Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
File:                     892fdf53-8d98-3430-af33-08660cd96851.roa (raw, json)
Hash identifier:          WMjnP1GeEzOzPhr+g7N1mQE7ePFBY8zK31w+cHfSH84=
Subject key identifier:   22:40:09:E8:08:94:15:31:5E:39:7A:33:B1:64:7F:12:89:9B:0C:A4
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F4328584D32D4CE6DB81CC20FD96997E8
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     215605
IP address blocks:        199.58.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:ce:6d:b8:1c:c2:0f:d9:69:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=c850b878-f30d-4a2d-bc0e-7ca3493d0b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:5c:b6:bd:f6:da:59:fb:b8:18:75:32:65:
                    e2:13:3d:be:3f:90:ec:8e:dd:6b:9a:56:85:40:0f:
                    24:e1:78:85:6c:92:9b:10:43:47:05:7a:d5:d2:63:
                    36:5d:67:df:de:5e:8e:84:d5:0d:c7:18:78:c3:a9:
                    9f:4c:d5:57:61:3f:9e:a2:dc:ab:51:d3:d4:85:4f:
                    ec:e9:5e:9d:60:c0:26:86:35:3a:e8:26:f0:2c:a1:
                    55:9f:e9:76:f4:1d:c0:08:d1:3b:2e:a9:bc:f9:fd:
                    33:b4:9c:cb:2b:15:7d:3c:e4:86:00:b7:1f:e2:cd:
                    8d:77:55:24:a8:02:62:52:03:6c:53:55:8e:c6:57:
                    fa:d8:f3:be:2b:4d:b2:10:c4:38:20:d1:c3:1f:d4:
                    e6:c6:0c:0e:d4:7d:13:9e:ca:46:18:c7:65:16:ff:
                    94:7d:65:0a:b6:eb:ca:ef:b5:6c:6d:c8:ab:82:9a:
                    3f:38:06:72:15:a4:11:4b:d9:e4:bd:8c:12:25:f4:
                    a0:20:4d:d7:95:d7:8c:ff:5f:30:21:c6:5d:61:fb:
                    b6:04:73:8f:b0:88:cb:dc:db:44:9b:7a:cb:49:a1:
                    d6:6a:c0:a7:60:f4:cd:e7:ee:75:b0:5b:06:43:98:
                    ac:74:08:22:6d:43:d2:9b:8a:c7:35:95:99:9d:cf:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:40:09:E8:08:94:15:31:5E:39:7A:33:B1:64:7F:12:89:9B:0C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:10:9f:4b:49:76:06:c4:ca:49:a6:77:73:b5:e7:21:8b:c7:
         a3:6e:60:4b:4b:82:27:49:0e:82:bb:7d:24:a4:b2:b7:4a:ec:
         28:76:69:a2:99:8d:b2:f5:05:93:d7:fe:ef:2f:29:3d:81:09:
         82:bf:80:7e:cb:9f:58:1c:6c:10:5b:6c:91:d8:78:45:bc:c4:
         7d:47:32:f8:5c:43:43:f9:86:ae:aa:41:16:b5:f1:43:0e:d7:
         15:f9:e2:61:95:59:c7:24:c7:85:29:14:8c:a2:13:ce:75:06:
         f3:c1:84:8b:a1:b5:1b:23:8e:22:55:de:0b:bf:5f:46:b6:bc:
         58:58:98:79:34:63:65:91:bc:c3:07:6b:33:15:ee:2d:96:3c:
         af:ca:97:28:b1:58:41:02:d1:74:2b:f6:0e:8c:69:81:c1:f7:
         41:1d:6d:ec:6e:90:31:c6:1d:a1:b2:c9:7b:07:7b:03:23:8d:
         91:94:a1:55:1a:b4:39:86:0c:16:bd:cc:9d:cb:94:59:a7:24:
         d3:38:15:51:c4:8e:a7:5b:83:21:66:33:c0:c2:8d:16:04:84:
         1d:9c:d3:56:0d:b1:33:01:9e:4c:3a:f9:87:30:62:77:6c:ee:
         56:29:35:f5:3c:45:d5:8a:02:d7:cb:35:ce:eb:1a:a1:63:21:
         58:7e:9a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1M5tuBzCD9lpl+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0
NDk4MB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk
Yzg1MGI4NzgtZjMwZC00YTJkLWJjMGUtN2NhMzQ5M2QwYjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO9ctr322ln7uBh1MmXiEz2+P5Dsjt1rmlaF
QA8k4XiFbJKbEENHBXrV0mM2XWff3l6OhNUNxxh4w6mfTNVXYT+eotyrUdPUhU/s
6V6dYMAmhjU66CbwLKFVn+l29B3ACNE7Lqm8+f0ztJzLKxV9POSGALcf4s2Nd1Uk
qAJiUgNsU1WOxlf62PO+K02yEMQ4INHDH9TmxgwO1H0TnspGGMdlFv+UfWUKtuvK
77Vsbcirgpo/OAZyFaQRS9nkvYwSJfSgIE3XldeM/18wIcZdYfu2BHOPsIjL3NtE
m3rLSaHWasCnYPTN5+51sFsGQ5isdAgibUPSm4rHNZWZnc+CxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJACegIlBUxXjl6M7FkfxKJmwykMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0
ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODkyZmRmNTMtOGQ5OC0z
NDMwLWFmMzMtMDg2NjBjZDk2ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0
MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw
NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5
ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJgQn0tJdgbEykmmd3O15yGLx6NuYEtLgidJDoK7fSSksrdK7Ch2aaKZ
jbL1BZPX/u8vKT2BCYK/gH7Ln1gcbBBbbJHYeEW8xH1HMvhcQ0P5hq6qQRa18UMO
1xX54mGVWcckx4UpFIyiE851BvPBhIuhtRsjjiJV3gu/X0a2vFhYmHk0Y2WRvMMH
azMV7i2WPK/KlyixWEEC0XQr9g6MaYHB90EdbexukDHGHaGyyXsHewMjjZGUoVUa
tDmGDBa9zJ3LlFmnJNM4FVHEjqdbgyFmM8DCjRYEhB2c01YNsTMBnkw6+YcwYnds
7lYpNfU8RdWKAtfLNc7rGqFjIVh+mqw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:30 2026 by rpki-client