Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/90874b08-f345-36a7-a7d7-01bb40cc39cc.roa
File:                     90874b08-f345-36a7-a7d7-01bb40cc39cc.roa (raw, json)
Hash identifier:          ORuhv/cVZReGzDgc9C0fX54Uzy5HswPaxAO6aLeD4vU=
Subject key identifier:   8B:3E:CA:04:C7:65:E5:64:82:FA:BF:AB:B1:50:1B:77:A1:A7:9A:09
Certificate issuer:       /CN=ca37373e-61cf-4274-af0b-afb3c6d47ca3
Certificate serial:       010D0C9F4328584F5425DB3EE215795871E01880
Authority key identifier: 03:6E:12:71:92:A8:BB:32:5B:BD:B7:45:C0:4E:8A:87:FB:DB:B2:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/90874b08-f345-36a7-a7d7-01bb40cc39cc.roa
Signing time:             Mon 28 Sep 2026 20:59:38 +0000
ROA not before:           Mon 28 Sep 2026 20:59:38 +0000
ROA not after:            Sun 27 Dec 2026 21:59:38 +0000
asID:                     32586
IP address blocks:        198.154.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ca37373e-61cf-4274-af0b-afb3c6d47ca3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ca37373e-61cf-4274-af0b-afb3c6d47ca3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:25:db:3e:e2:15:79:58:71:e0:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37373e-61cf-4274-af0b-afb3c6d47ca3
        Validity
            Not Before: Sep 28 20:59:38 2026 GMT
            Not After : Dec 27 21:59:38 2026 GMT
        Subject: CN=a94e5225-fdbd-488f-9254-0ec4652f77d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:c1:b4:a1:04:82:62:46:57:96:80:fe:dd:
                    e9:05:e7:13:21:23:0d:07:4b:9c:37:01:96:74:49:
                    a2:0f:11:bc:1b:82:60:d6:8a:0b:43:8f:76:b5:0e:
                    00:c7:3f:78:8d:a5:b4:0c:19:d5:00:e3:56:a5:31:
                    2d:0d:23:95:4d:ac:3f:bb:7d:30:cc:9e:93:62:59:
                    96:1c:5f:3a:a8:b0:49:49:bb:d9:3a:91:d3:79:92:
                    85:19:cb:de:5c:35:91:d8:85:5e:b5:40:97:b8:2f:
                    d5:f5:09:65:aa:06:6d:01:12:21:54:4e:1c:17:37:
                    3b:47:d9:e4:49:90:2e:4a:99:e7:07:07:78:23:ab:
                    e9:1c:4c:be:03:bf:9c:be:36:cf:85:86:8b:1a:76:
                    af:5f:4c:66:d5:9e:18:70:7c:48:d5:ac:ed:b2:5b:
                    f3:a4:83:09:53:6a:45:15:89:fc:90:7e:57:aa:59:
                    7d:24:fb:14:a5:b3:3e:41:85:57:68:0b:64:d8:12:
                    1f:d2:31:af:66:ed:5a:59:e9:fd:6e:05:ac:aa:b4:
                    42:67:5c:7d:9d:4a:f4:af:95:da:75:61:93:89:83:
                    30:92:c2:e9:2a:3c:47:af:00:fe:94:a2:24:ec:e4:
                    7a:07:66:59:db:55:4b:01:6c:85:43:7f:d3:ea:83:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:CA:04:C7:65:E5:64:82:FA:BF:AB:B1:50:1B:77:A1:A7:9A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/90874b08-f345-36a7-a7d7-01bb40cc39cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ca37373e-61cf-4274-af0b-afb3c6d47ca3.crl

