0e-38fd-bc96-87b403ede362.roa
File:                     d3834d51-1c0e-38fd-bc96-87b403ede362.roa (raw, json)
Hash identifier:          axTz0yXDOpcj3JGcqGQZYFsUhVpregE0Gaq/p9XTPwQ=
Subject key identifier:   5C:89:6C:06:60:79:33:B1:C0:7A:45:B1:4E:1A:DD:D1:23:CD:52:CB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F1CC7B0701FCCD7B2DF1DCC40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3834d51-1c0e-38fd-bc96-87b403ede362.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     5650
IP address blocks:        168.93.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b0:70:1f:cc:d7:b2:df:1d:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=56c8dd35-ed02-4d15-ba5c-0a7faa1cb31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:a0:cc:d2:8c:0c:c7:93:ee:de:3d:c7:7e:
                    20:17:23:68:6d:23:75:e9:48:07:2c:b9:12:67:8a:
                    4c:8f:50:58:d7:ed:92:de:57:01:b5:e8:17:2b:82:
                    91:bf:5a:25:1f:9a:12:d8:43:27:50:f6:76:6f:f9:
                    2f:be:8a:1e:f5:58:a9:13:10:85:d9:d6:6b:85:12:
                    6e:37:08:92:dc:83:51:c8:f4:c9:2f:d1:c0:8d:ce:
                    6d:f3:fe:f7:e5:ef:5a:ee:46:2e:a8:8c:f0:41:aa:
                    eb:e5:a4:3c:84:99:34:cd:e2:b4:a5:6b:a1:cb:cd:
                    0f:1d:5f:6f:d8:04:8e:0c:e5:34:40:12:cd:d4:75:
                    01:62:aa:f5:27:ba:10:ee:39:5f:b7:86:d6:e7:80:
                    b9:45:9d:b2:3c:11:93:82:74:9f:df:54:09:7b:cd:
                    24:69:28:83:35:2b:34:d1:b1:34:14:15:fa:5b:6e:
                    80:d0:d7:da:9c:5a:09:98:c5:44:6a:80:1a:c2:46:
                    88:c0:c5:6e:fc:55:7e:bd:8d:69:d7:29:74:ab:40:
                    ce:4d:16:97:d2:26:3f:c3:79:40:8d:6a:ed:a3:fe:
                    da:d9:6f:a9:49:7d:12:63:33:80:73:d4:dd:ad:15:
                    cb:f4:8d:3b:81:a0:46:cb:5b:19:e0:15:7a:5d:9a:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:6C:06:60:79:33:B1:C0:7A:45:B1:4E:1A:DD:D1:23:CD:52:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3834d51-1c0e-38fd-bc96-87b403ede362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:56:41:9d:14:c0:91:f0:86:6c:95:b1:84:3c:b9:78:8f:
         48:8f:13:33:68:37:32:bd:2d:ab:2a:69:0e:d8:01:29:b7:7c:
         4d:66:73:6a:d4:5f:4b:da:ad:ef:19:0d:64:90:9a:ab:32:bc:
         cc:24:dc:93:79:b6:27:b7:a9:5b:16:b7:1d:f0:ef:ed:7e:1a:
         7d:bc:d6:40:a1:73:ac:79:a1:39:3e:9f:76:4a:46:1e:c0:a4:
         b9:16:10:bf:5a:f9:d2:9d:fe:a0:3d:63:3a:3a:ec:06:a5:84:
         0e:84:1d:03:6e:95:02:02:47:91:2a:54:3c:c0:cd:3b:8e:03:
         ad:84:d7:b9:3e:ad:5f:1d:c8:d1:96:0c:4a:7c:75:f9:49:34:
         0b:f4:aa:d4:e6:f5:6b:01:27:0e:cf:92:82:3c:de:30:2a:df:
         2b:5c:37:f4:f6:f8:4a:cd:92:79:7a:19:58:ae:0b:27:42:8e:
         e7:d3:d5:9f:05:c9:23:a5:27:77:50:ac:dc:5b:f0:c0:18:a4:
         9f:e7:f1:cc:fb:06:33:d3:b3:9f:cb:ae:55:c0:ec:28:4e:90:
         c2:cd:9d:14:cd:99:5d:47:f2:07:a6:27:55:0b:08:12:93:1e:
         5a:1c:f9:77:24:e0:cd:a3:ef:08:1a:2b:4f:d3:4f:5a:de:7f:
         8e:b4:9a:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx7BwH8zXst8dzEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
NTZjOGRkMzUtZWQwMi00ZDE1LWJhNWMtMGE3ZmFhMWNiMzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv6gzNKMDMeT7t49x34gFyNobSN16UgHLLkS
Z4pMj1BY1+2S3lcBtegXK4KRv1olH5oS2EMnUPZ2b/kvvooe9VipExCF2dZrhRJu
NwiS3INRyPTJL9HAjc5t8/735e9a7kYuqIzwQarr5aQ8hJk0zeK0pWuhy80PHV9v
2ASODOU0QBLN1HUBYqr1J7oQ7jlft4bW54C5RZ2yPBGTgnSf31QJe80kaSiDNSs0
0bE0FBX6W26A0NfanFoJmMVEaoAawkaIwMVu/FV+vY1p1yl0q0DOTRaX0iY/w3lA
jWrto/7a2W+pSX0SYzOAc9TdrRXL9I07gaBGy1sZ4BV6XZoOQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyJbAZgeTOxwHpFsU4a3dEjzVLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDM4MzRkNTEtMWMwZS0z
OGZkLWJjOTYtODdiNDAzZWRlMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF31MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKREVkGdFMCR8IZslbGEPLl4j0iPEzNoNzK9LasqaQ7YASm3fE1mc2rU
X0vare8ZDWSQmqsyvMwk3JN5tie3qVsWtx3w7+1+Gn281kChc6x5oTk+n3ZKRh7A
pLkWEL9a+dKd/qA9Yzo67AalhA6EHQNulQICR5EqVDzAzTuOA62E17k+rV8dyNGW
DEp8dflJNAv0qtTm9WsBJw7PkoI83jAq3ytcN/T2+ErNknl6GViuCydCjufT1Z8F
ySOlJ3dQrNxb8MAYpJ/n8cz7BjPTs5/LrlXA7ChOkMLNnRTNmV1H8gemJ1ULCBKT
Hloc+Xck4M2j7wgaK0/TT1ref460mr4=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:20 2026 by rpki-client