Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a9630e8-50f0-3c2e-a0e7-3044eaf0c198.roa
File:                     5a9630e8-50f0-3c2e-a0e7-3044eaf0c198.roa (raw, json)
Hash identifier:          YLIbaMla8qH9U9KGjZbE/VXWTVaXVR3Ms18TXSd+vY8=
Subject key identifier:   A7:4D:DC:C9:42:89:B2:C8:0D:0C:62:FD:C9:F1:54:4B:C8:BF:7E:78
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE423425F10161FCF78D91700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a9630e8-50f0-3c2e-a0e7-3044eaf0c198.roa
Signing time:             Wed 19 Aug 2026 18:03:52 +0000
ROA not before:           Wed 19 Aug 2026 18:03:52 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        198.172.116.17/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:42:5f:10:16:1f:cf:78:d9:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:52 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ae6ce098-46a8-4778-9aaf-ea897e36b0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:3f:0b:d9:da:cc:e1:e9:86:52:88:95:b2:
                    41:d9:54:35:19:f7:b4:f5:73:88:45:09:37:7d:32:
                    8b:ac:0a:1f:de:db:4e:44:d5:90:db:bc:26:87:eb:
                    7a:03:e6:f7:5c:7a:bc:aa:ae:fd:05:c4:d5:03:5c:
                    50:a8:ec:88:74:49:a5:4f:6f:5c:d7:0b:5b:4b:2c:
                    4e:a0:c5:9f:7e:6e:20:78:de:68:07:a8:e8:bc:bf:
                    2e:7b:2c:7e:c1:b4:fd:c2:26:fa:7f:9b:1e:9f:c9:
                    d2:02:83:6f:15:2c:a0:8b:a6:f7:bc:43:03:1c:bc:
                    a0:3e:21:6e:7c:dc:72:6b:ae:01:b5:28:f2:d6:6a:
                    ec:ff:59:63:6c:07:98:7c:2d:3c:9a:12:e0:33:26:
                    a3:f3:54:53:9e:b9:78:03:7f:93:0f:9a:ba:fe:d2:
                    ea:ac:04:6d:3f:13:9a:3c:3a:ef:06:cf:ea:26:94:
                    41:c7:04:66:da:03:e7:d4:dd:48:3c:5c:a1:79:ad:
                    32:64:95:62:20:a3:33:7b:d3:00:6f:8d:9a:81:23:
                    9a:3a:d4:cf:af:b9:41:eb:1f:bb:f1:1b:e1:3c:86:
                    d4:a6:3c:ea:2c:4a:5f:29:c1:1b:47:ea:cf:ab:42:
                    2a:3c:c3:cc:43:89:48:fb:ba:d2:4a:51:53:76:97:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4D:DC:C9:42:89:B2:C8:0D:0C:62:FD:C9:F1:54:4B:C8:BF:7E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a9630e8-50f0-3c2e-a0e7-3044eaf0c198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.172.116.17/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:56:03:59:c1:93:15:35:03:d5:3c:14:17:67:35:47:87:
         3d:43:c8:d4:c4:a9:bc:73:3e:bd:81:e8:5a:16:d5:bd:df:28:
         65:4c:37:c7:1c:50:eb:8a:a3:36:aa:3b:ea:49:b2:7e:29:79:
         4b:27:35:b7:ef:4f:2b:7b:45:f0:a4:c1:fe:21:26:19:78:4b:
         da:1d:22:75:dc:81:93:47:c8:7b:d5:16:01:3c:2c:34:ae:4c:
         fe:89:eb:6a:7f:2b:62:ad:61:70:84:11:2f:64:01:c6:94:52:
         7d:1d:e4:74:52:f7:dd:24:cb:65:2a:a6:6a:6b:ee:31:53:3a:
         86:3a:23:c1:c0:5f:1d:b5:2d:4e:c5:2b:d6:44:63:bd:29:8c:
         30:11:13:2a:36:8d:ed:a6:9c:98:b6:e8:e1:42:6f:56:10:c6:
         85:99:9f:2e:dc:b7:8a:eb:39:f0:0b:de:0e:5d:35:8c:e5:f1:
         d7:99:0e:75:f6:9b:ad:be:95:d5:2e:f7:44:44:87:3e:b1:c6:
         a4:e7:8d:a3:4a:5c:1f:81:85:94:4b:6c:8f:07:d1:f8:e6:99:
         95:42:5a:0b:34:5f:44:bb:ed:ac:d4:87:a9:9b:93:0a:17:aa:
         56:4f:85:17:08:a8:e7:92:b6:20:5a:3a:11:29:db:21:73:eb:
         a6:fe:cd:25
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kI0JfEBYfz3jZFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWU2Y2UwOTgtNDZhOC00Nzc4LTlhYWYtZWE4OTdlMzZiMGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBw/C9nazOHphlKIlbJB2VQ1Gfe09XOIRQk3
fTKLrAof3ttORNWQ27wmh+t6A+b3XHq8qq79BcTVA1xQqOyIdEmlT29c1wtbSyxO
oMWffm4geN5oB6jovL8ueyx+wbT9wib6f5sen8nSAoNvFSygi6b3vEMDHLygPiFu
fNxya64BtSjy1mrs/1ljbAeYfC08mhLgMyaj81RTnrl4A3+TD5q6/tLqrARtPxOa
PDrvBs/qJpRBxwRm2gPn1N1IPFyhea0yZJViIKMze9MAb42agSOaOtTPr7lB6x+7
8RvhPIbUpjzqLEpfKcEbR+rPq0IqPMPMQ4lI+7rSSlFTdpdAywIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKdN3MlCibLIDQxi/cnxVEvIv354MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWE5NjMwZTgtNTBmMC0z
YzJlLWEwZTctMzA0NGVhZjBjMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxqx0ETBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCsnVYDWcGTFTUD1TwUF2c1R4c9Q8jUxKm8cz69gehaFtW93yhlTDfH
HFDriqM2qjvqSbJ+KXlLJzW3708re0XwpMH+ISYZeEvaHSJ13IGTR8h71RYBPCw0
rkz+ietqfytirWFwhBEvZAHGlFJ9HeR0UvfdJMtlKqZqa+4xUzqGOiPBwF8dtS1O
xSvWRGO9KYwwERMqNo3tppyYtujhQm9WEMaFmZ8u3LeK6znwC94OXTWM5fHXmQ51
9putvpXVLvdERIc+scak542jSlwfgYWUS2yPB9H45pmVQloLNF9Eu+2s1Iepm5MK
F6pWT4UXCKjnkrYgWjoRKdshc+um/s0l
-----END CERTIFICATE-----
Generated at Thu Aug 20 06:35:18 2026 by rpki-client