Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b/57e22ab0-68b6-3fe9-8bba-958c2c1b1a4c.roa
File:                     57e22ab0-68b6-3fe9-8bba-958c2c1b1a4c.roa (raw, json)
Hash identifier:          rYAN8SSb/yOFrVVjn/zklQ94rlDpqOzqaiSS2oDHYlY=
Subject key identifier:   AA:58:ED:E9:FC:1F:1E:86:80:30:2C:2E:D3:17:35:51:25:93:F8:F1
Certificate issuer:       /CN=9a9c478a-b8dd-4f4e-8d13-72abb4f0135b
Certificate serial:       010D0C9F4328584F6DB5033DA530E78D3F5F0A80
Authority key identifier: 3E:14:37:F2:D5:94:D1:6A:8B:29:7F:F1:CF:BE:D1:3F:D4:8B:45:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b/57e22ab0-68b6-3fe9-8bba-958c2c1b1a4c.roa
Signing time:             Thu 08 Oct 2026 00:43:17 +0000
ROA not before:           Thu 08 Oct 2026 00:43:17 +0000
ROA not after:            Wed 06 Jan 2027 01:43:17 +0000
asID:                     398649
IP address blocks:        204.15.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:b5:03:3d:a5:30:e7:8d:3f:5f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9c478a-b8dd-4f4e-8d13-72abb4f0135b
        Validity
            Not Before: Oct  8 00:43:17 2026 GMT
            Not After : Jan  6 01:43:17 2027 GMT
        Subject: CN=cc77047c-21a4-4a22-8a08-806eacf87b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:f7:cc:6b:61:3d:de:fe:84:f8:c7:7a:5c:
                    9c:72:fd:2d:6d:76:bd:9a:31:2e:6f:53:29:a9:69:
                    a2:f6:3a:b1:92:73:4a:fb:e2:79:c5:ba:b7:14:05:
                    a3:bd:cc:20:e6:c0:20:31:2f:54:3b:00:3f:e6:16:
                    19:fb:b4:7b:e3:b6:50:67:9b:a5:10:10:82:2f:0c:
                    b9:6e:2d:66:02:83:33:74:63:52:f9:d7:5e:c0:ec:
                    c4:b5:fd:f5:30:b0:f1:1f:5d:98:9f:c2:96:10:f0:
                    42:78:8b:3b:f5:c8:12:41:7d:8d:6d:77:22:37:fb:
                    89:6e:d2:ab:24:04:60:3b:2c:ae:13:2a:1a:13:00:
                    6d:f9:72:55:40:2a:52:f6:34:3f:91:3b:ba:fc:3a:
                    f6:8b:42:5b:e8:63:68:4f:7a:8f:4d:a6:d8:84:65:
                    e1:39:ef:c5:e1:7a:f9:e4:4d:a2:74:92:16:3b:0c:
                    6b:19:6c:ec:de:ce:03:d4:19:60:56:3c:0f:b6:6c:
                    18:99:3c:44:ff:a3:df:08:5b:5c:9a:e3:36:a2:32:
                    ed:a3:aa:c8:b1:11:0a:89:20:66:6f:37:f1:f9:03:
                    b2:f9:81:d1:2c:50:32:b3:1f:9c:14:1e:6e:47:3e:
                    45:bd:0b:d5:41:f1:4c:b8:9b:09:94:52:15:99:de:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:ED:E9:FC:1F:1E:86:80:30:2C:2E:D3:17:35:51:25:93:F8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b/57e22ab0-68b6-3fe9-8bba-958c2c1b1a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b.crl

            X509v3 Authority Key Identifier:
