Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/54ad29b4-64ec-33b8-8ac4-9d73d9e9cd7a.roa
File:                     54ad29b4-64ec-33b8-8ac4-9d73d9e9cd7a.roa (raw, json)
Hash identifier:          fi5geh9pi5Q7X3BxPBVVGnAScVg2rP77oFHSvqlPtYU=
Subject key identifier:   E3:8B:B6:5D:58:5B:5B:65:54:FD:72:D5:B6:FA:E2:79:D3:35:14:0C
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584EF717613809AF5A1DF8F94A00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/54ad29b4-64ec-33b8-8ac4-9d73d9e9cd7a.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     19551
IP address blocks:        198.37.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:61:38:09:af:5a:1d:f8:f9:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=29db4dda-9b8a-4506-af2c-9315a0a40fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:98:95:6a:0c:de:7c:76:9d:75:b7:3a:25:
                    c6:33:8f:f8:a1:05:68:ad:d6:af:63:95:af:03:c0:
                    4e:d0:cb:58:e4:be:03:2e:80:96:33:ab:5f:4b:72:
                    6d:c1:dd:3b:15:cb:4f:7d:fd:75:7e:2a:cb:05:06:
                    35:0f:aa:14:2b:2d:4f:96:4f:c9:7d:03:f2:78:42:
                    34:db:85:16:97:3c:77:fc:c8:16:72:72:c4:ca:ca:
                    f4:f7:6b:e9:c7:ba:a0:ae:d1:44:7a:11:fb:d0:13:
                    6d:60:7f:5d:e4:a9:b9:e5:bb:b6:d0:54:73:7c:62:
                    7e:ae:24:37:1b:42:45:af:e4:6f:df:ae:95:22:34:
                    dd:29:c1:60:ae:a6:5d:15:9b:81:08:b4:22:2f:96:
                    bb:d4:fc:70:4e:5a:d6:5c:84:81:2b:6b:74:64:c6:
                    4b:b8:26:39:54:fd:e4:ae:e7:2a:95:c5:be:c9:39:
                    2e:a4:f4:90:75:bc:d4:98:49:96:43:4c:cf:f0:1c:
                    61:2e:18:8b:85:9e:fc:bc:f9:dd:c6:87:d7:1d:08:
                    43:ee:7e:82:02:83:e3:1c:a4:52:a1:a9:78:f1:a5:
                    22:77:22:88:40:e4:ad:86:8e:0d:86:57:de:57:3a:
                    a5:44:4f:e9:64:2b:ce:0b:d1:0e:06:ed:21:59:5e:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8B:B6:5D:58:5B:5B:65:54:FD:72:D5:B6:FA:E2:79:D3:35:14:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/54ad29b4-64ec-33b8-8ac4-9d73d9e9cd7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:fc:53:6d:7c:1b:af:bd:0e:2e:15:08:f8:55:dd:73:3b:
         95:25:e8:d4:f6:4b:72:24:fe:99:a4:6f:7b:88:c1:fa:2a:65:
         4e:33:e0:91:32:10:00:b1:59:c1:63:38:ea:bc:04:28:0d:99:
         fe:3c:1b:9b:b0:6b:01:60:2c:a3:45:f3:3e:76:3b:52:f5:16:
         82:e1:f7:bc:12:f3:5b:88:5e:e1:05:0f:d0:97:e0:fc:e7:17:
         0a:97:78:78:26:d5:35:0f:9d:7a:ce:2e:c1:17:29:f9:ba:d3:
         ec:18:e1:68:c9:27:5c:cb:ac:b6:7d:5c:27:5f:48:28:e5:79:
         04:98:00:af:a1:79:e2:83:22:ac:db:1f:dc:5a:b8:86:a2:ff:
         bb:b4:65:91:f5:a3:61:d9:a1:f6:b9:90:5a:ea:3d:4e:d9:4c:
         36:f1:3e:7a:f3:c6:92:d2:b9:aa:79:df:f0:18:92:38:9b:43:
         42:47:75:99:c9:26:f0:7c:57:3a:a2:55:82:78:94:34:e3:e1:
         76:6c:5b:c6:2a:ed:60:1f:fa:2a:56:99:71:c8:96:2f:18:99:
         33:35:45:26:bb:11:ea:10:c9:0c:60:93:41:a7:92:6a:49:d3:
         9d:2f:56:f6:5e:a2:18:30:62:75:8c:7a:9d:90:02:37:c1:50:
         6f:60:92:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2E4Ca9aHfj5SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
MjlkYjRkZGEtOWI4YS00NTA2LWFmMmMtOTMxNWEwYTQwZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLuYlWoM3nx2nXW3OiXGM4/4oQVordavY5Wv
A8BO0MtY5L4DLoCWM6tfS3Jtwd07FctPff11firLBQY1D6oUKy1Plk/JfQPyeEI0
24UWlzx3/MgWcnLEysr092vpx7qgrtFEehH70BNtYH9d5Km55bu20FRzfGJ+riQ3
G0JFr+Rv366VIjTdKcFgrqZdFZuBCLQiL5a71PxwTlrWXISBK2t0ZMZLuCY5VP3k
rucqlcW+yTkupPSQdbzUmEmWQ0zP8BxhLhiLhZ78vPndxofXHQhD7n6CAoPjHKRS
oal48aUidyKIQOStho4NhlfeVzqlRE/pZCvOC9EOBu0hWV7TewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOLtl1YW1tlVP1y1bb64nnTNRQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvNTRhZDI5YjQtNjRlYy0z
M2I4LThhYzQtOWQ3M2Q5ZTljZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiUxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu7/FNtfBuvvQ4uFQj4Vd1zO5Ul6NT2S3Ik/pmkb3uIwfoqZU4z4JEy
EACxWcFjOOq8BCgNmf48G5uwawFgLKNF8z52O1L1FoLh97wS81uIXuEFD9CX4Pzn
FwqXeHgm1TUPnXrOLsEXKfm60+wY4WjJJ1zLrLZ9XCdfSCjleQSYAK+heeKDIqzb
H9xauIai/7u0ZZH1o2HZofa5kFrqPU7ZTDbxPnrzxpLSuap53/AYkjibQ0JHdZnJ
JvB8VzqiVYJ4lDTj4XZsW8Yq7WAf+ipWmXHIli8YmTM1RSa7EeoQyQxgk0GnkmpJ
050vVvZeohgwYnWMep2QAjfBUG9gksE=
-----END CERTIFICATE-----
Generated at Sun Sep 13 19:42:38 2026 by rpki-client