Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43cb4205-4281-30c7-bf14-fc8519ebfa30.roa
File:                     43cb4205-4281-30c7-bf14-fc8519ebfa30.roa (raw, json)
Hash identifier:          d5wxipP59CrTZFe5R2iiJAbJfE7j4UwkrdhAIPCgMqg=
Subject key identifier:   1D:01:A6:DF:CB:05:F4:F7:F5:EF:2F:AE:BD:70:23:32:20:91:7C:86
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F675599601853E91886A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43cb4205-4281-30c7-bf14-fc8519ebfa30.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        199.243.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:67:55:99:60:18:53:e9:18:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=5dd2b375-bb08-46d2-9492-63579a6f15bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:01:f8:c9:9e:24:1f:12:b7:52:e1:76:e3:
                    11:de:8f:d3:8d:91:b1:28:40:b9:ba:f0:1c:5d:29:
                    ce:e4:7b:99:3e:a9:fa:d5:e1:59:5b:b8:c4:66:31:
                    3c:e7:8e:2b:b9:7f:0a:c7:1f:c3:69:22:d0:80:76:
                    e5:99:73:4e:40:7d:50:4c:cc:dc:b7:78:d7:0e:18:
                    ed:c8:19:f7:1a:18:2b:7a:6b:53:9e:20:af:4e:67:
                    3a:ce:17:30:9c:57:fb:0a:c9:e9:f7:f3:aa:ff:e5:
                    4a:e6:2e:c2:9a:82:67:85:e0:2d:6e:e3:38:3d:fa:
                    ab:3c:0f:c4:7e:a5:2a:ad:0a:f6:6b:19:41:a8:ea:
                    9d:e1:d1:d7:03:c5:60:f7:78:fe:ef:bb:2b:33:e2:
                    cc:ca:32:e8:c2:a5:88:1a:a5:4f:17:25:55:a5:69:
                    c4:18:e8:59:b2:3d:bd:3a:02:f0:a1:7f:83:3d:f1:
                    7c:34:e7:89:c9:31:89:ab:fb:80:21:27:af:3d:e5:
                    51:b8:ed:5c:00:16:85:6d:e9:f8:fe:5f:de:e7:9b:
                    fc:f3:e4:69:5b:ea:cb:21:3a:dc:d3:fd:dd:79:10:
                    45:fc:aa:b0:4e:c8:f3:38:20:e3:ba:7b:eb:31:71:
                    13:0b:2e:69:59:18:69:12:bc:08:33:79:7e:4c:2f:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:01:A6:DF:CB:05:F4:F7:F5:EF:2F:AE:BD:70:23:32:20:91:7C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43cb4205-4281-30c7-bf14-fc8519ebfa30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c9:62:b4:bf:2f:7b:b0:23:f2:a7:89:5d:7b:40:9f:25:bf:
         e5:61:91:9f:d3:87:29:81:5e:ba:88:68:0d:b4:d6:27:95:cc:
         75:10:41:3a:1f:65:a1:65:5e:6f:9e:d2:93:9e:9f:40:d4:59:
         3e:02:bb:49:fa:78:4e:7e:34:fa:e2:1c:d5:78:97:72:ea:9c:
         24:a7:ec:9d:72:d2:50:a7:7a:ee:23:55:26:cb:b9:d0:b6:5a:
         13:74:6e:92:7b:21:04:a1:f2:4b:80:b8:f2:eb:01:77:2c:03:
         9c:24:7a:58:b7:99:02:45:64:1a:d0:e6:58:d9:2c:65:f5:46:
         87:97:87:0b:92:33:d8:ee:4e:25:b6:fc:f6:b9:fc:ad:33:67:
         27:9c:bd:eb:66:c8:27:38:16:70:c0:88:b2:3b:8e:3c:f2:15:
         36:7a:55:eb:5c:ce:ff:91:19:87:fa:32:77:c2:22:ea:a7:4b:
         fc:38:bc:a6:48:26:b1:ed:37:a4:97:2c:81:8c:2d:81:33:8d:
         8f:92:b8:86:43:20:fa:44:16:ad:ec:e6:c2:77:2b:ed:a0:21:
         53:bd:aa:c9:18:f2:2e:3a:8c:aa:38:1e:5d:8f:13:be:94:c1:
         b1:2f:0f:6d:26:c8:18:85:74:5d:b5:17:3f:ba:39:75:6a:43:
         19:c9:f2:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2dVmWAYU+kYhqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NWRkMmIzNzUtYmIwOC00NmQyLTk0OTItNjM1NzlhNmYxNWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngIB+MmeJB8St1LhduMR3o/TjZGxKEC5uvAc
XSnO5HuZPqn61eFZW7jEZjE8544ruX8Kxx/DaSLQgHblmXNOQH1QTMzct3jXDhjt
yBn3GhgremtTniCvTmc6zhcwnFf7Csnp9/Oq/+VK5i7CmoJnheAtbuM4PfqrPA/E
fqUqrQr2axlBqOqd4dHXA8Vg93j+77srM+LMyjLowqWIGqVPFyVVpWnEGOhZsj29
OgLwoX+DPfF8NOeJyTGJq/uAISevPeVRuO1cABaFben4/l/e55v88+RpW+rLITrc
0/3deRBF/KqwTsjzOCDjunvrMXETCy5pWRhpErwIM3l+TC/L4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0Bpt/LBfT39e8vrr1wIzIgkXyGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDNjYjQyMDUtNDI4MS0z
MGM3LWJmMTQtZmM4NTE5ZWJmYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/PAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXJYrS/L3uwI/KniV17QJ8lv+VhkZ/ThymBXrqIaA201ieVzHUQQTof
ZaFlXm+e0pOen0DUWT4Cu0n6eE5+NPriHNV4l3LqnCSn7J1y0lCneu4jVSbLudC2
WhN0bpJ7IQSh8kuAuPLrAXcsA5wkeli3mQJFZBrQ5ljZLGX1RoeXhwuSM9juTiW2
/Pa5/K0zZyecvetmyCc4FnDAiLI7jjzyFTZ6Vetczv+RGYf6MnfCIuqnS/w4vKZI
JrHtN6SXLIGMLYEzjY+SuIZDIPpEFq3s5sJ3K+2gIVO9qskY8i46jKo4Hl2PE76U
wbEvD20myBiFdF21Fz+6OXVqQxnJ8vY=
-----END CERTIFICATE-----
Generated at Fri Jul 17 09:58:18 2026 by rpki-client