Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa
File:                     72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa (raw, json)
Hash identifier:          GtzWTsl04PCNP6f1kFPfr+A/KvgTF4bKRCvlHr6GQgk=
Subject key identifier:   A1:2F:1C:D3:3F:43:7C:E3:55:84:AB:63:B8:4B:17:53:2B:56:6E:E6
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584ED001E1082DE53B503AD3910A
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        198.251.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e1:08:2d:e5:3b:50:3a:d3:91:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=4ce9a3df-d441-4ae4-97f3-28f476bbbb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:59:9b:f9:c5:2f:49:56:26:eb:60:cc:d8:c9:
                    a0:36:3c:fc:74:10:b0:52:80:3e:44:94:08:8d:aa:
                    17:e1:19:ca:ea:89:e0:40:e3:ba:87:5a:2a:a1:48:
                    b4:45:95:89:96:13:f8:ee:e5:16:b7:aa:14:96:e4:
                    48:75:82:47:7e:66:d6:ce:65:06:e2:1c:87:51:54:
                    38:f5:10:b1:9a:fc:ac:e1:a7:44:af:d0:fc:da:14:
                    12:6f:53:72:32:dd:13:6b:49:2f:1b:88:19:7c:26:
                    48:ff:0c:93:db:e8:b9:4a:45:58:ab:8f:26:f2:be:
                    7f:6f:9a:b0:1d:9f:e9:60:03:e2:84:f1:4f:0a:9b:
                    78:d8:7c:06:27:65:9b:6f:0e:98:67:d1:f2:73:32:
                    fa:c0:95:d9:d5:1a:69:88:58:f8:a5:7a:3c:ed:1e:
                    ee:b3:d3:2f:6e:cc:13:7b:d2:93:0e:a4:41:ff:ef:
                    a9:2b:81:36:7b:86:32:11:0f:1a:fb:ec:b1:d5:98:
                    b7:48:2d:b0:4f:5a:11:8a:e7:d5:fb:3c:95:e2:dd:
                    2e:8e:f7:e9:f8:70:84:f9:41:fa:e1:b3:66:39:00:
                    26:d3:b4:a1:5f:d5:93:8c:c2:fa:55:2a:57:6f:e6:
                    94:cb:ab:8b:99:72:f3:45:d4:20:7f:07:9c:7b:20:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:1C:D3:3F:43:7C:E3:55:84:AB:63:B8:4B:17:53:2B:56:6E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:f3:0b:44:3e:e3:bc:8e:3f:70:bc:ec:68:d3:48:f8:53:
         5f:f1:8c:16:8c:fa:6c:47:08:f4:5a:95:df:e8:a1:6e:9e:3b:
         be:15:74:1f:93:4c:10:e3:ab:e0:e3:9e:c5:c3:00:57:f0:0f:
         3a:d3:0e:05:62:95:d7:e0:de:78:3a:a4:aa:69:5b:07:58:36:
         12:1d:24:d9:7a:e4:95:e1:ac:4f:18:bc:58:95:38:bd:f4:3d:
         a2:60:41:45:bd:e3:0b:87:57:09:b2:9a:3a:4b:58:08:77:f3:
         e5:df:4b:fa:7b:2d:95:95:8d:f0:45:22:12:4b:72:ff:dd:51:
         48:8b:6e:a3:73:8f:a2:9f:fe:6b:71:36:39:cf:42:77:e0:86:
         fb:bd:1b:df:c5:df:42:38:0e:c2:0e:96:79:d2:71:b7:d1:43:
         fc:c7:3e:fa:ce:f8:3c:61:53:21:3e:ca:b3:e4:2b:3a:31:6d:
         fa:5f:f1:21:05:23:59:fa:a7:c2:77:c7:aa:4a:91:e8:df:fb:
         c7:3c:62:74:14:27:1d:b6:96:d4:57:01:14:f5:94:14:a6:da:
         3a:07:ab:7b:f8:f4:ce:14:a3:f8:98:46:d0:18:0d:de:ee:ec:
         8f:fd:9e:cb:3c:8e:1f:dd:92:33:43:31:cc:75:74:d3:8a:4a:
         85:22:92:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeEILeU7UDrTkQowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NGNlOWEzZGYtZDQ0MS00YWU0LTk3ZjMtMjhmNDc2YmJiYjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Vmb+cUvSVYm62DM2MmgNjz8dBCwUoA+RJQI
jaoX4RnK6ongQOO6h1oqoUi0RZWJlhP47uUWt6oUluRIdYJHfmbWzmUG4hyHUVQ4
9RCxmvys4adEr9D82hQSb1NyMt0Ta0kvG4gZfCZI/wyT2+i5SkVYq48m8r5/b5qw
HZ/pYAPihPFPCpt42HwGJ2Wbbw6YZ9HyczL6wJXZ1RppiFj4pXo87R7us9MvbswT
e9KTDqRB/++pK4E2e4YyEQ8a++yx1Zi3SC2wT1oRiufV+zyV4t0ujvfp+HCE+UH6
4bNmOQAm07ShX9WTjML6VSpXb+aUy6uLmXLzRdQgfweceyCdNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEvHNM/Q3zjVYSrY7hLF1MrVm7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNzJhMjljYjMtOTVmMi0z
YWYzLWI5ZDItYjRlNjZlZGEzMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxvvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLu8wtEPuO8jj9wvOxo00j4U1/xjBaM+mxHCPRald/ooW6eO74VdB+T
TBDjq+DjnsXDAFfwDzrTDgVildfg3ng6pKppWwdYNhIdJNl65JXhrE8YvFiVOL30
PaJgQUW94wuHVwmymjpLWAh38+XfS/p7LZWVjfBFIhJLcv/dUUiLbqNzj6Kf/mtx
NjnPQnfghvu9G9/F30I4DsIOlnnScbfRQ/zHPvrO+DxhUyE+yrPkKzoxbfpf8SEF
I1n6p8J3x6pKkejf+8c8YnQUJx22ltRXART1lBSm2joHq3v49M4Uo/iYRtAYDd7u
7I/9nss8jh/dkjNDMcx1dNOKSoUikhY=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:44 2026 by rpki-client