Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/92889b1f-2814-3795-bb69-c86163200732.roa
File:                     92889b1f-2814-3795-bb69-c86163200732.roa (raw, json)
Hash identifier:          W0g3UWMMgt6SpXmZDf13RWf6L5yxGjnYEVphlX9w8Dg=
Subject key identifier:   F4:F1:BF:54:8B:AE:F7:19:F4:B2:C2:B0:01:1C:71:14:BB:34:D1:E7
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584E78FF7FAA317323E746E7AC80
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/92889b1f-2814-3795-bb69-c86163200732.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     30045
IP address blocks:        192.139.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7f:aa:31:73:23:e7:46:e7:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=4d5016e5-8282-409b-aed0-5be07ea4fbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:6d:db:af:31:69:34:c7:e0:97:b3:7c:0f:
                    eb:6f:a6:00:89:16:6c:13:6a:5c:b4:f9:64:43:b9:
                    ee:10:a6:ba:8a:70:d7:dd:ad:35:7d:53:bc:66:37:
                    bc:b3:05:4a:b2:3e:25:91:4a:bb:0e:34:aa:ef:41:
                    cd:12:63:0a:72:28:97:6b:d2:31:ab:7f:f9:19:6b:
                    29:6c:38:c4:5b:be:5c:57:47:46:21:6f:9b:6a:f9:
                    37:32:11:68:15:86:d1:2c:d3:85:86:9f:b5:1a:bb:
                    c5:2d:49:28:87:d2:b8:7e:f1:f6:56:fb:08:42:20:
                    62:3d:89:bf:64:0e:4a:7a:f5:eb:42:ea:95:ad:37:
                    25:d2:49:f5:3b:6b:4d:d0:f7:00:b9:4f:48:96:a8:
                    d9:68:24:e8:9d:45:88:ed:d7:a1:44:13:97:66:38:
                    2d:2c:7e:e9:10:04:96:b4:23:01:4d:73:36:08:f4:
                    3c:8e:fa:2e:f0:71:50:12:0d:24:c9:94:3a:f7:0a:
                    48:62:44:43:d2:a9:2a:fd:a4:e5:4b:ea:90:7e:1f:
                    e1:35:4a:d3:97:40:ab:d9:60:19:cb:47:8c:45:ca:
                    4b:6a:83:5b:f8:95:6f:c6:12:ce:a1:f3:13:0c:9a:
                    75:e8:11:38:f3:91:be:22:49:54:96:ac:a7:d8:28:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:BF:54:8B:AE:F7:19:F4:B2:C2:B0:01:1C:71:14:BB:34:D1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/92889b1f-2814-3795-bb69-c86163200732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6c:f3:49:2f:48:9a:50:f8:81:3f:b2:cc:4c:9f:b7:69:d9:
         ba:91:93:cf:d2:fd:1f:47:67:e6:26:b5:10:1e:09:3d:ac:f1:
         0c:ad:ba:dc:56:0e:24:2c:ba:09:fe:eb:60:5a:fd:1e:39:42:
         ed:ce:73:1d:d9:a7:8e:b2:11:19:7e:6f:20:e9:a9:31:07:92:
         14:23:4e:98:73:1d:53:39:d0:41:0a:9a:48:ed:ef:c5:1e:89:
         73:bd:1d:8c:f6:4b:07:18:24:b1:9a:5c:9d:7f:ff:4d:11:d2:
         04:80:e9:be:6e:1b:67:ef:65:fd:56:c2:81:62:14:aa:5a:c5:
         b3:25:48:2d:c1:69:80:a7:5b:17:3a:4b:08:5e:e2:03:4e:04:
         ed:8a:cd:ef:25:d3:82:c0:dc:90:21:7f:06:63:c4:30:83:a6:
         9f:20:ca:a1:26:3c:ab:ff:c7:ae:d0:dc:cb:ca:27:f3:b0:33:
         82:e2:af:b9:36:59:3d:e5:13:ab:b3:48:ee:89:26:ad:f2:ef:
         ed:04:5b:19:b0:1f:ed:ef:5c:06:17:a8:42:94:4d:0a:88:4c:
         0c:44:05:63:45:94:ff:f6:5b:fb:ca:90:ee:43:ea:17:21:69:
         37:9f:09:61:26:c2:d1:83:81:83:a3:8b:b3:c1:ca:98:31:fd:
         30:52:72:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3+qMXMj50bnrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk
YjZiMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NGQ1MDE2ZTUtODI4Mi00MDliLWFlZDAtNWJlMDdlYTRmYmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh5t268xaTTH4JezfA/rb6YAiRZsE2pctPlk
Q7nuEKa6inDX3a01fVO8Zje8swVKsj4lkUq7DjSq70HNEmMKciiXa9Ixq3/5GWsp
bDjEW75cV0dGIW+bavk3MhFoFYbRLNOFhp+1GrvFLUkoh9K4fvH2VvsIQiBiPYm/
ZA5KevXrQuqVrTcl0kn1O2tN0PcAuU9IlqjZaCTonUWI7dehRBOXZjgtLH7pEASW
tCMBTXM2CPQ8jvou8HFQEg0kyZQ69wpIYkRD0qkq/aTlS+qQfh/hNUrTl0Cr2WAZ
y0eMRcpLaoNb+JVvxhLOofMTDJp16BE485G+IklUlqyn2CiUwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTxv1SLrvcZ9LLCsAEccRS7NNHnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx
YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvOTI4ODliMWYtMjgxNC0z
Nzk1LWJiNjktYzg2MTYzMjAwNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk
M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx
ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5
NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADts80kvSJpQ+IE/ssxMn7dp2bqRk8/S/R9HZ+YmtRAeCT2s8QytutxW
DiQsugn+62Ba/R45Qu3Ocx3Zp46yERl+byDpqTEHkhQjTphzHVM50EEKmkjt78Ue
iXO9HYz2SwcYJLGaXJ1//00R0gSA6b5uG2fvZf1WwoFiFKpaxbMlSC3BaYCnWxc6
Swhe4gNOBO2Kze8l04LA3JAhfwZjxDCDpp8gyqEmPKv/x67Q3MvKJ/OwM4Lir7k2
WT3lE6uzSO6JJq3y7+0EWxmwH+3vXAYXqEKUTQqITAxEBWNFlP/2W/vKkO5D6hch
aTefCWEmwtGDgYOji7PBypgx/TBSci8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:18 2026 by rpki-client