Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/fd91d8c4-f6d5-3288-908f-ed60beee3afc.roa
File:                     fd91d8c4-f6d5-3288-908f-ed60beee3afc.roa (raw, json)
Hash identifier:          Tr+vtYVJeMdQ7XfK0Z2FjQ41YuTk+kTakvH7bsJ+cQk=
Subject key identifier:   C9:08:43:96:36:86:81:70:54:16:19:66:58:76:D5:2E:01:73:34:93
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584EBC76FF21F104BBE5B0328180
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/fd91d8c4-f6d5-3288-908f-ed60beee3afc.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     46606
IP address blocks:        198.20.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:76:ff:21:f1:04:bb:e5:b0:32:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=f89a473b-517d-4b36-aba8-5cf60ef4b8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:20:1b:45:9f:79:a8:77:73:40:bd:8b:4b:
                    be:ac:a8:92:10:23:5a:24:6b:b9:86:b2:8a:7a:db:
                    37:ab:3f:d1:46:27:9c:5b:2b:a7:9f:c8:41:59:13:
                    53:93:27:79:98:79:8d:a5:a3:f5:a7:de:fb:35:c6:
                    50:cc:aa:33:c1:95:17:9f:72:39:28:04:5f:8e:ad:
                    4c:6a:aa:8d:0a:c0:f2:3e:89:69:c5:a5:63:09:88:
                    e9:47:4f:b0:cc:89:7b:b9:c9:1a:55:97:93:6c:b9:
                    1d:4d:f7:ef:d2:a7:f8:2a:32:78:23:65:56:12:90:
                    7c:05:a3:ae:7f:a5:a2:ff:93:2d:6f:af:55:21:d9:
                    b2:aa:ae:aa:72:b1:12:14:66:e9:20:c7:14:2d:96:
                    53:21:f3:fc:28:b4:f5:61:ba:0f:96:94:6c:fa:bd:
                    65:53:c4:a4:40:ec:7d:ae:0e:a7:d5:aa:29:54:64:
                    0b:8a:85:63:6f:43:c8:96:43:6f:cc:57:f6:24:14:
                    1a:89:41:43:1c:0a:b6:8e:fe:d8:bb:96:13:98:f6:
                    43:ba:81:33:0c:d1:54:e1:1f:50:d4:a5:a2:b1:a6:
                    f0:16:7c:26:a9:e5:cc:52:62:7a:93:70:53:cd:ea:
                    5d:59:48:c7:4e:e7:36:c0:0d:3b:e3:47:7f:4a:a4:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:43:96:36:86:81:70:54:16:19:66:58:76:D5:2E:01:73:34:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/fd91d8c4-f6d5-3288-908f-ed60beee3afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:24:75:4d:f5:4c:66:ee:51:88:fa:ee:27:c7:e5:e1:73:3e:
         ea:d3:e0:b3:ad:47:4a:3c:0f:a7:fa:28:de:74:51:92:3e:2f:
         e0:0f:4e:4f:aa:c8:63:0b:fa:cd:78:5a:ad:2e:88:31:0c:8f:
         91:e7:da:70:51:74:3f:74:58:4c:2d:25:19:2b:9d:27:2b:7f:
         be:84:16:60:6e:a0:f2:fa:08:aa:93:f2:6c:c4:a7:a8:cf:71:
         59:57:7a:e1:a2:ef:bb:f7:a6:ed:71:44:26:fd:1b:86:10:fa:
         15:4f:a4:4b:f9:6a:d3:2b:63:bb:6f:4c:6e:f2:20:a1:84:46:
         4e:f4:dc:30:c2:bb:23:25:96:30:17:78:19:6d:c5:b6:e4:9d:
         1b:f7:8d:07:ee:8a:de:57:53:12:13:9b:e7:55:77:4b:94:9e:
         bc:c0:10:ed:3e:b4:e4:c1:1b:fa:05:7d:47:d5:29:d5:a5:69:
         3c:92:9b:27:56:13:d0:b3:cb:77:bd:fa:3c:28:b1:7b:af:13:
         30:fe:2a:1d:68:dc:9b:f2:05:03:be:f9:b2:fb:0e:ae:7e:e4:
         d6:bc:3f:00:e5:df:1f:4d:4d:a0:aa:29:d9:0e:5e:41:3a:38:
         47:64:76:a4:77:5c:61:cf:9f:da:6e:1a:cc:59:bb:61:a8:a7:
         3c:7e:37:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dv8h8QS75bAygYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
Zjg5YTQ3M2ItNTE3ZC00YjM2LWFiYTgtNWNmNjBlZjRiOGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRQgG0Wfeah3c0C9i0u+rKiSECNaJGu5hrKK
ets3qz/RRiecWyunn8hBWRNTkyd5mHmNpaP1p977NcZQzKozwZUXn3I5KARfjq1M
aqqNCsDyPolpxaVjCYjpR0+wzIl7uckaVZeTbLkdTffv0qf4KjJ4I2VWEpB8BaOu
f6Wi/5Mtb69VIdmyqq6qcrESFGbpIMcULZZTIfP8KLT1YboPlpRs+r1lU8SkQOx9
rg6n1aopVGQLioVjb0PIlkNvzFf2JBQaiUFDHAq2jv7Yu5YTmPZDuoEzDNFU4R9Q
1KWisabwFnwmqeXMUmJ6k3BTzepdWUjHTuc2wA0740d/SqSl9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkIQ5Y2hoFwVBYZZlh21S4BczSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvZmQ5MWQ4YzQtZjZkNS0z
Mjg4LTkwOGYtZWQ2MGJlZWUzYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxhTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEkdU31TGbuUYj67ifH5eFzPurT4LOtR0o8D6f6KN50UZI+L+APTk+q
yGML+s14Wq0uiDEMj5Hn2nBRdD90WEwtJRkrnScrf76EFmBuoPL6CKqT8mzEp6jP
cVlXeuGi77v3pu1xRCb9G4YQ+hVPpEv5atMrY7tvTG7yIKGERk703DDCuyMlljAX
eBltxbbknRv3jQfuit5XUxITm+dVd0uUnrzAEO0+tOTBG/oFfUfVKdWlaTySmydW
E9Czy3e9+jwosXuvEzD+Kh1o3JvyBQO++bL7Dq5+5Na8PwDl3x9NTaCqKdkOXkE6
OEdkdqR3XGHPn9puGsxZu2Gopzx+Nzg=
-----END CERTIFICATE-----
Generated at Thu Aug 6 14:16:58 2026 by rpki-client