Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/22defebf-c20f-3310-8935-55fd8e1083a7.roa
File:                     22defebf-c20f-3310-8935-55fd8e1083a7.roa (raw, json)
Hash identifier:          vZPBSoqtlNooAo9t6bGbmyP81fedKnX48ZHvYTAz6i8=
Subject key identifier:   E9:6D:DB:2E:23:52:55:22:4B:26:52:5E:EB:B9:E6:5A:FC:EC:43:49
Certificate issuer:       /CN=3378215f-2bb2-4f2b-9dbc-a26372e745dc
Certificate serial:       010D0C9F4328584F6AED9E5F156FD21D6B3F0F80
Authority key identifier: 33:4B:55:1C:85:E1:A0:C7:AE:CD:00:49:56:D4:E5:80:19:81:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/22defebf-c20f-3310-8935-55fd8e1083a7.roa
Signing time:             Wed 07 Oct 2026 00:49:54 +0000
ROA not before:           Wed 07 Oct 2026 00:49:54 +0000
ROA not after:            Tue 05 Jan 2027 01:49:54 +0000
asID:                     402919
IP address blocks:        199.89.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/3378215f-2bb2-4f2b-9dbc-a26372e745dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/3378215f-2bb2-4f2b-9dbc-a26372e745dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:ed:9e:5f:15:6f:d2:1d:6b:3f:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3378215f-2bb2-4f2b-9dbc-a26372e745dc
        Validity
            Not Before: Oct  7 00:49:54 2026 GMT
            Not After : Jan  5 01:49:54 2027 GMT
        Subject: CN=5753effb-4f36-4800-b594-76c89725ad18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:9b:26:c7:43:66:be:32:c2:2a:44:34:84:
                    8f:16:5a:6c:4a:22:f8:8a:37:b2:10:7a:28:14:ed:
                    23:f6:72:c9:76:42:90:dd:31:ac:cb:6a:68:e8:45:
                    33:ff:0c:b9:1d:f7:1f:07:e9:c7:d1:85:ac:39:2c:
                    32:9e:a5:2c:f6:ce:6f:8d:64:2f:44:75:74:1f:5c:
                    5e:e1:7f:0e:9f:b3:71:17:bc:2d:7b:fd:ed:50:33:
                    9f:50:08:f7:6f:b9:b0:50:1e:b1:f9:e7:10:23:6e:
                    8f:cf:c1:ac:ed:73:79:d4:b3:26:aa:12:99:52:e3:
                    7a:35:1a:ef:80:8f:75:aa:00:f8:3d:c4:5b:db:b2:
                    f8:fe:54:8b:a7:3d:bc:91:c6:f5:5d:b9:23:e3:7b:
                    e4:95:96:49:e8:74:f2:a6:d2:fc:8a:37:e3:1a:d0:
                    b3:8a:3f:c7:00:cc:25:46:2d:c4:29:18:eb:7b:c7:
                    dc:aa:e8:ab:19:5d:d2:48:c6:6c:e8:d5:37:e0:b7:
                    47:70:97:f2:16:dd:c7:ec:5e:7f:c9:19:5c:ef:71:
                    bc:f2:50:a7:09:9b:97:73:0a:24:39:56:be:ba:d4:
                    ef:fc:9f:ee:4b:e7:f4:30:4e:b3:c1:1b:f7:28:13:
                    87:74:e9:66:6c:cc:66:92:c9:1f:24:56:99:1a:69:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6D:DB:2E:23:52:55:22:4B:26:52:5E:EB:B9:E6:5A:FC:EC:43:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/22defebf-c20f-3310-8935-55fd8e1083a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/3378215f-2bb2-4f2b-9dbc-a26372e745dc.crl

