Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/17abf13c-35e9-357a-9a37-106725a7bfd3.roa
File:                     17abf13c-35e9-357a-9a37-106725a7bfd3.roa (raw, json)
Hash identifier:          rT9eAsz/1S5NYBwSzBcqjMr4idX+Ux71bzayRzVmCTI=
Subject key identifier:   94:6C:F9:18:75:09:38:0F:20:3B:C2:B0:3E:62:3B:EF:89:A5:73:BE
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584E86F4F3A5F0AB4890A5DD8D20
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/17abf13c-35e9-357a-9a37-106725a7bfd3.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     31898
IP address blocks:        198.51.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f3:a5:f0:ab:48:90:a5:dd:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=3b04dd5e-40e4-4c4e-8545-0693c8a14a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:15:84:3b:b4:ed:3b:cb:47:5d:94:92:ff:
                    99:76:1f:f9:db:91:2f:8c:80:14:51:02:64:3e:6c:
                    11:eb:7a:bb:5a:d8:91:7f:49:8a:08:b8:7e:40:d1:
                    1d:d0:0b:68:10:fc:a1:96:d6:1a:f2:6c:e7:af:3b:
                    cd:8e:82:4e:76:e6:93:c6:cd:02:bc:6c:0c:ba:91:
                    a8:f9:5a:9f:17:59:c3:90:57:f4:58:08:83:9e:55:
                    a3:ae:c1:ea:6e:70:f4:56:9b:f7:2c:5a:95:69:24:
                    60:d9:1f:53:3d:a5:a2:27:c0:13:5e:bd:8f:d1:ef:
                    b9:70:50:2d:8a:9a:ec:11:a7:5c:92:91:9b:09:a9:
                    89:3c:d9:eb:f2:9c:21:1d:ad:70:1a:ef:4c:f2:69:
                    b1:ff:43:84:6f:c9:b6:18:92:2f:2b:64:14:f2:76:
                    8e:f8:46:56:72:8a:1a:bc:aa:65:d6:56:40:54:a4:
                    3c:55:f7:b2:57:b9:b6:d2:9f:69:94:a4:cd:ea:13:
                    cd:d5:b0:71:e1:7a:4a:81:7c:41:ca:a2:dc:8c:7c:
                    32:96:0d:7b:68:cd:00:9f:6b:0d:b7:12:99:d2:ec:
                    8b:d8:b1:10:ae:85:51:b2:e7:39:71:a5:79:a8:10:
                    ec:b5:bb:2d:68:19:8a:18:0c:22:cf:04:88:03:f4:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:F9:18:75:09:38:0F:20:3B:C2:B0:3E:62:3B:EF:89:A5:73:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/17abf13c-35e9-357a-9a37-106725a7bfd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:38:48:78:86:5e:63:80:25:7e:a9:c9:e6:a2:ce:00:73:
         e7:3f:f2:31:b7:97:94:78:cb:83:b3:5c:8f:ae:0b:16:ed:7e:
         d2:47:f0:0c:20:68:8e:87:bf:66:d7:2a:fd:8b:90:33:ae:12:
         3d:4c:4a:54:ca:78:37:01:53:dc:a2:3a:e9:4f:e9:4b:15:8f:
         64:32:9f:6c:d1:db:0e:ec:6d:c1:27:26:8c:56:34:d4:0c:c3:
         27:bf:d7:cb:eb:f0:0c:7d:4c:48:33:5b:9f:ac:d6:90:2d:13:
         f7:ae:39:b9:36:63:97:c0:35:4a:66:9f:b2:2c:3a:52:0a:e9:
         e0:7a:d6:ca:65:33:2a:42:c5:c0:16:4c:3a:cd:15:78:78:2d:
         d2:05:19:27:21:f5:c9:22:96:b8:72:34:99:e7:6d:20:1d:2d:
         b6:98:ce:b8:5c:ca:d5:c1:09:bf:df:0e:fa:40:40:37:de:2b:
         0f:ca:ea:cf:88:12:1f:6f:77:73:6f:23:e4:bd:72:29:0f:c8:
         e9:53:bc:51:48:f2:c6:c8:76:6b:c5:f4:23:5b:bc:0d:1f:fc:
         82:33:a5:58:04:2a:d5:4e:fe:10:59:35:3c:d6:d6:ca:a6:02:
         9c:ff:c2:02:a8:4a:24:c5:96:cf:19:14:8d:fc:b7:9f:13:b3:
         7d:79:c4:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9POl8KtIkKXdjSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmNDEyMTUtMzAyNi00MzRkLTk2M2MtMzI3YWZkY2Y1
Y2JlMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
M2IwNGRkNWUtNDBlNC00YzRlLTg1NDUtMDY5M2M4YTE0YTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhswVhDu07TvLR12Ukv+Zdh/525EvjIAUUQJk
PmwR63q7WtiRf0mKCLh+QNEd0AtoEPyhltYa8mznrzvNjoJOduaTxs0CvGwMupGo
+VqfF1nDkFf0WAiDnlWjrsHqbnD0Vpv3LFqVaSRg2R9TPaWiJ8ATXr2P0e+5cFAt
iprsEadckpGbCamJPNnr8pwhHa1wGu9M8mmx/0OEb8m2GJIvK2QU8naO+EZWcooa
vKpl1lZAVKQ8VfeyV7m20p9plKTN6hPN1bBx4XpKgXxByqLcjHwylg17aM0An2sN
txKZ0uyL2LEQroVRsuc5caV5qBDstbstaBmKGAwizwSIA/S+5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRs+Rh1CTgPIDvCsD5iO++JpXO+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmY0
MTIxNS0zMDI2LTQzNGQtOTYzYy0zMjdhZmRjZjVjYmUvMTdhYmYxM2MtMzVlOS0z
NTdhLTlhMzctMTA2NzI1YTdiZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmNDEyMTUtMzAyNi00MzRkLTk2
M2MtMzI3YWZkY2Y1Y2JlLzFmZjQxMjE1LTMwMjYtNDM0ZC05NjNjLTMyN2FmZGNm
NWNiZS5jcmwwHwYDVR0jBBgwFoAUriL8R2Ax2c+HjOhICWv28yNxC3swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmY0MTIxNS0zMDI2LTQzNGQtOTYzYy0zMjdh
ZmRjZjVjYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnBOEh4hl5jgCV+qcnmos4Ac+c/8jG3l5R4y4OzXI+uCxbtftJH8Awg
aI6Hv2bXKv2LkDOuEj1MSlTKeDcBU9yiOulP6UsVj2Qyn2zR2w7sbcEnJoxWNNQM
wye/18vr8Ax9TEgzW5+s1pAtE/euObk2Y5fANUpmn7IsOlIK6eB61splMypCxcAW
TDrNFXh4LdIFGSch9ckilrhyNJnnbSAdLbaYzrhcytXBCb/fDvpAQDfeKw/K6s+I
Eh9vd3NvI+S9cikPyOlTvFFI8sbIdmvF9CNbvA0f/IIzpVgEKtVO/hBZNTzW1sqm
Apz/wgKoSiTFls8ZFI38t58Ts315xMY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:26 2026 by rpki-client