Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/dad2c856-18b2-3f7b-b331-0ed6a5b53009.roa
File:                     dad2c856-18b2-3f7b-b331-0ed6a5b53009.roa (raw, json)
Hash identifier:          2g9UuRfSL7rjAhx8K1xfA4JDV2M8mwrloqYq0F6Wmag=
Subject key identifier:   09:E4:5A:FC:8E:E3:A4:2B:C7:4E:24:33:DA:5C:6C:C5:AC:7A:70:34
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584F4973D87EE940E57D608A8100
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/dad2c856-18b2-3f7b-b331-0ed6a5b53009.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398126
IP address blocks:        199.187.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d8:7e:e9:40:e5:7d:60:8a:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e5f140a3-c54e-49d3-a0f3-a0743d5f9306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:ec:62:79:43:0d:5a:26:a1:dd:5f:04:db:
                    87:70:5f:20:b8:fb:ba:62:f2:85:a5:ff:8b:2f:a3:
                    67:b2:9c:e4:02:72:54:1c:ea:2c:58:e0:2d:1a:ae:
                    dd:7a:11:d0:9f:8c:c6:b2:2a:5c:24:3c:1d:a8:09:
                    43:d4:38:ca:f1:3f:a8:6a:ef:40:11:24:2c:bc:05:
                    00:31:3e:ba:a0:20:2e:3d:92:10:37:e0:34:49:6c:
                    75:49:38:91:91:cb:8a:c4:1d:38:79:c8:3a:db:49:
                    47:30:14:35:83:3c:e9:60:3b:1e:f4:0b:32:80:71:
                    01:12:1a:1d:89:c3:52:6d:3b:07:e4:07:4d:52:0d:
                    3c:08:82:0c:f4:ae:a5:bf:94:33:4c:14:d5:b2:05:
                    2a:9e:1a:0b:8c:12:ed:fc:e4:1d:5a:86:55:39:2c:
                    8d:3b:cb:92:62:51:ce:a8:7f:85:88:a6:64:e0:0b:
                    90:eb:92:fc:64:1e:aa:bf:55:c7:b2:f7:54:60:93:
                    04:86:bf:73:f0:e2:c5:e4:d8:5e:54:d1:55:2a:30:
                    c3:e2:49:47:47:12:bb:4e:a7:0f:c3:a2:fc:24:0e:
                    9d:8c:91:5e:fd:89:a2:e6:bc:c4:39:55:c4:db:57:
                    d0:b1:ec:d4:c1:4d:88:dc:5a:06:95:21:9d:ca:3b:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E4:5A:FC:8E:E3:A4:2B:C7:4E:24:33:DA:5C:6C:C5:AC:7A:70:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/dad2c856-18b2-3f7b-b331-0ed6a5b53009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:98:5b:ad:83:5c:b0:59:02:7e:d5:63:0f:22:89:fb:25:
         b0:29:68:c0:45:1f:67:02:80:6e:fb:06:0f:55:42:13:de:b7:
         3d:29:12:c8:fd:ba:07:e7:b5:cb:48:89:70:a0:0a:a4:6e:1e:
         62:7e:4c:22:98:7e:90:45:3d:82:d5:a8:4c:71:5a:47:0d:a3:
         d5:ed:23:9a:49:34:5c:19:91:46:56:89:cf:c9:49:68:2e:d3:
         68:fb:5b:58:13:5f:39:84:3c:61:22:74:be:2e:51:3e:61:57:
         97:46:58:1b:b1:0c:84:f2:e3:dc:3c:3b:66:8c:7a:ae:ea:3d:
         96:1a:f5:f0:70:34:2f:83:a2:c5:9e:cb:da:7d:a6:3f:2f:b3:
         cf:10:eb:e1:f9:05:c8:d6:6e:cf:4e:b0:89:28:c4:d4:8c:e5:
         46:a5:ed:91:fa:58:3c:ef:30:c3:79:d8:4e:bd:3b:7e:09:4d:
         da:04:5c:fa:cb:eb:1d:a8:14:05:1d:1b:f2:d9:9b:c6:2a:40:
         52:88:5c:d8:3b:bd:e0:fe:f8:a8:2a:0b:ad:85:2c:5f:bd:67:
         00:70:a1:0f:2e:fb:cc:85:7d:42:bc:66:aa:89:07:5a:ba:3f:
         7d:18:f8:b8:bb:87:d0:84:37:a4:bb:5b:ac:ee:c6:9f:4a:f2:
         f2:0c:b3:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9h+6UDlfWCKgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTVmMTQwYTMtYzU0ZS00OWQzLWEwZjMtYTA3NDNkNWY5MzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj3sYnlDDVomod1fBNuHcF8guPu6YvKFpf+L
L6NnspzkAnJUHOosWOAtGq7dehHQn4zGsipcJDwdqAlD1DjK8T+oau9AESQsvAUA
MT66oCAuPZIQN+A0SWx1STiRkcuKxB04ecg620lHMBQ1gzzpYDse9AsygHEBEhod
icNSbTsH5AdNUg08CIIM9K6lv5QzTBTVsgUqnhoLjBLt/OQdWoZVOSyNO8uSYlHO
qH+FiKZk4AuQ65L8ZB6qv1XHsvdUYJMEhr9z8OLF5NheVNFVKjDD4klHRxK7TqcP
w6L8JA6djJFe/Ymi5rzEOVXE21fQsezUwU2I3FoGlSGdyjsc1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnkWvyO46Qrx04kM9pcbMWsenA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvZGFkMmM4NTYtMThiMi0z
ZjdiLWIzMzEtMGVkNmE1YjUzMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDlmFutg1ywWQJ+1WMPIon7JbApaMBFH2cCgG77Bg9VQhPetz0pEsj9
ugfntctIiXCgCqRuHmJ+TCKYfpBFPYLVqExxWkcNo9XtI5pJNFwZkUZWic/JSWgu
02j7W1gTXzmEPGEidL4uUT5hV5dGWBuxDITy49w8O2aMeq7qPZYa9fBwNC+DosWe
y9p9pj8vs88Q6+H5BcjWbs9OsIkoxNSM5Ual7ZH6WDzvMMN52E69O34JTdoEXPrL
6x2oFAUdG/LZm8YqQFKIXNg7veD++KgqC62FLF+9ZwBwoQ8u+8yFfUK8ZqqJB1q6
P30Y+Li7h9CEN6S7W6zuxp9K8vIMs2M=
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:56:54 2026 by rpki-client