Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/882431b7-b5ca-3aaf-b2d2-59c2864d53a9.roa
File:                     882431b7-b5ca-3aaf-b2d2-59c2864d53a9.roa (raw, json)
Hash identifier:          YXf65lK2mKqW66YF97abKvSD2SVcsPdtsTH+5LybdBw=
Subject key identifier:   92:C5:68:49:0C:BC:DC:19:43:58:D1:DB:76:AE:3E:11:65:55:23:20
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4234372FC33EC33D5942300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/882431b7-b5ca-3aaf-b2d2-59c2864d53a9.roa
Signing time:             Wed 19 Aug 2026 18:03:52 +0000
ROA not before:           Wed 19 Aug 2026 18:03:52 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        199.236.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:43:72:fc:33:ec:33:d5:94:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:52 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=546ef23b-dd7a-4303-b02d-2f0f2e0de43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:cd:8c:0d:11:bf:6a:2c:20:9e:81:8e:d8:
                    6d:c9:f4:d8:26:58:bb:e6:5a:15:45:c1:a9:13:2e:
                    3b:ce:28:65:13:88:7e:2b:8a:35:44:72:e9:d0:46:
                    a7:35:85:01:0a:97:da:88:0d:55:ad:7a:4c:ac:2f:
                    fb:9c:8d:bd:bd:64:8f:5b:4d:b5:4e:47:50:b3:ec:
                    9e:aa:ca:5f:66:6f:0d:f2:8f:12:a7:bd:f5:b1:87:
                    02:af:3b:46:90:4d:cb:35:8d:9a:26:4c:cd:14:54:
                    73:1f:85:70:da:9e:d1:d5:bb:7f:57:41:4b:d2:22:
                    85:1b:f5:1f:33:4c:c2:aa:61:1f:73:26:cb:d2:78:
                    da:b0:95:2e:3c:74:b3:5c:f8:65:06:8d:4e:91:e0:
                    8f:c4:8c:df:f2:74:63:90:c7:a3:7a:c1:9c:c5:b3:
                    7a:bd:9f:ae:48:99:5d:c8:5c:de:39:cd:e2:f7:8a:
                    04:2d:20:8d:03:dd:60:e2:9e:d3:0d:96:4d:a6:ee:
                    26:28:46:a7:a9:e1:91:20:ba:61:bf:68:5f:14:cb:
                    3a:d7:43:ad:11:07:69:20:60:7d:5a:24:76:57:00:
                    3e:ac:e3:65:db:31:03:76:b7:e2:b0:30:91:b4:7f:
                    48:93:cf:b9:52:4d:5e:57:76:2d:f3:cc:3d:61:46:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:68:49:0C:BC:DC:19:43:58:D1:DB:76:AE:3E:11:65:55:23:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/882431b7-b5ca-3aaf-b2d2-59c2864d53a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.236.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:7f:0e:15:8c:21:00:e0:aa:5b:0a:61:71:51:7d:52:96:a8:
         45:f1:f1:39:e1:90:4e:0c:70:73:28:17:3e:f6:d2:f5:c7:44:
         9e:f2:7b:df:40:4a:93:2f:b9:7f:2f:6c:51:8a:bf:23:0e:34:
         2e:75:4f:8d:7f:e1:16:58:e1:62:40:76:57:30:c6:4a:5c:e2:
         ff:3f:4b:43:b5:21:22:f9:9d:8f:df:c6:c6:74:43:c5:d6:b2:
         6c:32:97:cb:5a:36:4a:30:45:d8:87:3f:56:19:52:46:86:ff:
         8c:fe:01:f4:cf:cf:98:3d:f1:39:f4:fc:91:67:59:f6:15:e3:
         75:00:9a:67:96:6f:ab:48:af:31:3f:4a:60:27:5e:74:b0:b2:
         f6:5f:7f:da:24:cc:7a:ea:3e:63:a3:11:fb:3a:4a:4d:43:4a:
         91:69:b0:fe:72:c8:d7:9c:45:c3:80:2b:ec:b5:19:6a:7d:58:
         d7:1c:7c:fc:ab:3e:3a:16:16:fb:72:56:a9:c4:a7:61:ce:2a:
         84:f3:af:4c:ca:00:31:79:83:26:c8:c1:90:b1:d1:a5:b1:dc:
         09:64:54:51:38:ce:22:eb:e0:76:16:9d:bc:ca:27:2f:7a:a4:
         91:be:6c:f4:5e:cd:5d:50:30:e5:bd:0b:c6:8a:04:84:df:7d:
         4c:42:b4:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI0Ny/DPsM9WUIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NTQ2ZWYyM2ItZGQ3YS00MzAzLWIwMmQtMmYwZjJlMGRlNDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/NjA0Rv2osIJ6BjthtyfTYJli75loVRcGp
Ey47zihlE4h+K4o1RHLp0EanNYUBCpfaiA1VrXpMrC/7nI29vWSPW021TkdQs+ye
qspfZm8N8o8Sp731sYcCrztGkE3LNY2aJkzNFFRzH4Vw2p7R1bt/V0FL0iKFG/Uf
M0zCqmEfcybL0njasJUuPHSzXPhlBo1OkeCPxIzf8nRjkMejesGcxbN6vZ+uSJld
yFzeOc3i94oELSCNA91g4p7TDZZNpu4mKEanqeGRILphv2hfFMs610OtEQdpIGB9
WiR2VwA+rONl2zEDdrfisDCRtH9Ik8+5Uk1eV3Yt88w9YUbVWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJLFaEkMvNwZQ1jR23auPhFlVSMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODgyNDMxYjctYjVjYS0z
YWFmLWIyZDItNTljMjg2NGQ1M2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCx+wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAu38OFYwhAOCqWwphcVF9UpaoRfHxOeGQTgxwcygXPvbS9cdEnvJ730BK
ky+5fy9sUYq/Iw40LnVPjX/hFljhYkB2VzDGSlzi/z9LQ7UhIvmdj9/GxnRDxday
bDKXy1o2SjBF2Ic/VhlSRob/jP4B9M/PmD3xOfT8kWdZ9hXjdQCaZ5Zvq0ivMT9K
YCdedLCy9l9/2iTMeuo+Y6MR+zpKTUNKkWmw/nLI15xFw4Ar7LUZan1Y1xx8/Ks+
OhYW+3JWqcSnYc4qhPOvTMoAMXmDJsjBkLHRpbHcCWRUUTjOIuvgdhadvMonL3qk
kb5s9F7NXVAw5b0LxooEhN99TEK0dw==
-----END CERTIFICATE-----
Generated at Tue Sep 8 21:32:34 2026 by rpki-client