Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/16f5f120-152b-3077-9c26-79e8cade03e1.roa
File:                     16f5f120-152b-3077-9c26-79e8cade03e1.roa (raw, json)
Hash identifier:          AtfrIAbZt7/tNEm+93iJJWYATftj2HnsflznFSENUMo=
Subject key identifier:   25:EF:F5:B0:86:28:65:56:7F:FB:10:AC:22:B9:EC:15:6C:0E:A4:2A
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584F0D6CE566790D0C146CB94480
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/16f5f120-152b-3077-9c26-79e8cade03e1.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        172.98.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e5:66:79:0d:0c:14:6c:b9:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=8a32840a-e889-47df-ac0c-a97c6cb14860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:9c:b4:04:5d:f6:93:c1:83:fe:1b:8b:fe:
                    88:67:7c:cc:52:29:1c:f6:3d:2b:d2:ac:ed:76:d5:
                    93:e5:03:79:5b:ef:d3:ae:60:78:00:03:e5:09:7d:
                    f6:72:61:32:62:82:13:5c:d4:6a:dc:5b:04:4a:53:
                    4b:9c:27:f6:b7:53:5f:2e:f3:9c:21:25:04:86:29:
                    a5:77:b0:34:01:f6:2a:ed:7d:d8:7f:7c:c2:21:2a:
                    6a:3f:97:0d:ff:84:ee:58:f6:07:d5:28:41:e0:c5:
                    5a:e7:a6:b5:eb:c9:54:bf:70:6c:36:f6:8f:bb:5d:
                    a0:03:22:b6:8c:f1:b5:b2:23:9f:de:a3:86:94:78:
                    6a:1f:a5:8e:0d:6a:09:9b:f1:28:50:0d:83:4e:43:
                    bd:a6:a9:a2:2d:ab:e3:70:b2:c4:d0:ed:64:dd:51:
                    e7:fe:b9:fe:fe:2f:06:e3:f4:09:02:4c:35:22:ce:
                    61:76:df:c9:6d:d1:56:d1:e5:41:59:d8:8b:2d:dc:
                    c7:dd:d4:54:e4:b8:c9:2b:7a:3a:02:1d:9c:f6:39:
                    41:1d:0c:86:f5:31:ea:0d:8a:b6:a0:64:bc:62:06:
                    bb:2a:92:81:c8:b7:7a:ab:ec:20:15:12:b5:72:59:
                    0b:f2:b7:d7:42:dc:10:38:40:30:b9:06:53:13:8f:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EF:F5:B0:86:28:65:56:7F:FB:10:AC:22:B9:EC:15:6C:0E:A4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/16f5f120-152b-3077-9c26-79e8cade03e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:d2:79:f9:cd:05:25:76:e7:51:02:28:63:42:f6:6d:01:
         c0:f0:bb:59:ff:9c:b8:8e:96:dd:75:d1:66:e6:fa:39:cd:b0:
         f8:2d:50:35:48:40:58:ed:79:55:70:f0:d4:13:34:25:2a:fb:
         81:dc:c1:86:db:79:7e:b2:4c:35:80:c6:6a:c9:ce:1c:d7:b7:
         b6:5c:0f:47:65:01:18:d7:d7:f4:dd:d3:0e:e7:6e:1c:05:a2:
         b4:6f:13:13:81:ce:e1:20:6d:19:3e:ce:bf:d1:d4:46:1b:ab:
         e8:73:f3:e8:5d:94:af:8c:8c:ce:96:66:07:60:9b:72:bc:62:
         27:22:db:0f:58:20:f6:6a:47:3c:79:f3:1c:2b:e6:1a:eb:df:
         d5:10:f5:95:0f:a4:4b:92:3d:e4:f5:8f:0c:52:5b:1e:ec:45:
         a5:cb:35:7a:1c:4b:ca:35:cb:2c:7c:79:d1:7e:d3:f7:dd:e4:
         d7:84:36:1c:b9:54:3e:8b:2b:13:44:30:7c:79:94:c5:6e:4b:
         05:13:11:23:0f:59:20:31:fa:5d:af:98:6a:92:98:71:e6:72:
         41:10:3e:35:5f:d4:5d:08:6f:71:17:f4:d9:ba:71:38:85:83:
         18:24:0e:92:e9:62:db:a7:7a:fc:fc:8e:4d:90:fa:66:46:c4:
         18:a2:f6:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOVmeQ0MFGy5RIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
OGEzMjg0MGEtZTg4OS00N2RmLWFjMGMtYTk3YzZjYjE0ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6ctARd9pPBg/4bi/6IZ3zMUikc9j0r0qzt
dtWT5QN5W+/TrmB4AAPlCX32cmEyYoITXNRq3FsESlNLnCf2t1NfLvOcISUEhiml
d7A0AfYq7X3Yf3zCISpqP5cN/4TuWPYH1ShB4MVa56a168lUv3BsNvaPu12gAyK2
jPG1siOf3qOGlHhqH6WODWoJm/EoUA2DTkO9pqmiLavjcLLE0O1k3VHn/rn+/i8G
4/QJAkw1Is5hdt/JbdFW0eVBWdiLLdzH3dRU5LjJK3o6Ah2c9jlBHQyG9THqDYq2
oGS8Yga7KpKByLd6q+wgFRK1clkL8rfXQtwQOEAwuQZTE4/pWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXv9bCGKGVWf/sQrCK57BVsDqQqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvMTZmNWYxMjAtMTUyYi0z
MDc3LTljMjYtNzllOGNhZGUwM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGISMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4N0nn5zQUldudRAihjQvZtAcDwu1n/nLiOlt110Wbm+jnNsPgtUDVI
QFjteVVw8NQTNCUq+4HcwYbbeX6yTDWAxmrJzhzXt7ZcD0dlARjX1/Td0w7nbhwF
orRvExOBzuEgbRk+zr/R1EYbq+hz8+hdlK+MjM6WZgdgm3K8Yici2w9YIPZqRzx5
8xwr5hrr39UQ9ZUPpEuSPeT1jwxSWx7sRaXLNXocS8o1yyx8edF+0/fd5NeENhy5
VD6LKxNEMHx5lMVuSwUTESMPWSAx+l2vmGqSmHHmckEQPjVf1F0Ib3EX9Nm6cTiF
gxgkDpLpYtunevz8jk2Q+mZGxBii9iU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:33:23 2026 by rpki-client