Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
File:                     05532e03-b3a1-3527-bf6a-64d41fa06e14.roa (raw, json)
Hash identifier:          pI3XGlZ4AioSANggWMbzTKKydrpFAaMwsK+lb6HW2X8=
Subject key identifier:   F7:01:40:8D:CD:EF:9C:19:03:60:A1:60:2C:52:9D:39:94:6C:D6:55
Certificate issuer:       /CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Certificate serial:       010D0C9F4328584E48248B109F020C06CA15E020
Authority key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        198.202.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8b:10:9f:02:0c:06:ca:15:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=89a94ec5-a10e-4609-952b-ebd3f09d06aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:b9:d2:64:4f:fa:ee:fb:05:2e:52:83:5b:
                    f0:77:52:b1:ad:34:46:41:b1:f4:bf:25:7b:5b:36:
                    11:63:6c:69:26:31:f6:b5:3f:0c:bb:e8:67:4f:5c:
                    04:bf:1d:0d:e6:6f:6a:69:cd:15:7d:96:53:63:05:
                    e9:d6:84:a2:cc:b4:10:58:4d:5b:9d:2f:4e:93:bb:
                    81:95:46:e6:21:bc:d0:b7:89:45:6b:92:8d:86:83:
                    28:d0:d6:66:a5:c1:2e:50:d2:f5:85:c5:08:3e:3e:
                    46:52:f6:dd:d4:44:5f:26:26:0e:33:77:ac:59:6f:
                    7b:3e:a5:ba:19:19:c9:51:48:56:6e:47:46:37:80:
                    c5:0b:aa:7b:80:af:9b:53:a6:a2:88:66:f0:3b:af:
                    f4:36:37:75:70:3e:33:f6:b7:77:ae:52:09:e6:66:
                    1d:92:9a:4e:10:cd:94:09:26:82:96:2c:1a:1b:bd:
                    ee:e5:58:35:9b:26:18:71:76:eb:f0:ac:3b:ac:c6:
                    5d:5e:83:56:48:7e:2a:11:45:dc:40:f6:b0:78:01:
                    e0:bd:cc:b7:5a:39:6b:c7:73:7d:f2:c9:f8:e0:6f:
                    e4:be:7c:bf:d7:34:1a:7d:67:37:3e:e9:41:a1:79:
                    31:62:9b:a9:ef:8c:1a:1a:ee:17:a5:59:5a:63:1b:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:01:40:8D:CD:EF:9C:19:03:60:A1:60:2C:52:9D:39:94:6C:D6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:92:d8:29:99:6f:7f:34:4a:10:f4:7a:f6:f3:09:a5:b7:de:
         7b:29:ea:ab:c3:54:e5:01:e9:9c:52:65:06:2e:5f:90:d1:9e:
         4c:0a:69:21:4a:7a:09:e2:18:86:4e:53:1d:69:b5:70:4a:69:
         ec:93:83:c8:25:c3:56:96:df:39:52:8e:32:8c:17:50:b3:cf:
         d9:2b:21:c6:64:cc:8c:af:3b:8a:89:46:46:f5:c9:b7:66:43:
         60:c0:88:f5:d1:fd:81:30:02:09:31:d4:77:2f:2e:43:d4:70:
         21:6d:07:f1:33:fd:b8:7c:79:f9:47:18:7a:16:7a:2c:cf:2b:
         55:37:14:9a:e5:14:bb:bf:08:ff:f6:d5:1a:eb:8c:74:34:b0:
         c5:86:e8:6e:69:6c:b6:20:a5:b5:4c:78:d5:a8:80:3b:7d:08:
         b9:af:3f:88:0b:c3:65:17:ab:87:d3:56:39:46:9c:2b:e9:ee:
         be:55:d0:87:6a:aa:a4:b1:de:22:a8:f8:58:6e:78:3a:fe:ea:
         5c:bc:21:1c:34:41:32:c8:1f:bb:e2:18:89:98:f8:c0:f5:6c:
         19:8d:92:c5:06:a8:e7:c4:85:04:ea:11:66:f6:29:93:3a:ab:
         03:aa:f7:9b:72:7d:41:02:d9:22:60:64:58:62:82:b6:96:77:
         42:df:75:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIsQnwIMBsoV4CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkMWFhN2QtNzIyOS00MTZkLTlhMzktZjY0MDNjNDhj
Y2MyMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ODlhOTRlYzUtYTEwZS00NjA5LTk1MmItZWJkM2YwOWQwNmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMS50mRP+u77BS5Sg1vwd1KxrTRGQbH0vyV7
WzYRY2xpJjH2tT8Mu+hnT1wEvx0N5m9qac0VfZZTYwXp1oSizLQQWE1bnS9Ok7uB
lUbmIbzQt4lFa5KNhoMo0NZmpcEuUNL1hcUIPj5GUvbd1ERfJiYOM3esWW97PqW6
GRnJUUhWbkdGN4DFC6p7gK+bU6aiiGbwO6/0Njd1cD4z9rd3rlIJ5mYdkppOEM2U
CSaCliwaG73u5Vg1myYYcXbr8Kw7rMZdXoNWSH4qEUXcQPaweAHgvcy3Wjlrx3N9
8sn44G/kvny/1zQafWc3PulBoXkxYpup74waGu4XpVlaYxvMrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcBQI3N75wZA2ChYCxSnTmUbNZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQx
YWE3ZC03MjI5LTQxNmQtOWEzOS1mNjQwM2M0OGNjYzIvMDU1MzJlMDMtYjNhMS0z
NTI3LWJmNmEtNjRkNDFmYTA2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkMWFhN2QtNzIyOS00MTZkLTlh
MzktZjY0MDNjNDhjY2MyL2E5ZDFhYTdkLTcyMjktNDE2ZC05YTM5LWY2NDAzYzQ4
Y2NjMi5jcmwwHwYDVR0jBBgwFoAUHfQqiUpZylXpoEvSQhk5s5ZN/S8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWQxYWE3ZC03MjI5LTQxNmQtOWEzOS1mNjQw
M2M0OGNjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsrQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOS2CmZb380ShD0evbzCaW33nsp6qvDVOUB6ZxSZQYuX5DRnkwKaSFK
egniGIZOUx1ptXBKaeyTg8glw1aW3zlSjjKMF1Czz9krIcZkzIyvO4qJRkb1ybdm
Q2DAiPXR/YEwAgkx1HcvLkPUcCFtB/Ez/bh8eflHGHoWeizPK1U3FJrlFLu/CP/2
1RrrjHQ0sMWG6G5pbLYgpbVMeNWogDt9CLmvP4gLw2UXq4fTVjlGnCvp7r5V0Idq
qqSx3iKo+FhueDr+6ly8IRw0QTLIH7viGImY+MD1bBmNksUGqOfEhQTqEWb2KZM6
qwOq95tyfUEC2SJgZFhigraWd0LfdcY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:21 2026 by rpki-client