Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa
File:                     3597fa41-0807-3147-8c7b-86c72ed87a96.roa (raw, json)
Hash identifier:          +LKMrgK3c3jOuu2E3RxiiHPwb9Tb/dt+0G8PUmSSR7o=
Subject key identifier:   C8:AE:FE:D5:8F:9C:26:C9:E7:03:84:EE:DB:80:F9:8D:C8:D5:33:34
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F498BA6BC9ECD783BC8932B00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399672
IP address blocks:        198.1.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:a6:bc:9e:cd:78:3b:c8:93:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=58473443-e10c-43de-96b8-6c975fc4f647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:b1:94:45:22:91:38:90:94:d4:f4:26:5c:
                    78:06:be:d4:44:1b:d7:cf:ec:36:c0:90:70:8a:64:
                    4b:9e:20:55:49:c3:8c:ae:a5:ba:9d:ea:1d:b5:86:
                    50:ca:ec:d8:96:fc:ff:8a:74:32:e5:49:23:76:fb:
                    da:46:26:ae:ba:0d:4d:47:b5:a2:a4:b7:09:19:48:
                    a0:10:d0:19:95:50:72:4b:48:3a:75:73:04:fa:2a:
                    c7:74:32:b9:23:a2:68:69:2c:c0:74:d2:68:f3:f9:
                    2c:5c:7d:59:44:00:4d:06:83:66:17:27:f8:a5:4e:
                    85:36:6f:2f:ed:fa:07:7a:71:30:68:28:39:8b:4f:
                    9a:b8:5e:d8:8e:91:80:24:4d:ec:18:ec:cf:2a:fc:
                    d6:0c:a3:21:d4:f6:35:5a:bb:30:d3:d2:b3:70:4f:
                    0d:a2:5e:a1:c8:83:7c:d5:35:10:0a:66:e6:47:71:
                    e6:41:21:bf:37:31:a7:f0:f3:d2:17:0a:fb:9f:e4:
                    7b:29:4c:00:81:81:04:fd:10:92:7f:5e:9a:a5:2f:
                    b6:34:de:9b:f9:ce:7f:3a:cc:eb:3f:1f:fe:74:ee:
                    09:7d:76:14:fe:4a:21:f2:20:fa:48:78:db:3d:2b:
                    ce:09:93:51:08:ac:fb:45:a8:42:25:e0:66:de:b6:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AE:FE:D5:8F:9C:26:C9:E7:03:84:EE:DB:80:F9:8D:C8:D5:33:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:79:07:3a:a7:28:f3:b2:95:7f:41:e6:1d:69:9c:04:29:8d:
         d1:b1:80:ba:e7:7b:ac:f6:e6:c4:ee:fa:af:03:66:9d:56:c9:
         b6:0c:a4:a6:50:f5:ae:71:c7:1d:b5:95:12:e1:91:8c:6c:b3:
         9e:fa:36:4e:bc:09:5f:a5:20:5a:5f:4c:49:73:06:58:d5:ac:
         99:30:4b:81:a5:cb:90:fe:e0:29:5f:ec:13:a1:30:a9:b9:64:
         7d:38:69:07:6d:d8:d8:14:83:ab:05:1f:9b:24:ec:35:64:ab:
         29:37:79:b4:43:6d:4f:e0:27:fa:11:70:49:6a:26:f0:d9:9a:
         f2:29:52:e3:2e:71:bf:55:1b:2c:4a:61:1f:9a:62:2c:09:ba:
         1e:9e:ee:f0:3a:49:e6:57:fe:ff:ae:a3:56:c5:a4:89:bf:92:
         dc:6f:2d:40:23:e2:fc:bd:11:07:a6:44:5f:cd:c7:7c:f4:35:
         42:97:80:28:b7:77:fb:e3:5a:a0:d5:bc:e6:2a:7c:0e:ec:90:
         68:05:b8:10:db:00:dd:5b:22:83:48:e0:09:1f:1e:7f:87:68:
         03:73:33:d4:35:3f:8e:0e:38:ca:be:f0:72:26:e6:cd:b7:6f:
         37:bb:4f:1c:b6:90:4f:89:97:1c:59:c3:8a:cf:62:31:97:fc:
         4f:fd:f0:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji6a8ns14O8iTKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTg0NzM0NDMtZTEwYy00M2RlLTk2YjgtNmM5NzVmYzRmNjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVyxlEUikTiQlNT0Jlx4Br7URBvXz+w2wJBw
imRLniBVScOMrqW6neodtYZQyuzYlvz/inQy5UkjdvvaRiauug1NR7WipLcJGUig
ENAZlVByS0g6dXME+irHdDK5I6JoaSzAdNJo8/ksXH1ZRABNBoNmFyf4pU6FNm8v
7foHenEwaCg5i0+auF7YjpGAJE3sGOzPKvzWDKMh1PY1Wrsw09KzcE8Nol6hyIN8
1TUQCmbmR3HmQSG/NzGn8PPSFwr7n+R7KUwAgYEE/RCSf16apS+2NN6b+c5/Oszr
Px/+dO4JfXYU/koh8iD6SHjbPSvOCZNRCKz7RahCJeBm3ra4dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiu/tWPnCbJ5wOE7tuA+Y3I1TM0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzU5N2ZhNDEtMDgwNy0z
MTQ3LThjN2ItODZjNzJlZDg3YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJ5BzqnKPOylX9B5h1pnAQpjdGxgLrne6z25sTu+q8DZp1WybYMpKZQ
9a5xxx21lRLhkYxss576Nk68CV+lIFpfTElzBljVrJkwS4Gly5D+4Clf7BOhMKm5
ZH04aQdt2NgUg6sFH5sk7DVkqyk3ebRDbU/gJ/oRcElqJvDZmvIpUuMucb9VGyxK
YR+aYiwJuh6e7vA6SeZX/v+uo1bFpIm/ktxvLUAj4vy9EQemRF/Nx3z0NUKXgCi3
d/vjWqDVvOYqfA7skGgFuBDbAN1bIoNI4AkfHn+HaANzM9Q1P44OOMq+8HIm5s23
bze7Txy2kE+JlxxZw4rPYjGX/E/98KI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:58 2026 by rpki-client