Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cca8ac94-f333-32df-910f-25e419fafe29.roa
File:                     cca8ac94-f333-32df-910f-25e419fafe29.roa (raw, json)
Hash identifier:          RxHc5TfABk/NHsEcjbbPm9nw12Y5rm9DJ164bRyULGI=
Subject key identifier:   DD:8E:82:B3:4A:83:98:90:78:91:5F:90:A0:23:0F:F1:63:00:4B:E6
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584EF87CBC1643E79676E66A0E00
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cca8ac94-f333-32df-910f-25e419fafe29.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     9827
IP address blocks:        198.183.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:bc:16:43:e7:96:76:e6:6a:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=8875d2c4-e0d2-4b05-966b-439234f71cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:eb:f2:b0:f6:c4:26:be:dc:35:44:cc:f2:
                    2a:4b:93:35:1f:6f:37:ab:73:fc:b7:73:b9:04:ed:
                    42:67:db:8a:7e:4f:68:6e:a8:73:ef:8d:67:37:db:
                    8c:b5:c0:a1:31:63:59:7d:b5:5b:b5:c1:d3:79:80:
                    ee:23:64:3d:5c:22:94:2e:0e:2a:e1:15:e4:89:1a:
                    4b:4f:49:b1:88:04:7e:07:cb:2c:46:ff:45:7e:da:
                    cf:ed:10:99:ba:9d:1e:0e:de:38:5a:79:65:66:0d:
                    85:ee:e7:09:e2:ca:2c:c8:49:a1:41:04:f1:80:f2:
                    f8:56:7f:9a:11:8e:c8:8d:39:4b:b6:44:a3:0c:14:
                    63:70:44:be:18:42:f5:f1:4e:32:2e:57:8c:a4:76:
                    bc:65:12:e9:bb:77:ec:67:0b:8f:cc:e1:96:42:32:
                    6c:9e:38:90:3c:be:4d:49:11:6f:c5:79:fb:c0:f8:
                    d0:3c:ee:b5:4f:28:f8:77:8d:29:f6:ee:d3:ee:2b:
                    71:d3:83:0f:0e:15:6b:6a:ab:80:15:52:af:55:a7:
                    5e:6a:12:a8:03:75:d6:7e:fd:4d:ee:63:53:8f:a5:
                    e9:fe:86:df:de:05:1f:97:b0:60:f6:11:8e:7a:bd:
                    e9:3a:40:f3:c3:44:d8:50:ca:57:a6:45:14:92:38:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:82:B3:4A:83:98:90:78:91:5F:90:A0:23:0F:F1:63:00:4B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cca8ac94-f333-32df-910f-25e419fafe29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.183.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:91:d8:23:1c:3d:7f:66:17:5f:e0:c5:01:32:d2:2d:50:e4:
         3b:22:e0:d6:03:8c:21:0c:24:bf:ad:5f:6a:64:22:01:3c:57:
         3e:39:34:27:f7:90:30:e0:91:1e:fc:e6:5d:61:0c:a8:c6:20:
         1d:7e:a4:f9:10:ca:5b:d8:c6:56:e0:f8:ad:24:fd:1d:b8:8f:
         ae:ef:05:2a:bf:45:85:72:19:a7:fe:5f:56:5d:11:e4:f1:a3:
         47:ec:9f:fb:0f:a1:b5:cb:0a:79:13:70:74:c4:f3:06:12:a7:
         a5:c5:88:8a:f4:ec:85:bb:b6:c8:07:a5:a2:f7:52:f8:f8:93:
         e0:3d:88:e7:4b:ac:57:34:d3:27:1b:6d:da:6c:ca:8d:9d:9a:
         60:04:65:82:a6:8f:46:eb:40:c6:4d:67:10:3c:3c:f3:03:8b:
         ba:27:6d:ed:7f:f6:9e:33:5a:a0:d3:82:27:a5:2b:3a:f9:87:
         4e:70:63:7e:82:f4:bb:aa:9e:3e:36:4b:6d:7e:90:56:59:19:
         c0:9b:a0:d6:6a:7f:10:d8:94:0d:ea:9d:a5:e7:d2:90:d9:2a:
         3e:4e:aa:d9:32:e9:8b:cb:2f:7c:45:60:99:e1:76:d4:93:c4:
         c1:62:2c:f3:11:32:77:cd:40:53:89:a8:a0:6b:7c:be:98:62:
         77:2b:9a:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLwWQ+eWduZqDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg0ZjQ1YmMtNjFiMy00M2RkLWI4NTgtMGViMWE2YTdi
NzJlMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
ODg3NWQyYzQtZTBkMi00YjA1LTk2NmItNDM5MjM0ZjcxY2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDHr8rD2xCa+3DVEzPIqS5M1H283q3P8t3O5
BO1CZ9uKfk9obqhz741nN9uMtcChMWNZfbVbtcHTeYDuI2Q9XCKULg4q4RXkiRpL
T0mxiAR+B8ssRv9FftrP7RCZup0eDt44WnllZg2F7ucJ4sosyEmhQQTxgPL4Vn+a
EY7IjTlLtkSjDBRjcES+GEL18U4yLleMpHa8ZRLpu3fsZwuPzOGWQjJsnjiQPL5N
SRFvxXn7wPjQPO61Tyj4d40p9u7T7itx04MPDhVraquAFVKvVadeahKoA3XWfv1N
7mNTj6Xp/obf3gUfl7Bg9hGOer3pOkDzw0TYUMpXpkUUkjjS6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2OgrNKg5iQeJFfkKAjD/FjAEvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRm
NDViYy02MWIzLTQzZGQtYjg1OC0wZWIxYTZhN2I3MmUvY2NhOGFjOTQtZjMzMy0z
MmRmLTkxMGYtMjVlNDE5ZmFmZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTg0ZjQ1YmMtNjFiMy00M2RkLWI4
NTgtMGViMWE2YTdiNzJlLzE4NGY0NWJjLTYxYjMtNDNkZC1iODU4LTBlYjFhNmE3
YjcyZS5jcmwwHwYDVR0jBBgwFoAU1su1+FzryDHOMvoxQFhDa7e70sswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRmNDViYy02MWIzLTQzZGQtYjg1OC0wZWIx
YTZhN2I3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrfJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASR2CMcPX9mF1/gxQEy0i1Q5Dsi4NYDjCEMJL+tX2pkIgE8Vz45NCf3
kDDgkR785l1hDKjGIB1+pPkQylvYxlbg+K0k/R24j67vBSq/RYVyGaf+X1ZdEeTx
o0fsn/sPobXLCnkTcHTE8wYSp6XFiIr07IW7tsgHpaL3Uvj4k+A9iOdLrFc00ycb
bdpsyo2dmmAEZYKmj0brQMZNZxA8PPMDi7onbe1/9p4zWqDTgielKzr5h05wY36C
9Luqnj42S21+kFZZGcCboNZqfxDYlA3qnaXn0pDZKj5Oqtky6YvLL3xFYJnhdtST
xMFiLPMRMnfNQFOJqKBrfL6YYncrmhU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:14:11 2026 by rpki-client