Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa
File:                     3654a19c-8d59-3571-9690-2f911097cca8.roa (raw, json)
Hash identifier:          OFSOdDZcZQZ2WfiAGRsVVc4xz6R5/mGWUXQVPI44M9Y=
Subject key identifier:   42:F8:0B:2F:22:41:DB:7C:9C:1A:C6:02:53:79:07:13:D4:26:26:56
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584F3E47E2F9F5CAA32DA1C1F380
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        198.187.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e2:f9:f5:ca:a3:2d:a1:c1:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=b32c4a62-2189-47c8-84bd-46f8b4c20b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:67:5b:9f:21:9f:7d:0a:db:72:b5:c6:51:
                    af:06:f9:33:3d:c0:86:b0:ed:d7:9b:9a:27:97:3e:
                    02:a6:ff:c9:20:1f:d5:68:28:38:99:9e:6a:4a:94:
                    8a:a9:01:59:cc:5a:5a:65:9d:64:2e:5a:50:f7:56:
                    c1:9a:f9:11:8d:40:e6:56:6f:88:32:e9:15:63:7a:
                    be:e8:ed:dd:70:9d:7b:93:43:33:d1:18:20:2f:27:
                    66:5f:cc:3e:2d:8a:64:f0:42:67:e1:e5:04:0f:83:
                    e9:07:06:78:ab:14:ed:e8:4f:be:eb:48:09:49:dc:
                    0a:b5:b0:e0:85:dc:aa:7f:d5:34:52:27:0d:6d:71:
                    07:cf:39:9a:aa:79:13:53:f8:ea:ae:94:61:58:c6:
                    69:44:b9:2b:2f:c1:d1:ef:0d:95:ae:65:51:09:9a:
                    a6:b6:55:95:6a:82:82:f1:a6:44:c8:32:07:98:60:
                    0d:1f:16:8e:3f:45:76:d4:c5:6c:5e:c1:d0:8d:6b:
                    f1:cb:da:f8:76:93:3b:88:bb:c5:d1:43:68:6c:c3:
                    4c:f7:56:3a:0a:ba:57:7c:3a:95:ef:bb:22:5f:ad:
                    8a:02:d4:37:f0:e8:3b:6f:55:57:e1:54:a9:24:b7:
                    d4:27:41:75:86:3f:4a:0e:98:57:3e:33:0b:1f:19:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:0B:2F:22:41:DB:7C:9C:1A:C6:02:53:79:07:13:D4:26:26:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:15:fe:c6:3b:ba:b7:86:3a:24:45:73:84:f5:83:94:dc:
         86:dd:b3:72:8a:ce:a3:9a:93:0e:95:eb:b5:fd:2b:f2:3c:a2:
         30:f2:b7:8f:6a:29:8f:37:a0:8a:86:fa:92:34:3a:f1:bc:55:
         2e:5b:d8:40:01:96:24:26:61:a3:c0:a7:7b:6e:e8:16:15:2c:
         57:6f:03:f6:5b:a5:e0:97:a8:65:c2:b5:36:c8:c7:bf:2d:67:
         50:41:0c:b4:e3:d6:81:f2:dc:88:6a:e4:4a:3a:70:b3:d7:98:
         da:16:01:3a:04:58:f5:5d:b5:4f:8d:98:73:6d:97:ca:1d:29:
         32:4c:b0:bc:5d:fd:36:67:9d:76:50:f2:89:ff:f0:a6:4b:04:
         74:92:c1:28:4a:2b:90:3b:4d:39:fe:65:50:da:c1:ca:20:51:
         82:e4:c0:41:85:e4:df:d4:af:a0:91:7c:3a:fa:fb:72:13:42:
         5c:77:e5:3f:8a:8c:6f:d4:e1:15:8c:47:e0:55:8d:55:34:87:
         b1:00:1c:34:a8:46:fc:54:c6:8f:c1:97:15:d9:94:ea:e2:2a:
         7e:2f:98:e9:9d:bc:18:17:23:d8:87:b5:8e:bc:8b:15:fa:fa:
         2b:6f:b7:47:d7:87:15:d3:27:0c:59:a2:3e:12:92:2c:6d:ab:
         07:4a:12:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+L59cqjLaHB84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1ZDUzMGUtMDU4Yy00YWNkLWJlYjgtMDFhOGQwZmY0
MWViMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
YjMyYzRhNjItMjE4OS00N2M4LTg0YmQtNDZmOGI0YzIwYjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwtnW58hn30K23K1xlGvBvkzPcCGsO3Xm5on
lz4Cpv/JIB/VaCg4mZ5qSpSKqQFZzFpaZZ1kLlpQ91bBmvkRjUDmVm+IMukVY3q+
6O3dcJ17k0Mz0RggLydmX8w+LYpk8EJn4eUED4PpBwZ4qxTt6E++60gJSdwKtbDg
hdyqf9U0UicNbXEHzzmaqnkTU/jqrpRhWMZpRLkrL8HR7w2VrmVRCZqmtlWVaoKC
8aZEyDIHmGANHxaOP0V21MVsXsHQjWvxy9r4dpM7iLvF0UNobMNM91Y6CrpXfDqV
77siX62KAtQ38Og7b1VX4VSpJLfUJ0F1hj9KDphXPjMLHxlnRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEL4Cy8iQdt8nBrGAlN5BxPUJiZWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDVk
NTMwZS0wNThjLTRhY2QtYmViOC0wMWE4ZDBmZjQxZWIvMzY1NGExOWMtOGQ1OS0z
NTcxLTk2OTAtMmY5MTEwOTdjY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTA1ZDUzMGUtMDU4Yy00YWNkLWJl
YjgtMDFhOGQwZmY0MWViLzkwNWQ1MzBlLTA1OGMtNGFjZC1iZWI4LTAxYThkMGZm
NDFlYi5jcmwwHwYDVR0jBBgwFoAUrtmkdO5svJwRfW497MACbTVIj9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MDVkNTMwZS0wNThjLTRhY2QtYmViOC0wMWE4
ZDBmZjQxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrvfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvbFf7GO7q3hjokRXOE9YOU3Ibds3KKzqOakw6V67X9K/I8ojDyt49q
KY83oIqG+pI0OvG8VS5b2EABliQmYaPAp3tu6BYVLFdvA/ZbpeCXqGXCtTbIx78t
Z1BBDLTj1oHy3Ihq5Eo6cLPXmNoWAToEWPVdtU+NmHNtl8odKTJMsLxd/TZnnXZQ
8on/8KZLBHSSwShKK5A7TTn+ZVDawcogUYLkwEGF5N/Ur6CRfDr6+3ITQlx35T+K
jG/U4RWMR+BVjVU0h7EAHDSoRvxUxo/BlxXZlOriKn4vmOmdvBgXI9iHtY68ixX6
+itvt0fXhxXTJwxZoj4SkixtqwdKEq4=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:14:11 2026 by rpki-client