            X509v3 Authority Key Identifier:
                keyid:33:4B:55:1C:85:E1:A0:C7:AE:CD:00:49:56:D4:E5:80:19:81:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:15:53:97:03:49:25:24:67:5e:35:b7:74:ef:af:99:5a:04:
         0a:07:04:a1:b6:07:9e:13:4d:a8:13:6d:69:dd:2b:62:92:c4:
         bd:09:84:d0:89:3a:c9:fc:41:99:bd:cb:94:07:f6:65:53:b6:
         27:2f:ce:4a:fe:36:4e:f4:7f:06:05:87:6f:3f:08:70:a3:5c:
         9e:1f:53:33:84:28:bb:e8:99:b6:a3:4e:d6:2b:a9:48:5c:dd:
         85:15:74:9c:5d:2e:80:14:07:fb:01:72:82:c1:ab:83:52:91:
         fa:0a:f6:0d:c2:46:c4:54:86:88:53:00:d0:42:78:ea:42:53:
         a2:20:0f:2e:c4:b4:f5:fa:f4:d0:e6:50:6c:fd:97:85:9d:5f:
         4f:89:9a:9f:e7:fd:24:d7:dc:b0:c1:19:55:65:e4:ec:3e:ff:
         6f:49:32:06:91:50:d5:66:1a:e0:c7:aa:c3:63:7a:30:e7:85:
         6b:ab:b2:ba:f2:ba:dc:56:df:f7:f0:f7:42:e9:af:26:2d:4e:
         fc:9a:84:09:61:33:fa:15:18:c8:f6:e2:14:9c:09:c2:1a:e4:
         01:d7:34:9f:25:34:8e:e1:82:0c:0c:e6:60:29:ba:c0:fe:4e:
         fb:9e:c4:c3:13:aa:bd:87:ee:64:71:d2:42:6e:8f:24:5e:f2:
         00:f2:46:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9q7Z5fFW/SHWs/D4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3ODIxNWYtMmJiMi00ZjJiLTlkYmMtYTI2MzcyZTc0
NWRjMB4XDTI2MTAwNzAwNDk1NFoXDTI3MDEwNTAxNDk1NFowLzEtMCsGA1UEAxMk
NTc1M2VmZmItNGYzNi00ODAwLWI1OTQtNzZjODk3MjVhZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHqbJsdDZr4ywipENISPFlpsSiL4ijeyEHoo
FO0j9nLJdkKQ3TGsy2po6EUz/wy5HfcfB+nH0YWsOSwynqUs9s5vjWQvRHV0H1xe
4X8On7NxF7wte/3tUDOfUAj3b7mwUB6x+ecQI26Pz8Gs7XN51LMmqhKZUuN6NRrv
gI91qgD4PcRb27L4/lSLpz28kcb1Xbkj43vklZZJ6HTyptL8ijfjGtCzij/HAMwl
Ri3EKRjre8fcquirGV3SSMZs6NU34LdHcJfyFt3H7F5/yRlc73G88lCnCZuXcwok
OVa+utTv/J/uS+f0ME6zwRv3KBOHdOlmbMxmkskfJFaZGmn/7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlt2y4jUlUiSyZSXuu55lr87ENJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zMzc4
MjE1Zi0yYmIyLTRmMmItOWRiYy1hMjYzNzJlNzQ1ZGMvMjJkZWZlYmYtYzIwZi0z
MzEwLTg5MzUtNTVmZDhlMTA4M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzM3ODIxNWYtMmJiMi00ZjJiLTlk
YmMtYTI2MzcyZTc0NWRjLzMzNzgyMTVmLTJiYjItNGYyYi05ZGJjLWEyNjM3MmU3
NDVkYy5jcmwwHwYDVR0jBBgwFoAUM0tVHIXhoMeuzQBJVtTlgBmBjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi8zMzc4MjE1Zi0yYmIyLTRmMmItOWRiYy1hMjYz
NzJlNzQ1ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1moMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkVU5cDSSUkZ141t3Tvr5laBAoHBKG2B54TTagTbWndK2KSxL0JhNCJ
Osn8QZm9y5QH9mVTticvzkr+Nk70fwYFh28/CHCjXJ4fUzOEKLvombajTtYrqUhc
3YUVdJxdLoAUB/sBcoLBq4NSkfoK9g3CRsRUhohTANBCeOpCU6IgDy7EtPX69NDm
UGz9l4WdX0+Jmp/n/STX3LDBGVVl5Ow+/29JMgaRUNVmGuDHqsNjejDnhWursrry
utxW3/fw90LpryYtTvyahAlhM/oVGMj24hScCcIa5AHXNJ8lNI7hggwM5mApusD+
TvuexMMTqr2H7mRx0kJujyRe8gDyRpw=
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:28:32 2026 by rpki-client