Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
File:                     0c921e76-6576-3175-8c68-8b8667dfc669.roa (raw, json)
Hash identifier:          OahX6Azlvj9IWNXYoT6dhnTTmLqShd9NHljZeeLFgUM=
Subject key identifier:   C8:09:4F:32:03:B8:8B:12:F5:22:31:37:F9:5D:9F:4A:06:46:52:CD
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D386A4798F2DA31219BDF62A8
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     397422
IP address blocks:        199.193.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:47:98:f2:da:31:21:9b:df:62:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=88cc0822-3322-4a68-adcd-d046c85ca430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:61:8b:a9:a9:db:6e:53:de:da:0d:00:a1:
                    fd:7c:3b:5e:41:6b:68:31:08:dd:fa:01:f5:05:27:
                    0a:4a:c8:f0:54:7b:70:d1:91:63:04:1d:04:00:87:
                    6f:86:1e:93:0c:99:58:3e:56:8e:4d:be:0b:e1:8a:
                    27:94:61:b3:72:f1:08:85:3a:47:94:d0:96:49:ff:
                    4a:de:f7:94:c6:cc:a2:9d:b1:22:c4:70:f7:d5:15:
                    d1:bf:0d:9c:dd:ed:15:1d:50:27:ed:26:a4:4a:8a:
                    db:32:ca:e2:2c:0e:fd:7b:e5:d0:b9:41:30:04:fa:
                    c2:33:1b:d8:1c:30:8f:53:df:27:8c:6b:d2:21:a5:
                    1c:41:be:9a:77:e2:d1:12:93:20:a5:4d:98:c8:2b:
                    fd:bc:d0:53:94:97:92:6d:44:07:64:ae:38:67:0c:
                    0c:b3:eb:f0:f5:fd:1c:69:28:17:38:5e:0b:df:b7:
                    d8:03:44:5f:3a:78:fd:4e:f2:22:6e:2b:93:b1:d7:
                    7e:1a:be:e3:6e:2b:b7:d2:87:d5:c9:a3:78:cc:1a:
                    80:ce:0a:7a:aa:6a:43:44:24:21:cf:94:73:9a:8b:
                    3b:f4:20:62:16:38:5a:46:08:b2:cd:fe:06:8a:bd:
                    95:0d:af:09:07:86:e3:a9:e1:2e:0f:c3:c2:38:77:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:4F:32:03:B8:8B:12:F5:22:31:37:F9:5D:9F:4A:06:46:52:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:87:2c:c5:f6:45:b5:e9:56:8b:80:3e:ff:41:bf:18:fc:
         e8:fb:c3:62:66:07:9b:23:97:8e:c4:6b:57:a5:34:76:ae:da:
         af:36:73:ca:f3:8e:a3:48:de:b2:10:6e:cc:9e:5a:ed:2f:b0:
         7d:2c:3e:e8:85:c3:52:65:3e:9e:c3:e3:25:e8:f7:2b:16:80:
         92:e3:2a:68:f9:0c:84:5f:31:ea:ab:13:0c:7d:59:b7:0b:c8:
         df:e5:c8:0b:b0:31:5f:39:4d:b2:5c:93:e0:76:78:1a:2c:47:
         cd:45:00:1f:ae:cc:06:94:4c:18:c2:55:1f:ff:f4:63:90:bf:
         a8:d0:19:0c:24:00:79:79:b6:f6:73:db:52:c8:23:a8:21:fe:
         47:8f:25:55:f2:1a:1a:8b:8d:1e:27:7c:25:c0:bc:d7:75:44:
         ed:29:95:11:03:0f:fe:f8:45:b1:36:2b:b5:14:32:d6:13:a2:
         2b:2c:6c:f4:3d:f5:af:73:37:f4:f2:0a:0e:c4:10:48:ef:8b:
         df:29:a4:20:db:c1:84:59:a7:49:e8:f1:65:e2:3e:48:2d:7a:
         b6:ce:29:b5:00:e4:ba:ce:20:94:71:9d:63:66:af:bb:74:bc:
         44:1c:5c:cb:78:2e:18:79:f8:c7:87:d0:e1:82:be:ab:47:eb:
         b9:77:83:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akeY8toxIZvfYqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
ODhjYzA4MjItMzMyMi00YTY4LWFkY2QtZDA0NmM4NWNhNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGVhi6mp225T3toNAKH9fDteQWtoMQjd+gH1
BScKSsjwVHtw0ZFjBB0EAIdvhh6TDJlYPlaOTb4L4YonlGGzcvEIhTpHlNCWSf9K
3veUxsyinbEixHD31RXRvw2c3e0VHVAn7SakSorbMsriLA79e+XQuUEwBPrCMxvY
HDCPU98njGvSIaUcQb6ad+LREpMgpU2YyCv9vNBTlJeSbUQHZK44ZwwMs+vw9f0c
aSgXOF4L37fYA0RfOnj9TvIibiuTsdd+Gr7jbiu30ofVyaN4zBqAzgp6qmpDRCQh
z5Rzmos79CBiFjhaRgiyzf4Gir2VDa8JB4bjqeEuD8PCOHd4FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgJTzIDuIsS9SIxN/ldn0oGRlLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGM5MjFlNzYtNjU3Ni0z
MTc1LThjNjgtOGI4NjY3ZGZjNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8HoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxRhyzF9kW16VaLgD7/Qb8Y/Oj7w2JmB5sjl47Ea1elNHau2q82c8rz
jqNI3rIQbsyeWu0vsH0sPuiFw1JlPp7D4yXo9ysWgJLjKmj5DIRfMeqrEwx9WbcL
yN/lyAuwMV85TbJck+B2eBosR81FAB+uzAaUTBjCVR//9GOQv6jQGQwkAHl5tvZz
21LII6gh/kePJVXyGhqLjR4nfCXAvNd1RO0plREDD/74RbE2K7UUMtYToissbPQ9
9a9zN/TyCg7EEEjvi98ppCDbwYRZp0no8WXiPkgterbOKbUA5LrOIJRxnWNmr7t0
vEQcXMt4Lhh5+MeH0OGCvqtH67l3g1c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:54 2026 by rpki-client