Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File:                     e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier:          M5HWSEVUgNx37xSAGClnewoQayg4H8E08g40wLsahPI=
Subject key identifier:   11:80:FD:8E:D5:4A:FD:DB:C6:70:1E:38:9B:F6:46:D9:4F:65:89:96
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584EED5219B94B645697842778F0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     394437
IP address blocks:        198.35.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:19:b9:4b:64:56:97:84:27:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=59ff8d9d-efcc-4324-9b81-8480fe093582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:95:14:13:ea:59:00:a4:d6:09:41:e4:42:
                    31:61:ef:1c:0c:23:fe:02:39:1f:55:25:e0:49:c3:
                    9a:2a:cc:1f:99:eb:a3:53:06:57:5c:11:a8:83:70:
                    43:8a:1b:02:b1:98:4b:af:ef:b3:ff:e7:de:f3:8c:
                    f6:fd:54:a3:b6:46:8a:db:cb:80:dc:f1:36:15:c8:
                    1f:b0:3d:8e:7f:df:18:a4:99:9e:87:13:af:30:d9:
                    09:9d:2f:6e:1d:8e:47:d1:cb:47:64:f1:7a:07:21:
                    c3:44:cc:96:04:31:92:ec:f3:22:0e:8d:10:bb:3d:
                    a2:6f:20:77:28:d8:44:58:49:a1:e8:6a:9e:6c:1b:
                    9e:57:31:a7:51:f3:1c:af:ee:48:c4:3e:ed:08:66:
                    91:c4:a6:f8:1f:bb:fc:58:6b:36:14:05:8a:5b:d5:
                    0d:fe:fd:41:fe:28:46:bb:e9:8f:3c:cc:f8:91:dc:
                    be:24:b3:23:8a:20:13:96:d4:be:33:e1:f9:37:e8:
                    05:76:9b:26:92:cc:f8:aa:ad:ae:28:97:ff:1b:74:
                    5b:a4:51:ee:e2:51:84:a5:f9:de:30:27:51:10:76:
                    86:ab:25:a9:b6:09:d8:4d:e0:9c:5e:d4:3a:e6:b4:
                    91:27:4e:eb:e9:7b:60:33:50:e6:60:3e:f7:29:dc:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:FD:8E:D5:4A:FD:DB:C6:70:1E:38:9B:F6:46:D9:4F:65:89:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:b3:d4:cf:c7:b6:24:b7:74:b5:0f:39:84:1b:fa:79:52:a6:
         70:c5:5c:62:56:52:10:7f:17:31:2d:68:1e:16:bd:3c:86:3a:
         86:42:58:d4:0f:3f:ab:44:f5:5f:f0:90:08:46:63:11:42:9f:
         00:21:75:4b:10:79:b5:83:09:45:6d:9c:47:16:af:4f:5d:4c:
         1f:65:ce:e9:ff:0a:c8:4b:87:0a:52:63:8a:86:a2:8f:ac:1f:
         00:1c:64:81:a3:c8:99:c5:ee:51:ed:29:80:4f:4d:d3:71:9c:
         6b:f7:c0:b3:82:36:d0:27:ab:3c:de:c1:fb:be:83:3e:d1:d8:
         c9:5c:d2:29:ee:c9:35:6e:35:b9:cc:69:47:bf:31:28:f8:89:
         7e:99:95:49:c6:8f:eb:51:ce:35:69:e3:84:e8:49:84:66:6e:
         60:9a:1f:7b:7a:2c:41:28:4e:84:88:34:77:df:a2:cd:dc:ca:
         37:22:e8:e4:a6:42:3d:7a:1c:4e:5e:5d:75:84:7b:72:a5:02:
         37:57:ad:9d:98:85:e8:81:7e:b7:c7:f6:21:ff:be:fb:f1:04:
         2e:a8:bf:76:e8:15:52:ad:60:56:62:47:1c:7e:bb:fc:3f:ff:
         98:69:29:04:3f:a1:4a:ea:d8:00:e2:88:42:77:95:d9:ab:84:
         09:43:e1:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhm5S2RWl4QnePAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NTlmZjhkOWQtZWZjYy00MzI0LTliODEtODQ4MGZlMDkzNTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYCVFBPqWQCk1glB5EIxYe8cDCP+AjkfVSXg
ScOaKswfmeujUwZXXBGog3BDihsCsZhLr++z/+fe84z2/VSjtkaK28uA3PE2Fcgf
sD2Of98YpJmehxOvMNkJnS9uHY5H0ctHZPF6ByHDRMyWBDGS7PMiDo0Quz2ibyB3
KNhEWEmh6GqebBueVzGnUfMcr+5IxD7tCGaRxKb4H7v8WGs2FAWKW9UN/v1B/ihG
u+mPPMz4kdy+JLMjiiATltS+M+H5N+gFdpsmksz4qq2uKJf/G3RbpFHu4lGEpfne
MCdREHaGqyWptgnYTeCcXtQ65rSRJ07r6XtgM1DmYD73KdzKjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGA/Y7VSv3bxnAeOJv2RtlPZYmWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvZTVmODQ1MWUtZmU1My0z
ZDliLTg1YjgtYTA0Yjc4NjI3MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANOz1M/HtiS3dLUPOYQb+nlSpnDFXGJWUhB/FzEtaB4WvTyGOoZCWNQP
P6tE9V/wkAhGYxFCnwAhdUsQebWDCUVtnEcWr09dTB9lzun/CshLhwpSY4qGoo+s
HwAcZIGjyJnF7lHtKYBPTdNxnGv3wLOCNtAnqzzewfu+gz7R2Mlc0inuyTVuNbnM
aUe/MSj4iX6ZlUnGj+tRzjVp44ToSYRmbmCaH3t6LEEoToSINHffos3cyjci6OSm
Qj16HE5eXXWEe3KlAjdXrZ2YheiBfrfH9iH/vvvxBC6ov3boFVKtYFZiRxx+u/w/
/5hpKQQ/oUrq2ADiiEJ3ldmrhAlD4SI=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:23 2026 by rpki-client