Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d43a2dd-9e36-31b7-93aa-951a7933eb9a.roa
File:                     2d43a2dd-9e36-31b7-93aa-951a7933eb9a.roa (raw, json)
Hash identifier:          Kh0WsHHU3Sbb3qVmBqtAom0XnT5l+hgEeBBzT2aFpOY=
Subject key identifier:   7E:57:29:F3:BA:E9:B9:BF:BC:A7:6D:42:04:0F:4D:EB:40:D3:12:FF
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584EF2E76E55B0694F9E08C31630
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d43a2dd-9e36-31b7-93aa-951a7933eb9a.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     19198
IP address blocks:        198.183.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6e:55:b0:69:4f:9e:08:c3:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b6ba7664-0398-47c3-9a4f-7ab5ee6ce93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:d9:ce:4b:c9:e6:77:da:6a:58:be:de:94:
                    bb:c0:c1:97:63:99:79:9f:a3:50:36:e7:be:c7:f4:
                    70:de:fc:d2:83:f3:03:c9:60:2b:99:95:5e:fb:c7:
                    66:4d:ea:db:ce:38:19:dc:29:b8:41:98:d8:c8:a6:
                    08:46:f8:17:58:ce:90:87:13:ab:b6:01:f0:99:9d:
                    c8:6a:6e:dc:de:0d:58:26:e9:e8:d7:db:e3:72:9b:
                    1d:68:02:0e:be:09:08:e8:bc:a9:70:4f:a5:f1:83:
                    a9:fe:1f:ef:7c:ac:35:a7:09:8b:9e:d3:a3:35:88:
                    f2:7a:6d:9c:c2:5b:a6:9b:cd:84:1e:6f:45:0e:3f:
                    ee:99:7b:61:ba:0d:fb:99:ba:72:86:de:79:40:42:
                    71:cf:fa:87:ec:a7:84:87:0d:f9:48:0f:65:13:6a:
                    1a:80:8d:c7:9f:9d:99:8c:c1:5e:20:f2:f7:38:14:
                    9e:15:02:47:78:c6:45:7f:29:e9:b2:38:24:06:98:
                    93:bd:b6:fa:f7:3c:7a:f7:9f:34:8e:67:29:f4:a4:
                    e3:45:7f:be:2f:91:f0:c6:d4:c8:5b:8d:02:80:a9:
                    3e:5c:76:70:5a:77:68:9e:78:3c:f5:46:bd:48:6c:
                    34:df:87:17:0f:43:77:62:94:a0:dd:66:91:7b:26:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:29:F3:BA:E9:B9:BF:BC:A7:6D:42:04:0F:4D:EB:40:D3:12:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d43a2dd-9e36-31b7-93aa-951a7933eb9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.183.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c8:79:ca:50:bc:6c:f5:37:43:a6:61:d6:7f:22:2e:3c:3b:
         92:56:ce:4b:ed:0b:74:35:62:60:21:d6:62:fe:bc:7a:b4:af:
         c4:a8:d7:ea:71:0e:9a:94:8c:01:85:4d:e1:d3:c3:6f:a5:22:
         56:fb:54:54:20:d1:7a:75:88:26:96:f2:47:4d:49:2a:bc:04:
         78:56:b5:c5:3b:ca:68:18:46:7b:f7:f0:5c:93:81:f1:61:a8:
         81:95:00:a7:da:c7:8b:c2:69:cf:f9:59:6c:8b:fe:ae:d5:40:
         5b:2e:0d:79:fb:6f:ff:ef:11:57:c5:b6:0c:0b:2e:ce:62:a2:
         83:69:6f:e5:84:3a:b4:06:50:58:b2:22:ce:f1:5c:5c:f7:4b:
         1b:87:74:03:f3:e8:99:e7:95:b3:75:70:96:87:97:0a:40:a7:
         47:d5:e3:61:86:16:db:16:2c:1f:68:03:bc:bd:62:9e:1a:8c:
         7b:17:5f:58:09:df:74:f9:c8:db:8f:68:ce:40:56:5e:64:d7:
         9b:d5:d0:06:ec:e3:2d:99:35:82:dc:6e:53:19:fa:aa:26:84:
         c9:27:d7:d3:b7:1f:70:8c:54:bb:2b:1a:dd:bb:84:0a:4d:4a:
         91:1b:ff:f8:61:5e:09:83:ed:24:7e:0c:2f:c7:42:6c:d3:fb:
         37:c2:eb:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y525VsGlPngjDFjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1
ZjNkMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk
YjZiYTc2NjQtMDM5OC00N2MzLTlhNGYtN2FiNWVlNmNlOTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunLZzkvJ5nfaali+3pS7wMGXY5l5n6NQNue+
x/Rw3vzSg/MDyWArmZVe+8dmTerbzjgZ3Cm4QZjYyKYIRvgXWM6QhxOrtgHwmZ3I
am7c3g1YJuno19vjcpsdaAIOvgkI6LypcE+l8YOp/h/vfKw1pwmLntOjNYjyem2c
wlumm82EHm9FDj/umXthug37mbpyht55QEJxz/qH7KeEhw35SA9lE2oagI3Hn52Z
jMFeIPL3OBSeFQJHeMZFfynpsjgkBpiTvbb69zx69580jmcp9KTjRX++L5HwxtTI
W40CgKk+XHZwWndonng89Ua9SGw034cXD0N3YpSg3WaReyblrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5XKfO66bm/vKdtQgQPTetA0xL/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky
NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMmQ0M2EyZGQtOWUzNi0z
MWI3LTkzYWEtOTUxYTc5MzNlYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0
NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3
NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm
NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrfiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7IecpQvGz1N0OmYdZ/Ii48O5JWzkvtC3Q1YmAh1mL+vHq0r8So1+px
DpqUjAGFTeHTw2+lIlb7VFQg0Xp1iCaW8kdNSSq8BHhWtcU7ymgYRnv38FyTgfFh
qIGVAKfax4vCac/5WWyL/q7VQFsuDXn7b//vEVfFtgwLLs5iooNpb+WEOrQGUFiy
Is7xXFz3SxuHdAPz6JnnlbN1cJaHlwpAp0fV42GGFtsWLB9oA7y9Yp4ajHsXX1gJ
33T5yNuPaM5AVl5k15vV0Abs4y2ZNYLcblMZ+qomhMkn19O3H3CMVLsrGt27hApN
SpEb//hhXgmD7SR+DC/HQmzT+zfC6xQ=
-----END CERTIFICATE-----
Generated at Sat Oct 10 07:49:51 2026 by rpki-client