Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
File:                     229e29fd-2ef9-3a98-a347-d8b492c6c819.roa (raw, json)
Hash identifier:          hELT598LjsbdCy2i2HSftSeCtmtpmwluRTLQSWU+FmQ=
Subject key identifier:   35:B3:7B:30:34:39:15:89:A0:63:45:E6:E0:76:E3:80:C6:55:CC:CB
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584D492A603620C9AD5373FD0E00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     2906
IP address blocks:        198.38.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:60:36:20:c9:ad:53:73:fd:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=6b5789d7-929f-4da5-914e-e0867486fa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:59:3d:b9:e3:e8:e1:d8:9e:8e:62:9e:b3:
                    53:e9:b9:db:48:fd:fc:fe:86:56:a6:56:77:de:38:
                    c1:f1:2c:27:a8:a3:1a:91:47:21:e9:e8:9a:09:54:
                    75:d9:61:2c:b9:38:32:90:a8:d7:71:d6:62:02:d0:
                    f8:4b:4f:08:f1:29:2c:17:b1:41:c1:c3:e3:6f:8b:
                    9f:78:e9:7c:3f:1d:e0:e2:98:3e:50:28:28:f8:b8:
                    71:41:63:fb:70:8b:a8:7a:c3:42:18:3a:fa:37:42:
                    44:51:c6:04:5f:94:aa:13:b9:f6:5c:0e:71:de:af:
                    94:63:3e:62:bd:53:02:d2:b6:44:af:f0:77:93:83:
                    c3:ca:ee:56:d1:51:b7:cd:00:58:da:c5:1f:ef:9b:
                    fc:e2:bd:19:c3:fd:30:c4:8d:87:f5:45:33:50:88:
                    1b:2d:8f:34:ea:70:d9:28:11:68:89:69:bf:8f:e3:
                    77:64:cb:03:35:27:ec:19:e1:d3:05:8b:56:4d:35:
                    86:86:9e:ed:4f:76:7e:8b:36:a0:b1:74:c5:5a:5a:
                    bc:e6:bc:c6:82:78:9e:52:28:63:53:90:34:dc:c5:
                    c1:55:8c:31:6d:51:d2:e0:aa:a2:ef:ca:07:81:90:
                    2b:fc:62:ff:55:ee:23:d2:2c:e0:93:fe:91:63:95:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B3:7B:30:34:39:15:89:A0:63:45:E6:E0:76:E3:80:C6:55:CC:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:82:54:3b:f4:9b:2d:13:a6:02:ad:de:f5:db:08:ff:b4:
         96:94:a4:70:56:35:ad:7c:db:81:7e:51:82:17:dc:d7:6d:a3:
         d7:b1:95:6b:92:de:37:a6:df:0d:72:c1:3c:e6:45:14:94:66:
         d5:cc:4e:e0:fe:40:79:fe:2f:36:7b:10:7a:de:65:5b:e6:b4:
         ef:2a:2a:b6:cf:a7:2f:8c:36:7c:71:4c:4d:7e:7c:7d:57:ec:
         5b:e4:db:d5:bd:04:8b:46:32:12:33:0e:fb:93:15:ee:da:f4:
         c5:a7:cc:d5:96:9d:a0:3b:fa:91:02:a6:a1:74:c0:da:14:48:
         fe:1f:3d:8a:e2:bd:36:ab:2c:d0:a3:3b:68:1f:bb:f2:96:7c:
         bc:48:c3:b2:35:79:26:dc:4f:23:6f:fb:de:9f:b1:15:e7:6c:
         e1:99:4a:ad:17:b2:aa:b9:61:d3:bb:9c:fe:19:9f:5f:9e:58:
         bc:6e:e2:21:ae:b6:8f:25:56:90:eb:ab:32:a6:d6:0e:7a:4a:
         e8:cf:12:dd:8e:a8:8d:fd:37:8d:52:b1:0a:9f:f6:d2:b3:31:
         a7:61:3d:c9:01:9d:1d:8d:8e:a8:f4:d4:a2:74:25:ee:be:2e:
         32:a9:25:81:08:2a:af:22:fb:8c:85:9c:04:73:73:fd:e6:de:
         85:12:98:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmA2IMmtU3P9DgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl
NTdjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NmI1Nzg5ZDctOTI5Zi00ZGE1LTkxNGUtZTA4Njc0ODZmYTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoNZPbnj6OHYno5inrNT6bnbSP38/oZWplZ3
3jjB8SwnqKMakUch6eiaCVR12WEsuTgykKjXcdZiAtD4S08I8SksF7FBwcPjb4uf
eOl8Px3g4pg+UCgo+LhxQWP7cIuoesNCGDr6N0JEUcYEX5SqE7n2XA5x3q+UYz5i
vVMC0rZEr/B3k4PDyu5W0VG3zQBY2sUf75v84r0Zw/0wxI2H9UUzUIgbLY806nDZ
KBFoiWm/j+N3ZMsDNSfsGeHTBYtWTTWGhp7tT3Z+izagsXTFWlq85rzGgnieUihj
U5A03MXBVYwxbVHS4Kqi78oHgZAr/GL/Ve4j0izgk/6RY5VzmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWzezA0ORWJoGNF5uB244DGVczLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2
NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMjI5ZTI5ZmQtMmVmOS0z
YTk4LWEzNDctZDhiNDkyYzZjODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk
Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2
NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxiZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTsglQ79JstE6YCrd712wj/tJaUpHBWNa1824F+UYIX3Ndto9exlWuS
3jem3w1ywTzmRRSUZtXMTuD+QHn+LzZ7EHreZVvmtO8qKrbPpy+MNnxxTE1+fH1X
7Fvk29W9BItGMhIzDvuTFe7a9MWnzNWWnaA7+pECpqF0wNoUSP4fPYrivTarLNCj
O2gfu/KWfLxIw7I1eSbcTyNv+96fsRXnbOGZSq0Xsqq5YdO7nP4Zn1+eWLxu4iGu
to8lVpDrqzKm1g56SujPEt2OqI39N41SsQqf9tKzMadhPckBnR2Njqj01KJ0Je6+
LjKpJYEIKq8i+4yFnARzc/3m3oUSmJ4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:35 2026 by rpki-client