Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/adb25ba2-97b7-3edb-a188-e5b82fd5996b.roa
File:                     adb25ba2-97b7-3edb-a188-e5b82fd5996b.roa (raw, json)
Hash identifier:          zcZCDGqZjzzqA5Tfrt3Uav9SYG+rH8Fy0ShV6HfHQMk=
Subject key identifier:   89:A1:F6:81:A5:3E:E7:14:C2:13:E6:C6:42:04:A0:BF:94:2A:3A:12
Certificate issuer:       /CN=809ec620-096a-4f34-b8a6-add53205ea42
Certificate serial:       010D0C9F4328584F549815E7F2D16D1C97877BA0
Authority key identifier: 6F:70:BC:96:AF:CF:C9:E6:F8:EB:8E:93:27:AF:2D:86:67:7F:9E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/adb25ba2-97b7-3edb-a188-e5b82fd5996b.roa
Signing time:             Tue 29 Sep 2026 00:49:47 +0000
ROA not before:           Tue 29 Sep 2026 00:49:47 +0000
ROA not after:            Mon 28 Dec 2026 01:02:07 +0000
asID:                     399925
IP address blocks:        198.190.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/809ec620-096a-4f34-b8a6-add53205ea42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/809ec620-096a-4f34-b8a6-add53205ea42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:98:15:e7:f2:d1:6d:1c:97:87:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809ec620-096a-4f34-b8a6-add53205ea42
        Validity
            Not Before: Sep 29 00:49:47 2026 GMT
            Not After : Dec 28 01:02:07 2026 GMT
        Subject: CN=45eb08b1-3e92-4646-9cd1-adfc92355d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:58:24:2c:70:bd:c2:46:09:ac:c0:01:36:
                    66:49:13:70:ce:3d:ed:39:36:47:aa:21:21:19:a2:
                    dd:c2:b5:06:85:94:d4:4d:53:53:1c:9e:7e:70:db:
                    a1:02:fd:73:ec:e1:ae:86:1f:e1:3a:28:89:59:ed:
                    c0:a5:2c:e3:db:d8:d7:d4:25:d9:d2:ec:9f:6e:13:
                    92:40:93:61:f1:ad:f1:23:fc:ce:78:d6:ae:b1:4b:
                    6d:a0:d0:b0:f3:39:8c:ec:d1:01:9d:72:11:0d:a7:
                    80:05:30:e2:0f:1e:d6:03:ba:0a:71:08:8d:3f:4b:
                    fe:9c:4f:98:cd:c3:5c:0c:08:cf:39:40:19:59:f8:
                    c1:a8:ab:16:df:36:e5:81:6b:46:db:8d:88:6e:23:
                    4d:e9:e5:e2:bb:e0:68:00:2d:89:96:17:09:c9:96:
                    6c:4b:84:f1:3a:74:e6:88:df:b9:c4:cf:af:78:de:
                    a7:82:01:3d:99:04:24:e1:54:5c:50:59:7d:bf:ef:
                    e0:5d:4c:e5:33:30:b6:a2:f9:de:63:d2:47:6b:ba:
                    3f:25:ff:69:99:c5:c4:0e:52:af:c8:66:e0:1b:1f:
                    28:74:d8:94:df:19:ca:99:2a:33:4d:d5:a2:df:7c:
                    83:e3:1b:e0:1c:65:71:13:13:5d:49:4f:60:08:f4:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:F6:81:A5:3E:E7:14:C2:13:E6:C6:42:04:A0:BF:94:2A:3A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/adb25ba2-97b7-3edb-a188-e5b82fd5996b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/809ec620-096a-4f34-b8a6-add53205ea42.crl

