Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/5c3808ee-173c-36ed-99f4-b9d880984e67.roa
File:                     5c3808ee-173c-36ed-99f4-b9d880984e67.roa (raw, json)
Hash identifier:          Ajh11oNOFNIYuX98Al57HjReFqgB4K0syuj++zCbVX4=
Subject key identifier:   63:AE:68:89:66:50:95:D3:52:1B:5D:48:4C:E7:F9:A2:A2:8A:08:3F
Certificate issuer:       /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial:       010D0C9F4328584F480D4529D59A8F1515E18B50
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/5c3808ee-173c-36ed-99f4-b9d880984e67.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     12022
IP address blocks:        192.190.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:45:29:d5:9a:8f:15:15:e1:8b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=1102b9b7-5774-48a3-a8c2-b8fdc631cd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:83:28:2a:a3:69:a7:7b:25:df:28:f6:d5:
                    1b:30:3e:f6:a4:99:2a:de:c1:8c:ea:45:8b:31:a1:
                    25:6f:65:49:cc:84:b9:95:3e:f6:b3:8e:fa:9e:4b:
                    6a:99:33:ab:73:da:6f:d1:98:94:e7:c6:bd:54:22:
                    0b:12:f2:7d:18:6d:cd:c0:fe:05:af:91:51:34:3b:
                    d5:15:41:31:a4:14:ee:22:5d:0a:cf:f2:7f:89:16:
                    4b:a6:1a:13:11:32:04:5f:30:6a:89:34:f6:da:e8:
                    45:ad:5a:41:f3:37:da:d0:8e:9c:c2:3e:a4:99:ca:
                    b4:89:ff:8f:88:ec:72:ef:13:bd:f2:48:65:1b:88:
                    50:13:41:65:41:d0:bb:0f:6b:90:89:4b:69:17:7f:
                    d1:33:f1:58:4a:3f:b5:77:96:34:ad:a5:c3:cc:14:
                    a2:af:68:bf:1c:30:ea:60:15:98:0c:d3:a3:42:8b:
                    90:50:8c:9b:05:d8:fb:a2:99:45:82:39:84:d3:b4:
                    d7:a5:dc:7b:46:39:14:ca:d3:52:b7:cf:33:dd:19:
                    45:3a:8f:9f:dd:bf:20:d8:1f:33:b1:4d:f9:1e:e3:
                    2a:7d:6b:30:d5:d8:5f:e0:f9:f7:b9:ea:70:57:87:
                    b5:6d:d0:70:a7:f3:57:1b:86:ae:e2:54:81:38:3a:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:68:89:66:50:95:D3:52:1B:5D:48:4C:E7:F9:A2:A2:8A:08:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/5c3808ee-173c-36ed-99f4-b9d880984e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl

            X509v3 Authority Key Identifier:
                keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:38:82:48:fe:f8:46:4d:80:5b:87:7c:53:da:97:ac:2b:
         32:bd:5d:13:5c:19:1a:70:9f:3e:20:00:a1:ed:65:a0:bd:97:
         ae:d8:89:7f:35:22:93:d6:ec:53:74:c6:9b:10:9d:be:e3:ae:
         e2:99:fb:e3:34:bf:8f:f4:a1:35:25:00:a8:4e:02:e1:6e:35:
         1e:85:f1:43:7b:84:22:73:72:49:3a:ac:eb:f0:00:75:da:bd:
         22:d1:b8:5c:9c:7c:a1:82:cd:51:d6:df:02:58:95:ea:73:82:
         38:a2:a7:d7:3b:9f:b5:f2:ab:5a:50:45:b5:20:75:df:80:2d:
         15:64:a5:ef:d8:d3:17:4a:a9:80:91:57:4b:65:6f:4b:4f:6e:
         02:76:ea:60:a0:61:1e:d0:bb:1a:7d:9c:86:a0:8e:63:4d:39:
         b6:6c:77:45:7a:bf:ea:9c:77:95:ca:f0:7a:e1:a8:29:4a:c3:
         3d:d7:5b:f6:bd:ad:fb:8d:24:01:44:6b:01:df:6c:6b:fd:6b:
         99:5d:f0:29:de:e7:de:6c:1f:6e:b4:06:c1:f9:79:0a:c9:fe:
         81:c1:cc:51:4d:30:e7:49:36:aa:ed:a0:2d:0d:1b:49:c2:bf:
         81:ca:5b:d0:41:34:37:11:4d:5d:20:96:9d:04:5a:84:1e:09:
         ab:be:43:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUUp1ZqPFRXhi1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4
MDMxMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
MTEwMmI5YjctNTc3NC00OGEzLWE4YzItYjhmZGM2MzFjZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSeDKCqjaad7Jd8o9tUbMD72pJkq3sGM6kWL
MaElb2VJzIS5lT72s476nktqmTOrc9pv0ZiU58a9VCILEvJ9GG3NwP4Fr5FRNDvV
FUExpBTuIl0Kz/J/iRZLphoTETIEXzBqiTT22uhFrVpB8zfa0I6cwj6kmcq0if+P
iOxy7xO98khlG4hQE0FlQdC7D2uQiUtpF3/RM/FYSj+1d5Y0raXDzBSir2i/HDDq
YBWYDNOjQouQUIybBdj7oplFgjmE07TXpdx7RjkUytNSt88z3RlFOo+f3b8g2B8z
sU35HuMqfWsw1dhf4Pn3uepwV4e1bdBwp/NXG4au4lSBODqHewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOuaIlmUJXTUhtdSEzn+aKiigg/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2
NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvNWMzODA4ZWUtMTczYy0z
NmVkLTk5ZjQtYjlkODgwOTg0ZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3
NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj
ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4
OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwL68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFG/OIJI/vhGTYBbh3xT2pesKzK9XRNcGRpwnz4gAKHtZaC9l67YiX81
IpPW7FN0xpsQnb7jruKZ++M0v4/0oTUlAKhOAuFuNR6F8UN7hCJzckk6rOvwAHXa
vSLRuFycfKGCzVHW3wJYlepzgjiip9c7n7Xyq1pQRbUgdd+ALRVkpe/Y0xdKqYCR
V0tlb0tPbgJ26mCgYR7Quxp9nIagjmNNObZsd0V6v+qcd5XK8HrhqClKwz3XW/a9
rfuNJAFEawHfbGv9a5ld8Cne595sH260BsH5eQrJ/oHBzFFNMOdJNqrtoC0NG0nC
v4HKW9BBNDcRTV0glp0EWoQeCau+Qyg=
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:03:08 2026 by rpki-client