Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738/c2aecb05-c81b-35d7-a6fb-148dfbc1e304.roa
File:                     c2aecb05-c81b-35d7-a6fb-148dfbc1e304.roa (raw, json)
Hash identifier:          5lJhbQ1gROqouZ0+9tXM95cclItgbIvsKz80hViWikg=
Subject key identifier:   AC:0D:BE:7A:67:14:BD:CC:01:95:D0:40:19:83:2F:EE:91:96:1B:97
Certificate issuer:       /CN=274fbd67-d4e0-4dc9-a77e-1e2b4c84e738
Certificate serial:       010D0C9F4328584F647C978761B13A903EF3B380
Authority key identifier: C9:1E:CF:34:2E:A3:E3:1D:D9:00:EF:A5:DB:EE:7E:C2:E9:39:39:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738/c2aecb05-c81b-35d7-a6fb-148dfbc1e304.roa
Signing time:             Sun 04 Oct 2026 17:27:19 +0000
ROA not before:           Sun 04 Oct 2026 17:27:19 +0000
ROA not after:            Sat 02 Jan 2027 18:27:19 +0000
asID:                     49304
IP address blocks:        199.19.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:64:7c:97:87:61:b1:3a:90:3e:f3:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274fbd67-d4e0-4dc9-a77e-1e2b4c84e738
        Validity
            Not Before: Oct  4 17:27:19 2026 GMT
            Not After : Jan  2 18:27:19 2027 GMT
        Subject: CN=cb1318f2-b207-41d6-bcd6-01f73eb9d160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:f4:c7:f2:59:48:7e:73:f3:65:ad:68:24:
                    1a:9f:0e:e8:92:bf:66:9a:f7:ba:af:1e:30:09:a5:
                    f8:a2:9e:ac:af:f5:f1:cf:4e:d4:70:cc:54:8f:7c:
                    6b:4c:09:74:49:fe:fd:ce:8a:64:73:ba:60:ef:bf:
                    ab:95:32:34:09:70:22:35:b4:57:95:d9:7e:aa:af:
                    48:25:5e:21:b7:66:c1:8d:3b:83:f4:76:f2:13:b3:
                    78:fe:96:1d:e7:bb:6a:63:33:d4:24:75:db:87:a3:
                    a3:56:fc:96:6f:5f:a2:3a:ea:c9:7e:f6:80:1e:d7:
                    fd:ee:94:8e:39:c3:cf:75:fe:dc:16:5b:ee:a1:b5:
                    68:ff:b4:27:56:2b:7e:eb:46:ce:aa:dc:83:f2:c6:
                    bb:0a:f2:02:50:71:eb:8b:36:31:78:9a:b0:3a:70:
                    bb:3f:fa:71:ba:f5:ef:16:80:a6:3d:24:6d:14:08:
                    25:18:0a:f2:76:b1:ab:ac:62:1f:02:a1:b4:21:3e:
                    62:a7:1d:b4:81:b3:ac:1c:bd:e3:40:88:0d:a2:6e:
                    5c:d5:c2:84:bf:6b:50:95:d4:02:21:22:ff:35:68:
                    e5:30:b1:a3:83:b3:08:32:38:31:c6:cc:5a:14:8b:
                    65:bb:25:c6:19:21:36:7a:f6:d7:d9:0e:9b:82:fe:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:BE:7A:67:14:BD:CC:01:95:D0:40:19:83:2F:EE:91:96:1B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738/c2aecb05-c81b-35d7-a6fb-148dfbc1e304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738.crl

            X509v3 Authority Key Identifier:
