Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3564a224-d619-32aa-8cda-3787571f939b.roa
File:                     3564a224-d619-32aa-8cda-3787571f939b.roa (raw, json)
Hash identifier:          zUOYNnKbO4dpBRKGiybLwBILPOMu4qglClTCVKN0yLc=
Subject key identifier:   E5:08:3A:8E:B0:04:98:D8:67:31:C7:A0:00:8E:D4:DC:2F:CA:51:DB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EE216A7E430800374AFD6F560
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3564a224-d619-32aa-8cda-3787571f939b.roa
Signing time:             Wed 19 Aug 2026 00:26:51 +0000
ROA not before:           Wed 19 Aug 2026 00:26:51 +0000
ROA not after:            Tue 17 Nov 2026 01:26:51 +0000
asID:                     22616
IP address blocks:        198.14.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:16:a7:e4:30:80:03:74:af:d6:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 19 00:26:51 2026 GMT
            Not After : Nov 17 01:26:51 2026 GMT
        Subject: CN=80f0cb92-d3b8-4ea0-8af6-e5c4011da1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:f9:40:9c:95:b7:4c:c5:ed:44:be:d0:d2:
                    fc:47:00:ff:62:79:f2:51:53:db:bf:e5:be:22:4d:
                    55:9d:35:e5:b8:d3:12:21:8f:1a:b7:a8:be:46:36:
                    cc:c5:0b:76:2c:52:69:07:11:50:4b:05:39:2e:87:
                    75:fd:46:e2:61:c7:b5:fb:cc:91:ab:a9:20:13:5a:
                    a2:a4:04:fb:99:22:ab:d3:37:bf:be:b9:87:7e:4b:
                    34:e3:54:1d:09:2a:2a:21:7d:19:c0:b8:ba:24:60:
                    f2:19:24:95:b1:bd:8f:b8:22:70:b9:4a:40:bb:37:
                    52:d8:3d:14:ef:cb:a5:20:1b:e0:a2:64:ec:fd:1a:
                    49:d0:5a:62:0f:f6:25:f9:ff:77:e3:d6:86:42:8e:
                    2e:53:3e:eb:d2:49:66:77:d0:ea:8b:a0:fe:ca:be:
                    34:cd:c5:58:83:ec:28:f8:a7:3a:11:05:60:83:dd:
                    fb:54:f9:1b:fb:32:af:f2:39:cf:a6:e4:18:6c:81:
                    84:85:36:8c:8a:0b:42:e9:fe:b1:24:1e:0f:94:4c:
                    a1:41:78:85:42:c5:17:c8:dd:af:a7:89:12:f0:63:
                    58:17:d5:49:ef:ea:8e:41:8a:15:e3:45:72:de:04:
                    07:35:5a:6d:d6:6b:7f:94:b4:eb:37:5c:13:c7:f9:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:3A:8E:B0:04:98:D8:67:31:C7:A0:00:8E:D4:DC:2F:CA:51:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3564a224-d619-32aa-8cda-3787571f939b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:d3:85:89:a2:75:89:25:b7:f8:81:80:70:f3:2d:29:d2:80:
         b7:c2:8d:14:ea:eb:92:3d:cf:60:a2:41:e2:b1:ab:1d:01:b5:
         a9:03:91:2f:05:69:e4:02:9b:0b:22:8d:80:4d:fb:43:b1:c3:
         10:52:71:98:40:39:f1:c4:ff:85:9d:7b:03:f4:e3:d0:30:13:
         97:2e:de:78:a0:c7:f9:c3:a2:fb:d8:5b:57:91:80:5d:7e:1e:
         d4:aa:22:c4:a5:a8:02:f6:7d:8f:4d:dd:4f:63:b5:1d:49:3c:
         16:09:80:e9:3e:98:c0:02:1f:8c:0a:6f:8e:08:9d:58:29:49:
         36:04:c7:32:00:a1:b9:44:27:9c:d2:14:44:00:cd:40:29:ac:
         6b:c6:b3:0c:94:f4:d4:90:cd:7c:9b:fd:ff:cb:da:5d:c7:85:
         16:d8:b2:4e:d5:d0:b2:b4:97:2a:f8:4b:54:3b:e8:e0:d2:60:
         63:7b:f7:d1:4b:46:b2:c7:34:71:0d:36:50:a7:db:bb:9b:b8:
         f4:56:30:98:c6:49:41:1d:f9:3a:a9:96:b3:86:df:3c:eb:6e:
         4d:1d:1d:bb:c1:37:45:47:12:2e:77:a0:e8:24:94:17:dc:9b:
         82:a9:34:dd:76:c9:b5:84:75:90:93:02:ce:a4:50:3f:93:85:
         cb:e5:34:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iFqfkMIADdK/W9WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxOTAwMjY1MVoXDTI2MTExNzAxMjY1MVowLzEtMCsGA1UEAxMk
ODBmMGNiOTItZDNiOC00ZWEwLThhZjYtZTVjNDAxMWRhMWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxob5QJyVt0zF7US+0NL8RwD/YnnyUVPbv+W+
Ik1VnTXluNMSIY8at6i+RjbMxQt2LFJpBxFQSwU5Lod1/UbiYce1+8yRq6kgE1qi
pAT7mSKr0ze/vrmHfks041QdCSoqIX0ZwLi6JGDyGSSVsb2PuCJwuUpAuzdS2D0U
78ulIBvgomTs/RpJ0FpiD/Yl+f9349aGQo4uUz7r0klmd9Dqi6D+yr40zcVYg+wo
+Kc6EQVgg937VPkb+zKv8jnPpuQYbIGEhTaMigtC6f6xJB4PlEyhQXiFQsUXyN2v
p4kS8GNYF9VJ7+qOQYoV40Vy3gQHNVpt1mt/lLTrN1wTx/nxFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUIOo6wBJjYZzHHoACO1NwvylHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzU2NGEyMjQtZDYxOS0z
MmFhLThjZGEtMzc4NzU3MWY5MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg56MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMDThYmidYklt/iBgHDzLSnSgLfCjRTq65I9z2CiQeKxqx0BtakDkS8F
aeQCmwsijYBN+0OxwxBScZhAOfHE/4WdewP049AwE5cu3nigx/nDovvYW1eRgF1+
HtSqIsSlqAL2fY9N3U9jtR1JPBYJgOk+mMACH4wKb44InVgpSTYExzIAoblEJ5zS
FEQAzUAprGvGswyU9NSQzXyb/f/L2l3HhRbYsk7V0LK0lyr4S1Q76ODSYGN799FL
RrLHNHENNlCn27ubuPRWMJjGSUEd+TqplrOG3zzrbk0dHbvBN0VHEi53oOgklBfc
m4KpNN12ybWEdZCTAs6kUD+ThcvlNGo=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:00:41 2026 by rpki-client