Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
File:                     3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa (raw, json)
Hash identifier:          rSreadKSp4H57rv1qAmpGM6i1+/rHMxhw3t5xQIivAQ=
Subject key identifier:   96:6D:14:B0:8F:BC:11:84:C9:A4:84:0B:78:69:78:01:D8:28:33:36
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F4328584D4A8F9CC9076DCDA5FE4F1DE0
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:9c:c9:07:6d:cd:a5:fe:4f:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=132ac0f1-658c-4799-8ded-0e7f65619ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:0e:77:d4:6e:37:9c:02:5f:76:32:79:db:
                    6a:eb:01:ca:f4:4f:10:4c:ac:96:00:26:eb:81:87:
                    c4:5d:38:1d:24:ad:65:1d:0c:0e:6a:28:fc:2b:0d:
                    47:6a:de:9f:97:b3:53:ea:3d:8e:9d:c2:16:4b:1e:
                    48:24:da:04:e6:76:17:d3:20:33:0c:13:70:11:00:
                    51:a4:ea:ac:e1:0c:e4:64:34:4a:4a:77:06:52:d0:
                    c3:18:25:b7:82:9a:8f:f0:08:30:c6:35:f8:47:96:
                    fb:78:84:95:cf:81:fa:c4:ae:63:ff:a6:12:f1:a9:
                    79:95:4b:62:5e:54:0f:ad:75:b2:49:9e:4f:a2:26:
                    86:3a:31:45:bc:6b:ab:4b:a7:a6:c6:b5:7e:f2:33:
                    19:3d:b6:88:5f:a5:4c:df:d7:ae:52:0b:5c:86:39:
                    39:14:04:08:de:eb:fb:85:9b:43:c1:f7:35:c7:27:
                    8a:89:a8:3e:4e:89:a8:9e:0e:71:c7:e3:c9:5e:db:
                    a2:d7:da:1a:bc:53:0a:29:12:8a:db:7c:1c:58:0c:
                    37:eb:d5:d5:a6:88:b4:73:87:e1:24:d9:43:25:9e:
                    90:d5:63:b7:15:95:f1:07:f0:a5:61:64:c5:d4:c4:
                    fc:2c:88:f0:71:c0:4f:a9:8d:98:df:1d:1e:40:f3:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6D:14:B0:8F:BC:11:84:C9:A4:84:0B:78:69:78:01:D8:28:33:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:39:0a:44:95:dd:7f:f7:62:ee:ab:fa:c6:8e:49:40:f3:17:
         70:f3:27:18:a1:56:66:ae:ac:6b:8a:bb:a9:a5:1a:e7:28:4f:
         d6:1e:90:1f:b0:37:9d:e8:e9:6e:d6:38:6d:d6:0f:53:98:a8:
         1b:81:0f:5c:a6:b5:bc:2e:a7:66:c3:9e:44:45:a5:04:3d:2e:
         7b:13:35:70:53:0a:77:c8:76:3f:8f:22:51:6d:1d:14:b3:f0:
         ba:62:ce:db:7a:15:fb:44:aa:2f:d5:a4:98:dd:62:b9:83:3a:
         07:3f:bf:f1:9f:27:72:91:01:14:1e:f5:ad:ed:06:a0:c6:6f:
         d1:aa:b5:8b:f1:95:82:a7:60:17:87:a9:7d:b2:e9:61:4c:4a:
         31:27:5f:a5:70:9b:77:d3:3e:44:01:23:e1:53:50:db:d9:72:
         46:52:d0:1a:fe:5c:29:ea:6d:a5:18:af:3e:89:76:0f:19:db:
         ef:38:d5:ec:d0:9c:81:fb:9f:4f:9d:1e:aa:52:39:23:79:d5:
         b3:45:8e:e6:c9:33:4a:df:ea:2b:1e:6a:fa:ec:6f:12:3a:3e:
         22:03:80:05:78:94:86:72:00:d9:db:c1:3e:76:63:14:39:02:
         96:c1:4d:7f:c6:d2:62:95:00:7b:ef:1e:ce:68:bd:07:06:98:
         f6:c4:10:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5zJB23Npf5PHeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjczNjRjOTYtOTQ3Yi00MTM2LWI2OTctYzhjZmY1OTFh
OGVjMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
MTMyYWMwZjEtNjU4Yy00Nzk5LThkZWQtMGU3ZjY1NjE5YWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7IOd9RuN5wCX3Yyedtq6wHK9E8QTKyWACbr
gYfEXTgdJK1lHQwOaij8Kw1Hat6fl7NT6j2OncIWSx5IJNoE5nYX0yAzDBNwEQBR
pOqs4QzkZDRKSncGUtDDGCW3gpqP8AgwxjX4R5b7eISVz4H6xK5j/6YS8al5lUti
XlQPrXWySZ5PoiaGOjFFvGurS6emxrV+8jMZPbaIX6VM39euUgtchjk5FAQI3uv7
hZtDwfc1xyeKiag+Tomong5xx+PJXtui19oavFMKKRKK23wcWAw369XVpoi0c4fh
JNlDJZ6Q1WO3FZXxB/ClYWTF1MT8LIjwccBPqY2Y3x0eQPM5IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZtFLCPvBGEyaSEC3hpeAHYKDM2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzM2
NGM5Ni05NDdiLTQxMzYtYjY5Ny1jOGNmZjU5MWE4ZWMvM2FlOWIwNGItMmE1OC0z
YWVkLThiNzEtNmQ1OWMxYTFiOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjczNjRjOTYtOTQ3Yi00MTM2LWI2
OTctYzhjZmY1OTFhOGVjL2I3MzY0Yzk2LTk0N2ItNDEzNi1iNjk3LWM4Y2ZmNTkx
YThlYy5jcmwwHwYDVR0jBBgwFoAUlWZcczTNKX9q+NHxnB/WwkNtNZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzM2NGM5Ni05NDdiLTQxMzYtYjY5Ny1jOGNm
ZjU5MWE4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxr4OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg5CkSV3X/3Yu6r+saOSUDzF3DzJxihVmaurGuKu6mlGucoT9YekB+w
N53o6W7WOG3WD1OYqBuBD1ymtbwup2bDnkRFpQQ9LnsTNXBTCnfIdj+PIlFtHRSz
8Lpiztt6FftEqi/VpJjdYrmDOgc/v/GfJ3KRARQe9a3tBqDGb9GqtYvxlYKnYBeH
qX2y6WFMSjEnX6Vwm3fTPkQBI+FTUNvZckZS0Br+XCnqbaUYrz6Jdg8Z2+841ezQ
nIH7n0+dHqpSOSN51bNFjubJM0rf6iseavrsbxI6PiIDgAV4lIZyANnbwT52YxQ5
ApbBTX/G0mKVAHvvHs5ovQcGmPbEEME=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:25 2026 by rpki-client