                keyid:C9:1E:CF:34:2E:A3:E3:1D:D9:00:EF:A5:DB:EE:7E:C2:E9:39:39:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/274fbd67-d4e0-4dc9-a77e-1e2b4c84e738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:ce:54:1a:04:99:35:42:43:fd:b0:aa:53:50:88:38:ff:
         e2:b7:2d:cf:c2:48:c8:18:22:62:cb:17:e5:73:b5:2c:93:6c:
         4f:03:fd:d7:9a:bc:a0:1d:18:cb:5f:a4:f3:b6:e2:40:0a:c4:
         ac:2f:a6:c0:e5:7f:04:63:74:c5:50:e7:92:11:3e:b9:5c:c4:
         70:ec:2e:b2:c1:a6:8a:31:32:72:1a:be:7b:03:27:1a:9a:80:
         c0:aa:be:d2:5e:f8:cb:8a:55:59:5f:72:35:67:fc:3d:c7:f2:
         8b:10:40:03:f6:c0:7d:b2:90:39:3b:7b:87:15:69:c6:09:ff:
         24:93:92:8b:b9:34:7b:39:a5:cb:c0:32:6c:74:35:9b:cc:05:
         17:a3:f5:ce:ba:e4:a5:63:d4:a2:78:47:66:53:e7:9d:7c:c9:
         56:17:8d:36:65:2d:da:97:1d:83:27:c7:f0:3f:bd:77:01:fe:
         5e:de:64:ea:fd:d3:5b:a9:45:b0:4b:18:59:83:db:aa:bd:23:
         86:40:89:59:98:f3:f3:14:58:4b:b8:72:54:f8:bb:7a:75:1b:
         ae:02:a3:90:9b:f0:d4:77:c6:ba:2e:ff:59:40:26:18:61:31:
         c0:fb:b1:06:69:db:79:b5:b5:2f:be:d4:29:a0:8d:88:80:0d:
         9b:14:d6:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9kfJeHYbE6kD7zs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc0ZmJkNjctZDRlMC00ZGM5LWE3N2UtMWUyYjRjODRl
NzM4MB4XDTI2MTAwNDE3MjcxOVoXDTI3MDEwMjE4MjcxOVowLzEtMCsGA1UEAxMk
Y2IxMzE4ZjItYjIwNy00MWQ2LWJjZDYtMDFmNzNlYjlkMTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcj0x/JZSH5z82WtaCQanw7okr9mmve6rx4w
CaX4op6sr/Xxz07UcMxUj3xrTAl0Sf79zopkc7pg77+rlTI0CXAiNbRXldl+qq9I
JV4ht2bBjTuD9HbyE7N4/pYd57tqYzPUJHXbh6OjVvyWb1+iOurJfvaAHtf97pSO
OcPPdf7cFlvuobVo/7QnVit+60bOqtyD8sa7CvICUHHrizYxeJqwOnC7P/pxuvXv
FoCmPSRtFAglGArydrGrrGIfAqG0IT5ipx20gbOsHL3jQIgNom5c1cKEv2tQldQC
ISL/NWjlMLGjg7MIMjgxxsxaFItluyXGGSE2evbX2Q6bgv6wqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwNvnpnFL3MAZXQQBmDL+6RlhuXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yNzRm
YmQ2Ny1kNGUwLTRkYzktYTc3ZS0xZTJiNGM4NGU3MzgvYzJhZWNiMDUtYzgxYi0z
NWQ3LWE2ZmItMTQ4ZGZiYzFlMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjc0ZmJkNjctZDRlMC00ZGM5LWE3
N2UtMWUyYjRjODRlNzM4LzI3NGZiZDY3LWQ0ZTAtNGRjOS1hNzdlLTFlMmI0Yzg0
ZTczOC5jcmwwHwYDVR0jBBgwFoAUyR7PNC6j4x3ZAO+l2+5+wuk5OfQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8yNzRmYmQ2Ny1kNGUwLTRkYzktYTc3ZS0xZTJi
NGM4NGU3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLJzlQaBJk1QkP9sKpTUIg4/+K3Lc/CSMgYImLLF+VztSyTbE8D/dea
vKAdGMtfpPO24kAKxKwvpsDlfwRjdMVQ55IRPrlcxHDsLrLBpooxMnIavnsDJxqa
gMCqvtJe+MuKVVlfcjVn/D3H8osQQAP2wH2ykDk7e4cVacYJ/ySTkou5NHs5pcvA
Mmx0NZvMBRej9c665KVj1KJ4R2ZT5518yVYXjTZlLdqXHYMnx/A/vXcB/l7eZOr9
01upRbBLGFmD26q9I4ZAiVmY8/MUWEu4clT4u3p1G64Co5Cb8NR3xrou/1lAJhhh
McD7sQZp23m1tS++1CmgjYiADZsU1u0=
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:17 2026 by rpki-client