Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/94b45108-c171-3222-bd94-b2635084b385.roa
File:                     94b45108-c171-3222-bd94-b2635084b385.roa (raw, json)
Hash identifier:          2IeuHxGoFw3i74ovvoX5wfVA98sQ6MT088gkuhvWP+s=
Subject key identifier:   30:01:A3:5C:29:C5:FC:69:8E:C5:21:C3:0D:03:7A:AA:65:9D:24:56
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584F1DAC12D961A12864A7638680
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/94b45108-c171-3222-bd94-b2635084b385.roa
Signing time:             Wed 09 Sep 2026 08:40:36 +0000
ROA not before:           Wed 09 Sep 2026 08:40:36 +0000
ROA not after:            Tue 08 Dec 2026 09:40:36 +0000
asID:                     36692
IP address blocks:        198.41.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1d:ac:12:d9:61:a1:28:64:a7:63:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Sep  9 08:40:36 2026 GMT
            Not After : Dec  8 09:40:36 2026 GMT
        Subject: CN=4d8235fc-ddbb-4838-95f7-7ea951281dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:e8:37:ab:16:db:5c:88:38:e7:8c:1a:f3:
                    ce:01:c9:94:60:6c:ca:22:b2:5b:6d:52:8f:06:c1:
                    00:5f:2e:cb:4e:4d:25:e0:fe:6f:ea:a8:3c:d7:dd:
                    fd:d9:cf:30:b1:78:e9:7e:95:b7:2a:69:54:e5:71:
                    22:63:ff:d2:1f:8b:71:82:11:e1:22:23:fa:c3:ec:
                    34:8b:dc:7a:14:47:07:3b:66:99:83:26:ae:f2:a4:
                    49:7d:f6:76:a7:bf:d9:cb:99:e9:05:25:c4:a2:20:
                    f1:bc:20:b6:97:e4:8c:a7:98:bd:dc:ca:ce:47:28:
                    03:a2:2f:d4:dc:ac:a3:ec:8d:0e:f5:31:27:50:f7:
                    84:d1:43:2d:7e:08:4c:6b:f1:f2:13:71:d1:b1:8c:
                    1c:29:d9:6d:29:11:33:a6:b1:d2:ca:b9:07:d8:f3:
                    21:6f:f6:c0:82:ad:99:3c:bb:56:54:55:6c:4d:dd:
                    53:21:42:3c:ba:d2:a0:32:52:b6:81:2d:58:4c:34:
                    d4:89:1b:5f:89:2f:af:ce:53:6f:93:c6:dc:1e:25:
                    81:6e:f7:38:b9:64:46:26:dd:b3:5a:06:20:06:9d:
                    92:07:39:20:07:33:7e:d7:27:c7:cf:16:b1:65:12:
                    2e:31:cc:ed:f4:f3:48:76:ab:91:b1:96:a1:e0:a4:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:A3:5C:29:C5:FC:69:8E:C5:21:C3:0D:03:7A:AA:65:9D:24:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/94b45108-c171-3222-bd94-b2635084b385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f3:69:48:9f:3b:34:33:87:fb:52:39:c9:01:0c:7c:b1:a7:
         5d:24:b5:7d:69:8e:1a:6f:50:98:51:d6:a3:1f:3c:50:f6:98:
         8e:0e:1b:80:e8:e8:44:b2:3f:55:5a:bf:12:9c:f9:94:16:44:
         a1:15:bb:44:3a:1f:df:ea:6b:83:74:28:62:8a:63:e0:bd:39:
         18:ff:bc:37:c9:81:93:16:a8:83:ec:02:1f:e1:55:01:3e:ef:
         fa:e4:2e:dd:c1:36:f8:1e:37:9e:2f:78:f1:09:7f:e6:44:99:
         77:38:d2:8a:86:6d:61:38:10:78:01:6b:d4:c7:d0:ed:11:50:
         bc:f6:b5:7a:19:5d:87:5d:69:8b:c2:74:e4:97:5a:40:f6:51:
         dc:5e:c1:b7:05:bd:b3:06:d5:93:60:89:12:0c:c5:d4:ac:58:
         f4:d9:72:24:06:61:db:b3:e1:de:e4:3e:a2:8b:76:b2:77:2c:
         46:e3:60:c3:38:89:e2:cd:0b:31:c4:43:05:39:7e:93:93:3c:
         1f:04:75:93:cb:05:36:88:2c:1a:ea:6e:83:16:9a:5c:af:fc:
         e6:93:e8:83:18:92:56:39:6d:d8:dd:87:1f:bb:5b:7e:6a:29:
         55:ca:cd:59:de:fd:be:4a:4e:b3:9c:d3:f1:a0:cd:1f:cc:b3:
         cc:11:a3:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8drBLZYaEoZKdjhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTI2MDkwOTA4NDAzNloXDTI2MTIwODA5NDAzNlowLzEtMCsGA1UEAxMk
NGQ4MjM1ZmMtZGRiYi00ODM4LTk1ZjctN2VhOTUxMjgxZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjoN6sW21yIOOeMGvPOAcmUYGzKIrJbbVKP
BsEAXy7LTk0l4P5v6qg819392c8wsXjpfpW3KmlU5XEiY//SH4txghHhIiP6w+w0
i9x6FEcHO2aZgyau8qRJffZ2p7/Zy5npBSXEoiDxvCC2l+SMp5i93MrORygDoi/U
3Kyj7I0O9TEnUPeE0UMtfghMa/HyE3HRsYwcKdltKREzprHSyrkH2PMhb/bAgq2Z
PLtWVFVsTd1TIUI8utKgMlK2gS1YTDTUiRtfiS+vzlNvk8bcHiWBbvc4uWRGJt2z
WgYgBp2SBzkgBzN+1yfHzxaxZRIuMczt9PNIdquRsZah4KT22QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDABo1wpxfxpjsUhww0DeqplnSRWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvOTRiNDUxMDgtYzE3MS0z
MjIyLWJkOTQtYjI2MzUwODRiMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3zaUifOzQzh/tSOckBDHyxp10ktX1pjhpvUJhR1qMfPFD2mI4OG4Do
6ESyP1VavxKc+ZQWRKEVu0Q6H9/qa4N0KGKKY+C9ORj/vDfJgZMWqIPsAh/hVQE+
7/rkLt3BNvgeN54vePEJf+ZEmXc40oqGbWE4EHgBa9TH0O0RULz2tXoZXYddaYvC
dOSXWkD2UdxewbcFvbMG1ZNgiRIMxdSsWPTZciQGYduz4d7kPqKLdrJ3LEbjYMM4
ieLNCzHEQwU5fpOTPB8EdZPLBTaILBrqboMWmlyv/OaT6IMYklY5bdjdhx+7W35q
KVXKzVne/b5KTrOc0/GgzR/Ms8wRoyQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:49:47 2026 by rpki-client