Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a0cf80-064a-3965-a2cf-152399e7a2c7.roa
File:                     54a0cf80-064a-3965-a2cf-152399e7a2c7.roa (raw, json)
Hash identifier:          bWlAwEdB8IgJ+9rG175K/TZHA0uTG5u0I4sGssY3pBE=
Subject key identifier:   E3:EA:2C:DE:94:40:5E:CA:AC:C2:95:18:7E:81:24:E9:68:21:2A:C7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE38CA275EAA9FCE1E3948180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a0cf80-064a-3965-a2cf-152399e7a2c7.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        192.119.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a2:75:ea:a9:fc:e1:e3:94:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=e8f9f159-0b89-45ef-a1d0-ec89cc18dafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:d1:10:dd:a1:3c:68:0c:3e:c8:1d:d2:6d:
                    12:07:03:6b:96:c6:7b:c4:bb:3a:d5:c9:fd:ab:ca:
                    bb:bc:84:3e:85:49:92:f1:18:04:f6:c7:21:26:09:
                    20:96:9b:6f:29:40:a6:50:fd:75:77:0e:dd:26:2f:
                    2a:72:d5:6e:f3:f9:50:22:9c:4d:a2:88:f8:8c:32:
                    8a:4f:55:84:07:7f:e8:40:eb:f2:5e:2d:14:90:a6:
                    37:36:f1:34:ba:38:cf:e0:40:5a:a3:40:53:f6:2c:
                    bc:7f:9a:22:2b:e7:52:81:50:a8:a5:cb:f4:f2:ac:
                    33:66:9e:83:33:ec:04:30:d2:07:cb:4c:ac:28:25:
                    59:a3:e1:9c:d9:59:f9:cf:91:93:ad:95:25:01:a8:
                    4d:9b:b2:55:25:e4:2f:81:b6:7e:64:5e:c9:89:c2:
                    c0:90:5f:93:36:30:4a:11:29:d9:d2:e2:2e:f8:5a:
                    60:5a:69:8e:ff:cc:1c:88:a8:11:c9:bb:f3:19:d4:
                    b5:20:31:ad:1c:5f:6e:7b:90:5b:a2:a0:8f:27:d9:
                    a5:55:61:77:b2:7e:e5:a0:f4:ae:b5:c5:c8:a1:18:
                    04:20:b6:4d:44:ec:69:59:db:61:eb:8f:aa:0e:75:
                    8d:9b:32:7f:e4:23:0e:01:81:fa:44:02:ba:81:6e:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:2C:DE:94:40:5E:CA:AC:C2:95:18:7E:81:24:E9:68:21:2A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a0cf80-064a-3965-a2cf-152399e7a2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:03:47:d2:c6:71:9b:68:54:f9:59:2b:cd:11:20:f1:e9:50:
         d7:35:75:1f:51:6c:ad:88:63:4e:3c:e7:b6:b2:0d:90:27:77:
         d7:b5:90:99:22:33:a6:36:8d:89:de:0a:1a:4b:b5:af:50:6a:
         8a:c5:df:65:3e:c4:4a:e4:b2:d7:32:80:c6:ba:4a:db:51:5c:
         54:b6:09:17:f7:24:c5:23:2d:ba:f1:5b:c9:f3:e9:36:31:02:
         b9:15:92:71:38:93:8e:39:cf:68:09:4c:42:c4:ae:16:3a:d4:
         ae:a2:ad:8a:54:b2:dd:11:03:c5:6a:8d:ec:7a:61:61:5f:cf:
         78:6f:58:2c:2d:4d:5b:9f:8b:82:22:c3:8e:ba:6e:6c:95:ed:
         ac:0d:f1:ca:6c:f2:7a:eb:19:01:4e:84:43:29:42:a2:32:b9:
         7a:91:a5:08:d8:4e:ec:29:ac:fe:2f:33:86:f7:f0:51:9d:c0:
         a4:da:57:b4:4c:99:a6:44:3d:2d:80:e1:a9:58:58:a6:6f:9a:
         2b:ed:fa:f0:24:3f:49:59:de:0d:03:53:07:7f:78:a4:2e:a3:
         13:58:72:34:03:ee:09:fb:f1:51:bc:72:62:ed:6f:da:10:8a:
         a1:b6:84:43:e0:16:25:34:48:fb:c3:99:5a:18:a0:ff:54:2b:
         c5:6b:e5:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKJ16qn84eOUgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
ZThmOWYxNTktMGI4OS00NWVmLWExZDAtZWM4OWNjMThkYWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxrREN2hPGgMPsgd0m0SBwNrlsZ7xLs61cn9
q8q7vIQ+hUmS8RgE9schJgkglptvKUCmUP11dw7dJi8qctVu8/lQIpxNooj4jDKK
T1WEB3/oQOvyXi0UkKY3NvE0ujjP4EBao0BT9iy8f5oiK+dSgVCopcv08qwzZp6D
M+wEMNIHy0ysKCVZo+Gc2Vn5z5GTrZUlAahNm7JVJeQvgbZ+ZF7JicLAkF+TNjBK
ESnZ0uIu+FpgWmmO/8wciKgRybvzGdS1IDGtHF9ue5BboqCPJ9mlVWF3sn7loPSu
tcXIoRgEILZNROxpWdth64+qDnWNmzJ/5CMOAYH6RAK6gW7jtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPqLN6UQF7KrMKVGH6BJOloISrHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTRhMGNmODAtMDY0YS0z
OTY1LWEyY2YtMTUyMzk5ZTdhMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkDR9LGcZtoVPlZK80RIPHpUNc1dR9RbK2IY04857ayDZAnd9e1kJki
M6Y2jYneChpLta9QaorF32U+xErkstcygMa6SttRXFS2CRf3JMUjLbrxW8nz6TYx
ArkVknE4k445z2gJTELErhY61K6irYpUst0RA8Vqjex6YWFfz3hvWCwtTVufi4Ii
w466bmyV7awN8cps8nrrGQFOhEMpQqIyuXqRpQjYTuwprP4vM4b38FGdwKTaV7RM
maZEPS2A4alYWKZvmivt+vAkP0lZ3g0DUwd/eKQuoxNYcjQD7gn78VG8cmLtb9oQ
iqG2hEPgFiU0SPvDmVoYoP9UK8Vr5bo=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:14 2026 by rpki-client