                keyid:3E:14:37:F2:D5:94:D1:6A:8B:29:7F:F1:CF:BE:D1:3F:D4:8B:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a9c478a-b8dd-4f4e-8d13-72abb4f0135b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:53:78:57:2f:5c:87:5f:8e:7c:ee:85:50:c3:03:5d:03:
         f1:5c:fe:06:a6:d7:12:0a:98:8c:ae:b8:5b:fc:61:f3:b7:c3:
         a5:06:e0:00:cb:69:d6:26:6c:a5:f3:c8:0b:ca:7b:12:de:f4:
         10:d9:2d:a9:a4:13:4b:29:db:f2:d2:d4:7f:34:f2:c0:7c:64:
         d6:e2:e4:06:f6:44:d1:c3:0b:e5:30:5b:17:ea:4a:04:5c:61:
         63:30:b6:ea:e9:0e:e5:88:25:a1:5e:7b:9f:1a:df:a6:89:e6:
         3f:f2:f6:76:d9:6b:f6:ca:ad:5c:dd:7f:f7:29:24:78:88:9c:
         e3:62:f0:6e:3c:19:a6:48:5e:ba:e9:91:22:db:7e:d0:c7:9c:
         bd:9d:16:a1:f2:96:b6:f4:96:18:52:85:4d:d5:f6:7e:01:c8:
         89:d6:01:08:63:23:7c:c3:79:18:78:99:61:0c:52:09:8e:e2:
         5d:c5:1f:0d:98:7b:c2:d7:f1:40:c4:37:09:49:14:23:da:dc:
         60:2d:3c:6a:70:75:2d:10:23:5d:b4:ce:a6:e3:41:ac:a4:ae:
         b0:dc:d1:fb:02:1a:36:ca:31:c2:8e:3f:3d:96:69:af:d6:ba:
         80:7c:b0:93:b1:f0:cc:a1:f7:46:5d:50:31:75:c9:20:7f:20:
         6b:65:2f:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ttQM9pTDnjT9fCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5YzQ3OGEtYjhkZC00ZjRlLThkMTMtNzJhYmI0ZjAx
MzViMB4XDTI2MTAwODAwNDMxN1oXDTI3MDEwNjAxNDMxN1owLzEtMCsGA1UEAxMk
Y2M3NzA0N2MtMjFhNC00YTIyLThhMDgtODA2ZWFjZjg3YjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsf3zGthPd7+hPjHelyccv0tbXa9mjEub1Mp
qWmi9jqxknNK++J5xbq3FAWjvcwg5sAgMS9UOwA/5hYZ+7R747ZQZ5ulEBCCLwy5
bi1mAoMzdGNS+ddewOzEtf31MLDxH12Yn8KWEPBCeIs79cgSQX2NbXciN/uJbtKr
JARgOyyuEyoaEwBt+XJVQCpS9jQ/kTu6/Dr2i0Jb6GNoT3qPTabYhGXhOe/F4Xr5
5E2idJIWOwxrGWzs3s4D1BlgVjwPtmwYmTxE/6PfCFtcmuM2ojLto6rIsREKiSBm
bzfx+QOy+YHRLFAysx+cFB5uRz5FvQvVQfFMuJsJlFIVmd4uFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpY7en8Hx6GgDAsLtMXNVElk/jxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85YTlj
NDc4YS1iOGRkLTRmNGUtOGQxMy03MmFiYjRmMDEzNWIvNTdlMjJhYjAtNjhiNi0z
ZmU5LThiYmEtOTU4YzJjMWIxYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOWE5YzQ3OGEtYjhkZC00ZjRlLThk
MTMtNzJhYmI0ZjAxMzViLzlhOWM0NzhhLWI4ZGQtNGY0ZS04ZDEzLTcyYWJiNGYw
MTM1Yi5jcmwwHwYDVR0jBBgwFoAUPhQ38tWU0WqLKX/xz77RP9SLRcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS85YTljNDc4YS1iOGRkLTRmNGUtOGQxMy03MmFi
YjRmMDEzNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzA+/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsmU3hXL1yHX4587oVQwwNdA/Fc/gam1xIKmIyuuFv8YfO3w6UG4ADL
adYmbKXzyAvKexLe9BDZLamkE0sp2/LS1H808sB8ZNbi5Ab2RNHDC+UwWxfqSgRc
YWMwturpDuWIJaFee58a36aJ5j/y9nbZa/bKrVzdf/cpJHiInONi8G48GaZIXrrp
kSLbftDHnL2dFqHylrb0lhhShU3V9n4ByInWAQhjI3zDeRh4mWEMUgmO4l3FHw2Y
e8LX8UDENwlJFCPa3GAtPGpwdS0QI120zqbjQaykrrDc0fsCGjbKMcKOPz2Waa/W
uoB8sJOx8Myh90ZdUDF1ySB/IGtlL+c=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:36:44 2026 by rpki-client