            X509v3 Authority Key Identifier:
                keyid:6F:70:BC:96:AF:CF:C9:E6:F8:EB:8E:93:27:AF:2D:86:67:7F:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:44:59:48:2d:aa:78:ca:70:66:e2:2c:a5:68:c5:71:9b:18:
         66:09:86:5b:b1:31:66:71:1f:db:9d:59:3f:bd:c7:ec:26:96:
         e1:c1:63:b9:95:55:c2:e1:4f:fc:02:ce:5f:ae:44:0a:60:28:
         6d:99:6b:29:ad:db:77:b5:f7:83:ef:ff:0c:10:a3:10:06:e9:
         50:67:a5:04:0b:d9:c2:df:fa:89:55:91:53:4e:1b:00:c1:ba:
         06:95:1a:70:93:25:53:af:13:33:8b:3e:49:70:d7:93:00:1d:
         ba:ee:21:b9:75:86:7c:87:10:1c:31:0b:3a:a6:ed:41:76:1f:
         07:77:52:f6:21:2d:14:90:85:da:f5:7e:be:0b:98:25:45:7c:
         f5:71:a4:33:71:30:cb:fd:10:58:32:55:ab:f7:3a:05:70:e4:
         de:50:d3:e4:bb:4d:d6:45:f5:91:01:9f:a0:f4:fc:6b:06:28:
         d1:85:b6:41:2b:eb:34:4b:cf:33:33:a6:0e:c2:9a:b4:c2:d5:
         52:88:7c:80:c2:e7:8a:91:16:e4:ba:68:1d:af:e6:fd:15:54:
         d4:f2:22:fe:a4:75:6f:4c:f4:d6:fb:70:46:80:74:b4:74:55:
         25:80:06:1a:e8:0d:3f:84:54:c2:8a:48:f2:32:9d:1d:ca:d8:
         1b:73:43:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UmBXn8tFtHJeHe6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA5ZWM2MjAtMDk2YS00ZjM0LWI4YTYtYWRkNTMyMDVl
YTQyMB4XDTI2MDkyOTAwNDk0N1oXDTI2MTIyODAxMDIwN1owLzEtMCsGA1UEAxMk
NDVlYjA4YjEtM2U5Mi00NjQ2LTljZDEtYWRmYzkyMzU1ZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDxYJCxwvcJGCazAATZmSRNwzj3tOTZHqiEh
GaLdwrUGhZTUTVNTHJ5+cNuhAv1z7OGuhh/hOiiJWe3ApSzj29jX1CXZ0uyfbhOS
QJNh8a3xI/zOeNausUttoNCw8zmM7NEBnXIRDaeABTDiDx7WA7oKcQiNP0v+nE+Y
zcNcDAjPOUAZWfjBqKsW3zblgWtG242IbiNN6eXiu+BoAC2JlhcJyZZsS4TxOnTm
iN+5xM+veN6nggE9mQQk4VRcUFl9v+/gXUzlMzC2ovneY9JHa7o/Jf9pmcXEDlKv
yGbgGx8odNiU3xnKmSozTdWi33yD4xvgHGVxExNdSU9gCPSYsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImh9oGlPucUwhPmxkIEoL+UKjoSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84MDll
YzYyMC0wOTZhLTRmMzQtYjhhNi1hZGQ1MzIwNWVhNDIvYWRiMjViYTItOTdiNy0z
ZWRiLWExODgtZTViODJmZDU5OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvODA5ZWM2MjAtMDk2YS00ZjM0LWI4
YTYtYWRkNTMyMDVlYTQyLzgwOWVjNjIwLTA5NmEtNGYzNC1iOGE2LWFkZDUzMjA1
ZWE0Mi5jcmwwHwYDVR0jBBgwFoAUb3C8lq/Pyeb4646TJ68thmd/no4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi84MDllYzYyMC0wOTZhLTRmMzQtYjhhNi1hZGQ1
MzIwNWVhNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxr7eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhEWUgtqnjKcGbiLKVoxXGbGGYJhluxMWZxH9udWT+9x+wmluHBY7mV
VcLhT/wCzl+uRApgKG2Zaymt23e194Pv/wwQoxAG6VBnpQQL2cLf+olVkVNOGwDB
ugaVGnCTJVOvEzOLPklw15MAHbruIbl1hnyHEBwxCzqm7UF2Hwd3UvYhLRSQhdr1
fr4LmCVFfPVxpDNxMMv9EFgyVav3OgVw5N5Q0+S7TdZF9ZEBn6D0/GsGKNGFtkEr
6zRLzzMzpg7CmrTC1VKIfIDC54qRFuS6aB2v5v0VVNTyIv6kdW9M9Nb7cEaAdLR0
VSWABhroDT+EVMKKSPIynR3K2BtzQ90=
-----END CERTIFICATE-----
Generated at Wed Sep 30 22:42:01 2026 by rpki-client