            X509v3 Authority Key Identifier:
                keyid:03:6E:12:71:92:A8:BB:32:5B:BD:B7:45:C0:4E:8A:87:FB:DB:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:10:da:65:42:39:a2:44:78:bf:5a:f2:de:5e:2b:04:38:
         6d:3d:21:c8:c6:e0:e6:f8:b7:85:6b:41:08:55:b7:fc:57:62:
         eb:e5:bb:2e:3b:50:82:00:32:a7:e7:35:56:78:89:70:e5:4e:
         13:b3:1c:ee:82:1e:d4:40:6c:32:d5:93:d5:74:50:5c:19:bf:
         13:65:9c:1c:63:6c:14:3e:6d:a1:7c:e4:ee:d7:ef:22:84:db:
         d7:41:a8:21:7e:ff:c1:8d:d9:77:2a:2a:58:d4:3a:9f:17:9d:
         a2:9c:ef:a0:61:c5:93:5c:c6:d1:71:6a:94:04:c9:de:9a:e8:
         3f:30:04:eb:75:9c:cb:98:3d:a5:f8:9b:1c:70:3d:f5:54:e8:
         d1:a1:67:13:c2:09:9f:71:74:e0:9c:ae:74:45:a3:89:a7:88:
         45:e1:9f:b7:25:d8:d0:2a:c8:65:63:e2:82:34:6d:48:95:6c:
         27:93:6c:27:49:b5:05:df:5f:57:3f:d9:15:84:1e:6d:c2:95:
         56:a1:8e:e7:95:c3:48:75:6c:ae:e9:22:cc:5a:1e:27:b1:5c:
         3b:c9:c5:a1:af:27:7c:da:3d:67:09:36:0b:6f:ff:ec:c2:b9:
         51:bb:20:c9:ed:27:63:f0:2a:73:d3:08:1e:bc:67:bc:b6:11:
         19:42:5d:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UJds+4hV5WHHgGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EzNzM3M2UtNjFjZi00Mjc0LWFmMGItYWZiM2M2ZDQ3
Y2EzMB4XDTI2MDkyODIwNTkzOFoXDTI2MTIyNzIxNTkzOFowLzEtMCsGA1UEAxMk
YTk0ZTUyMjUtZmRiZC00ODhmLTkyNTQtMGVjNDY1MmY3N2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0vBtKEEgmJGV5aA/t3pBecTISMNB0ucNwGW
dEmiDxG8G4Jg1ooLQ492tQ4Axz94jaW0DBnVAONWpTEtDSOVTaw/u30wzJ6TYlmW
HF86qLBJSbvZOpHTeZKFGcveXDWR2IVetUCXuC/V9QllqgZtARIhVE4cFzc7R9nk
SZAuSpnnBwd4I6vpHEy+A7+cvjbPhYaLGnavX0xm1Z4YcHxI1aztslvzpIMJU2pF
FYn8kH5Xqll9JPsUpbM+QYVXaAtk2BIf0jGvZu1aWen9bgWsqrRCZ1x9nUr0r5Xa
dWGTiYMwksLpKjxHrwD+lKIk7OR6B2ZZ21VLAWyFQ3/T6oPH4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIs+ygTHZeVkgvq/q7FQG3ehp5oJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYTM3
MzczZS02MWNmLTQyNzQtYWYwYi1hZmIzYzZkNDdjYTMvOTA4NzRiMDgtZjM0NS0z
NmE3LWE3ZDctMDFiYjQwY2MzOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2EzNzM3M2UtNjFjZi00Mjc0LWFm
MGItYWZiM2M2ZDQ3Y2EzL2NhMzczNzNlLTYxY2YtNDI3NC1hZjBiLWFmYjNjNmQ0
N2NhMy5jcmwwHwYDVR0jBBgwFoAUA24ScZKouzJbvbdFwE6Kh/vbsq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jYTM3MzczZS02MWNmLTQyNzQtYWYwYi1hZmIz
YzZkNDdjYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpoHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErWENplQjmiRHi/WvLeXisEOG09IcjG4Ob4t4VrQQhVt/xXYuvluy47
UIIAMqfnNVZ4iXDlThOzHO6CHtRAbDLVk9V0UFwZvxNlnBxjbBQ+baF85O7X7yKE
29dBqCF+/8GN2XcqKljUOp8XnaKc76BhxZNcxtFxapQEyd6a6D8wBOt1nMuYPaX4
mxxwPfVU6NGhZxPCCZ9xdOCcrnRFo4mniEXhn7cl2NAqyGVj4oI0bUiVbCeTbCdJ
tQXfX1c/2RWEHm3ClVahjueVw0h1bK7pIsxaHiexXDvJxaGvJ3zaPWcJNgtv/+zC
uVG7IMntJ2PwKnPTCB68Z7y2ERlCXTM=
-----END CERTIFICATE-----
Generated at Tue Oct 6 05:32:48 2026 by rpki-client