Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa
File:                     b90f3189-2f92-330b-88a6-55af6118e67a.roa (raw, json)
Hash identifier:          AuNIzAFmsCnqZMQrqrt+K5GLOOkb+aJ59kF8mqBUgp4=
Subject key identifier:   D7:8C:98:07:F6:AD:8F:AA:E2:35:CC:5D:04:64:9E:99:54:B9:8C:04
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584EAD1C524DDA0197621799B8C0
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     19605
IP address blocks:        205.233.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:52:4d:da:01:97:62:17:99:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=05f9cdb3-d171-4856-8a34-0c147997d274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:ef:04:b2:7b:30:ec:51:0e:f4:40:40:dd:
                    7c:4b:f2:7d:f4:30:6d:95:b2:e5:ea:0e:21:f8:bc:
                    59:25:3d:87:3f:30:cd:40:ca:08:46:21:fa:04:12:
                    16:21:aa:b2:42:86:8c:51:e5:52:b8:97:8d:1a:62:
                    94:14:2e:f2:ed:40:51:14:6a:e0:62:1f:8e:e5:4e:
                    a6:1f:78:cf:7a:80:08:55:c9:da:b0:06:c4:e0:7d:
                    8c:86:69:40:aa:82:9e:ec:66:7e:e3:67:67:ed:85:
                    13:54:0e:58:c2:3a:be:2e:98:74:4e:d7:9b:47:73:
                    6e:eb:b5:7e:fb:85:26:5a:04:f2:16:36:83:a3:b2:
                    b3:94:ed:e2:d7:dc:46:7d:e3:80:71:10:15:e6:a9:
                    0e:01:ef:29:b7:b7:62:90:9b:0a:07:42:33:ae:40:
                    a5:e5:34:3d:76:c9:26:63:48:0c:00:59:bc:39:f3:
                    27:72:78:e0:f7:6e:97:d8:95:6c:64:e2:7e:66:c5:
                    6e:8d:0c:8e:db:8f:88:95:f2:3e:d6:e5:97:41:77:
                    f6:c3:cd:10:1f:3a:ba:85:7b:7a:c5:71:4d:68:7b:
                    3a:79:af:18:d8:26:04:91:e6:be:bc:e9:cb:1b:a2:
                    fd:c9:ac:8b:4b:60:5c:26:df:f2:60:73:13:75:7b:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8C:98:07:F6:AD:8F:AA:E2:35:CC:5D:04:64:9E:99:54:B9:8C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:fa:58:f7:9d:eb:46:5b:96:58:50:0e:d7:f6:69:d3:0d:e2:
         16:52:3a:ca:0e:6c:e3:e1:55:b4:36:93:6e:cb:93:c6:e9:30:
         25:c6:ff:e5:45:38:db:b4:8b:13:76:3d:2a:96:10:64:8e:4a:
         19:3c:6e:b2:0b:97:7d:fb:0a:cc:85:2b:c2:b0:70:ba:8b:7a:
         da:e3:46:19:84:70:b6:68:16:9b:e1:93:7b:7b:f3:3c:4f:3c:
         72:96:55:f7:b6:c4:46:c9:78:92:0b:42:c8:d6:02:8c:5c:5d:
         68:0f:b0:2d:b9:50:7f:a9:9d:31:28:2d:73:51:7c:8d:7d:f9:
         97:7c:21:f1:83:c0:74:fa:25:3e:1b:74:1d:a3:4e:c3:6e:2e:
         23:f0:28:5f:54:d3:a6:fc:4c:04:56:30:be:88:85:cf:d6:83:
         ce:3e:b4:07:90:d0:12:d8:ce:01:87:85:77:94:91:77:82:48:
         40:81:97:6d:e4:3f:22:53:a2:6f:c9:97:3a:15:a4:7d:b1:09:
         34:ef:cb:70:fa:ed:e0:22:fb:85:a4:da:cb:23:b8:57:4f:da:
         03:83:f9:36:85:45:c2:de:74:1a:36:db:22:b0:c7:1d:e8:09:
         ec:96:cc:4d:67:dd:40:3d:7f:87:a9:66:ff:c7:16:2e:ae:05:
         41:a9:80:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFJN2gGXYheZuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1ZmMtY2QzMjE3MDQ5
ZjI3MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
MDVmOWNkYjMtZDE3MS00ODU2LThhMzQtMGMxNDc5OTdkMjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEHvBLJ7MOxRDvRAQN18S/J99DBtlbLl6g4h
+LxZJT2HPzDNQMoIRiH6BBIWIaqyQoaMUeVSuJeNGmKUFC7y7UBRFGrgYh+O5U6m
H3jPeoAIVcnasAbE4H2MhmlAqoKe7GZ+42dn7YUTVA5Ywjq+Lph0TtebR3Nu67V+
+4UmWgTyFjaDo7KzlO3i19xGfeOAcRAV5qkOAe8pt7dikJsKB0IzrkCl5TQ9dskm
Y0gMAFm8OfMncnjg926X2JVsZOJ+ZsVujQyO24+IlfI+1uWXQXf2w80QHzq6hXt6
xXFNaHs6ea8Y2CYEkea+vOnLG6L9yayLS2BcJt/yYHMTdXsdowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeMmAf2rY+q4jXMXQRknplUuYwEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0
NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMyMTcwNDlmMjcvYjkwZjMxODktMmY5Mi0z
MzBiLTg4YTYtNTVhZjYxMThlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1
ZmMtY2QzMjE3MDQ5ZjI3L2E5ZDQ0OWZhLWYwOGUtNDE3MC05NWZjLWNkMzIxNzA0
OWYyNy5jcmwwHwYDVR0jBBgwFoAUEvt9fLdBASMWWGp5WhOQ7yMZNI0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMy
MTcwNDlmMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzeksMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMP6WPed60ZbllhQDtf2adMN4hZSOsoObOPhVbQ2k27Lk8bpMCXG/+VF
ONu0ixN2PSqWEGSOShk8brILl337CsyFK8KwcLqLetrjRhmEcLZoFpvhk3t78zxP
PHKWVfe2xEbJeJILQsjWAoxcXWgPsC25UH+pnTEoLXNRfI19+Zd8IfGDwHT6JT4b
dB2jTsNuLiPwKF9U06b8TARWML6Ihc/Wg84+tAeQ0BLYzgGHhXeUkXeCSECBl23k
PyJTom/JlzoVpH2xCTTvy3D67eAi+4Wk2ssjuFdP2gOD+TaFRcLedBo22yKwxx3o
CeyWzE1n3UA9f4epZv/HFi6uBUGpgL8=
-----END CERTIFICATE-----
Generated at Sun Sep 13 12:57:35 2026 by rpki-client