Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa
File:                     594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa (raw, json)
Hash identifier:          wTLrYlKyYwfyd9Y9Of/RD/JmSzokEYSRnSy+IktYbGE=
Subject key identifier:   E6:62:72:FE:76:28:76:BB:55:86:11:EC:03:34:33:31:0F:7A:A0:A8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CC7188731A0125522CC60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        199.27.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:c7:18:87:31:a0:12:55:22:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=c736b313-edfb-4ef5-9ea2-5fb06b3bd298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:3e:de:55:1c:81:00:cd:c4:5f:5e:58:9f:
                    b0:2c:8a:df:34:f6:f2:f0:92:e1:cd:33:45:9e:96:
                    08:05:b0:7b:4a:fc:af:6d:0e:a3:34:1d:1c:b2:1f:
                    d9:50:44:92:d3:d2:fa:8f:dc:e0:21:b4:e8:80:d2:
                    ba:5b:ec:7e:f5:b4:79:14:8c:13:45:85:09:ac:e5:
                    c3:f5:86:cd:4e:4b:17:92:30:e2:ae:b6:2b:7b:cf:
                    5d:cb:12:6a:b2:ca:bd:10:19:7a:43:22:3a:1e:46:
                    d3:a4:72:b2:04:c5:f4:18:84:84:ea:07:33:36:05:
                    d6:86:08:d9:29:ad:d0:e2:8a:3e:68:d5:d9:ef:37:
                    b4:fc:ee:64:0b:4f:c6:f5:c6:1a:a3:b7:c3:c0:58:
                    a4:ff:c6:16:87:86:49:8d:44:ca:56:da:9e:fa:17:
                    80:ff:a4:b8:10:3e:68:d6:cd:1c:bc:30:24:5a:6d:
                    11:bb:87:7f:ca:84:50:c4:f0:1f:ab:cb:13:85:e0:
                    92:8f:6b:41:c1:c3:c8:61:1c:f3:78:22:2e:77:d5:
                    5e:46:82:20:3c:8b:40:77:0a:65:0e:bf:4e:78:1a:
                    47:b0:28:05:45:37:f8:29:87:d0:30:e2:89:bd:1b:
                    84:a8:a7:bb:73:ed:de:c9:fa:e5:e7:9d:5b:86:c4:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:72:FE:76:28:76:BB:55:86:11:EC:03:34:33:31:0F:7A:A0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:6c:3c:51:91:08:f7:da:4b:6f:05:50:da:5d:bb:db:a3:
         2c:17:4e:95:60:32:4e:ab:c0:88:14:74:7d:a2:a8:08:3d:a5:
         ea:e2:13:a2:e8:a1:fe:d0:15:6b:b5:33:b8:6a:b7:16:46:00:
         de:2d:18:2e:8d:67:0a:86:ff:46:f8:78:aa:e3:4e:68:df:25:
         bd:93:04:8d:5c:8e:7d:e8:df:c6:3f:5e:a7:65:41:cf:3e:4c:
         cd:c2:a6:4e:ee:1f:f4:2e:58:d9:12:80:b9:98:aa:68:a7:76:
         66:4b:1a:64:74:cd:bd:61:83:31:55:02:b7:e2:2b:c1:48:e6:
         13:8d:d3:1b:bf:b9:3b:9c:89:93:5f:71:c4:bc:6d:aa:a7:d8:
         74:2b:7e:c2:fb:82:55:86:13:a7:e9:09:91:f7:0d:9b:de:20:
         02:20:1d:60:e2:e9:37:ef:25:51:eb:7f:98:ef:ec:35:90:b9:
         1e:4c:59:43:7b:19:c7:04:62:9d:c4:22:6a:57:7d:43:35:6a:
         46:d9:76:86:38:a2:a6:4d:93:0f:c8:08:79:5e:c8:21:c0:cb:
         28:0b:82:e6:58:2c:24:9f:d1:1f:ce:d4:74:df:b5:98:73:5b:
         97:58:78:48:a8:57:17:dc:29:8f:86:48:c0:4d:21:05:47:88:
         b2:c4:c2:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMcYhzGgElUizGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
YzczNmIzMTMtZWRmYi00ZWY1LTllYTItNWZiMDZiM2JkMjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogc+3lUcgQDNxF9eWJ+wLIrfNPby8JLhzTNF
npYIBbB7SvyvbQ6jNB0csh/ZUESS09L6j9zgIbTogNK6W+x+9bR5FIwTRYUJrOXD
9YbNTksXkjDirrYre89dyxJqssq9EBl6QyI6HkbTpHKyBMX0GISE6gczNgXWhgjZ
Ka3Q4oo+aNXZ7ze0/O5kC0/G9cYao7fDwFik/8YWh4ZJjUTKVtqe+heA/6S4ED5o
1s0cvDAkWm0Ru4d/yoRQxPAfq8sTheCSj2tBwcPIYRzzeCIud9VeRoIgPItAdwpl
Dr9OeBpHsCgFRTf4KYfQMOKJvRuEqKe7c+3eyfrl551bhsQ7owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZicv52KHa7VYYR7AM0MzEPeqCoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTk0ZGJmMmItM2YyMC0z
ZDNmLWFmYjItYWU0ZGJiNjAwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEr1bDxRkQj32ktvBVDaXbvboywXTpVgMk6rwIgUdH2iqAg9periE6Lo
of7QFWu1M7hqtxZGAN4tGC6NZwqG/0b4eKrjTmjfJb2TBI1cjn3o38Y/XqdlQc8+
TM3Cpk7uH/QuWNkSgLmYqmindmZLGmR0zb1hgzFVArfiK8FI5hON0xu/uTuciZNf
ccS8baqn2HQrfsL7glWGE6fpCZH3DZveIAIgHWDi6TfvJVHrf5jv7DWQuR5MWUN7
GccEYp3EImpXfUM1akbZdoY4oqZNkw/ICHleyCHAyygLguZYLCSf0R/O1HTftZhz
W5dYeEioVxfcKY+GSMBNIQVHiLLEwhU=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:03 2026 by rpki-client