Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
File:                     c5885067-49f4-3a7f-bf2e-4f3c31808739.roa (raw, json)
Hash identifier:          d/G//1Y2ebEXqIuKfcdtcp84PAUApaXda7g3Atfen8w=
Subject key identifier:   5A:35:4D:FC:BF:50:0D:1F:6D:38:00:3D:C8:BF:03:F2:1D:B8:B5:88
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584ECBD1DB3B50E974F46B7EB5C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     25899
IP address blocks:        199.182.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:db:3b:50:e9:74:f4:6b:7e:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=4b489abf-520c-4caa-a493-613891ad79ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:53:00:d5:fc:f8:cf:65:12:4c:45:3d:ad:
                    8d:0e:ce:b5:cc:ee:85:93:b3:9d:f6:a8:ee:57:40:
                    e6:05:9b:a9:9e:7f:8e:8a:41:58:6c:9a:7c:cd:be:
                    34:64:6e:ec:44:a5:8a:2f:74:fd:30:4a:92:7f:c4:
                    30:39:96:ec:f8:c5:d6:66:bb:39:f7:73:2a:20:2a:
                    e3:16:eb:a7:48:49:c2:cd:77:1a:28:09:91:99:b5:
                    c0:54:07:d9:36:4f:2f:79:ff:fc:3f:93:b6:8e:36:
                    8d:7e:14:d8:85:b8:97:2b:1f:af:71:08:1d:ea:54:
                    cd:7f:60:73:dc:c0:47:d1:67:3e:ce:1c:af:44:ee:
                    ae:1b:34:48:62:36:12:57:45:95:e4:ad:d0:7b:12:
                    bf:23:0d:55:b8:7c:d6:4e:e4:77:99:a3:bd:de:42:
                    b5:8c:11:46:29:07:aa:24:15:ba:63:66:10:ba:a7:
                    60:30:82:d2:fa:e1:e4:35:b2:9c:38:e0:20:16:b0:
                    7a:38:10:7b:09:02:9d:a6:ae:b2:70:33:8c:a4:64:
                    1b:0f:04:fd:49:5f:3e:c1:8d:22:13:de:0b:29:9d:
                    5b:45:95:68:33:04:e8:7d:97:83:0a:58:69:dd:25:
                    95:e5:bb:45:a6:87:7c:11:03:5a:b2:25:f3:64:22:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:35:4D:FC:BF:50:0D:1F:6D:38:00:3D:C8:BF:03:F2:1D:B8:B5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:9b:94:94:7a:35:da:67:fa:12:1a:c9:ed:58:14:ac:ef:
         69:ea:1a:bc:ae:ab:cc:4e:14:13:50:69:43:de:e6:98:b0:24:
         a5:61:0f:37:1f:92:0a:85:63:58:ce:13:d2:b4:53:cd:8f:75:
         26:f4:92:b6:64:ce:92:a8:84:44:15:ae:ac:32:9e:e4:35:af:
         81:76:66:cf:a0:78:1f:66:45:0a:72:80:a7:c3:c8:c0:00:71:
         18:03:4d:64:5b:39:a8:c7:ef:cf:a5:fa:4e:6b:61:a9:7e:8c:
         89:e5:31:bb:87:76:98:db:12:05:a7:84:f2:c0:48:8b:c8:b8:
         94:47:fd:56:01:b5:c2:9b:bc:d2:68:e0:12:30:06:85:cb:3d:
         5f:9d:8d:0d:5a:25:e1:d4:4d:9f:5d:11:b3:16:04:b0:ac:b8:
         37:ef:ee:b4:18:0a:41:58:82:8e:82:90:ed:7a:5c:4c:38:7d:
         c3:df:60:cd:ce:bc:35:6d:c1:e2:7f:e3:3e:bd:a7:e8:3a:85:
         bc:ff:44:48:08:c4:c3:6f:ef:ba:91:47:eb:95:0c:48:f2:46:
         b5:9d:27:f8:3b:62:7b:37:63:89:d4:bf:a5:b0:86:a7:91:1d:
         31:6b:db:66:93:0a:40:1f:6c:76:40:16:f3:a0:b9:bc:f8:b6:
         58:bb:01:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0ds7UOl09Gt+tcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
NGI0ODlhYmYtNTIwYy00Y2FhLWE0OTMtNjEzODkxYWQ3OWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmktTANX8+M9lEkxFPa2NDs61zO6Fk7Od9qju
V0DmBZupnn+OikFYbJp8zb40ZG7sRKWKL3T9MEqSf8QwOZbs+MXWZrs593MqICrj
FuunSEnCzXcaKAmRmbXAVAfZNk8vef/8P5O2jjaNfhTYhbiXKx+vcQgd6lTNf2Bz
3MBH0Wc+zhyvRO6uGzRIYjYSV0WV5K3QexK/Iw1VuHzWTuR3maO93kK1jBFGKQeq
JBW6Y2YQuqdgMILS+uHkNbKcOOAgFrB6OBB7CQKdpq6ycDOMpGQbDwT9SV8+wY0i
E94LKZ1bRZVoMwTofZeDClhp3SWV5btFpod8EQNasiXzZCIEZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFo1Tfy/UA0fbTgAPci/A/IduLWIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYzU4ODUwNjctNDlmNC0z
YTdmLWJmMmUtNGYzYzMxODA4NzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7bIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuAm5SUejXaZ/oSGsntWBSs72nqGryuq8xOFBNQaUPe5piwJKVhDzcf
kgqFY1jOE9K0U82PdSb0krZkzpKohEQVrqwynuQ1r4F2Zs+geB9mRQpygKfDyMAA
cRgDTWRbOajH78+l+k5rYal+jInlMbuHdpjbEgWnhPLASIvIuJRH/VYBtcKbvNJo
4BIwBoXLPV+djQ1aJeHUTZ9dEbMWBLCsuDfv7rQYCkFYgo6CkO16XEw4fcPfYM3O
vDVtweJ/4z69p+g6hbz/REgIxMNv77qRR+uVDEjyRrWdJ/g7Yns3Y4nUv6WwhqeR
HTFr22aTCkAfbHZAFvOgubz4tli7AZo=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:24:18 2026 by rpki-client