Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/d2418aec-7a93-3789-881e-6e9bb35e157e.roa
File:                     d2418aec-7a93-3789-881e-6e9bb35e157e.roa (raw, json)
Hash identifier:          QxwJKeRrscfJNqlHztl6Rhns7Dp+SvZ+xH197JQZviE=
Subject key identifier:   10:18:B7:08:E6:89:31:B3:2A:3D:F0:D1:80:97:A2:F0:87:45:CE:2E
Certificate issuer:       /CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a
Certificate serial:       010D0C9F4328584F7FE2FF7BB7D7370885D155C0
Authority key identifier: 37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/d2418aec-7a93-3789-881e-6e9bb35e157e.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     46887
IP address blocks:        198.98.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ff:7b:b7:d7:37:08:85:d1:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=13710cad-fd6d-4b9e-a9a0-f231b3d913f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:42:65:9c:3f:ac:b4:7a:ab:ee:13:52:8f:
                    7c:02:64:7c:a4:fb:6a:c6:67:15:99:5f:5e:9c:e6:
                    c9:c0:41:ac:7e:55:44:92:a4:37:a0:c8:be:7c:79:
                    05:0e:3e:f7:a4:74:68:e1:96:3e:b0:09:ec:4c:f8:
                    d9:ac:aa:52:8a:7f:21:59:d8:d8:02:ee:0e:e2:ba:
                    62:c8:6d:45:82:4f:7e:5e:c7:c3:a8:1c:32:2a:9f:
                    8f:db:00:35:23:6f:9b:32:f3:22:51:3a:b3:81:a1:
                    d4:79:2b:b2:a5:a2:36:f5:61:a5:71:20:ad:9f:f7:
                    01:73:fd:26:93:ea:b9:67:23:ef:7a:c9:c5:63:7a:
                    d5:41:a7:2d:f5:f1:6d:82:1b:46:01:0b:26:45:c5:
                    dc:f0:09:fe:99:28:69:fd:21:8e:a6:8b:7f:2c:17:
                    3b:68:c6:5a:5c:68:a1:65:2e:f9:f7:3d:4e:93:70:
                    17:32:5a:f0:66:0b:6c:8c:ff:b8:43:06:5c:c3:ee:
                    9b:00:74:ef:aa:25:95:cc:5d:a5:ba:43:e3:eb:8a:
                    df:63:84:97:e5:f9:ba:36:76:fc:3f:b5:03:4d:60:
                    26:82:90:8a:b2:d6:f0:f2:54:93:00:78:6b:68:0b:
                    14:2e:de:5c:45:7d:2d:34:f6:ba:2e:50:a4:8e:3c:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:B7:08:E6:89:31:B3:2A:3D:F0:D1:80:97:A2:F0:87:45:CE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/d2418aec-7a93-3789-881e-6e9bb35e157e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl

            X509v3 Authority Key Identifier:
                keyid:37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.98.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:86:52:a2:89:32:2e:1c:00:d4:a7:bf:63:14:75:69:9e:b3:
         c5:23:47:61:05:9c:cb:84:8a:0d:07:1d:3d:da:4d:60:d6:19:
         63:c3:01:0d:51:9e:ac:a2:a1:13:2a:38:ab:b2:95:bc:a8:ad:
         41:db:d1:24:c8:32:1e:11:eb:b2:19:17:45:15:e8:0c:f2:e7:
         10:47:8b:af:f9:ab:b2:bc:b2:b3:53:15:17:81:4c:f5:42:b1:
         b6:eb:2f:61:42:40:b3:27:bd:02:cf:ad:6b:82:1e:9c:3b:e5:
         96:95:6a:e0:99:2d:71:0f:ab:3d:ce:fd:6f:fc:eb:d1:4a:79:
         60:7b:cb:63:97:8b:d1:f1:e1:1b:84:e0:58:24:6d:59:d0:af:
         5a:91:58:8e:76:0f:f7:fa:9b:a0:a7:b7:6a:82:21:22:ea:5f:
         65:6a:b3:42:65:ab:bc:71:a1:06:f2:d5:a3:c7:44:06:78:77:
         ea:46:6d:84:85:c0:de:25:9a:81:0c:48:4a:e1:0c:c4:ef:0c:
         7f:9d:c3:5b:ce:05:d2:9a:d0:93:2e:9f:c6:a1:58:57:5d:60:
         5e:ed:60:12:b3:e2:c0:7e:a0:11:d2:45:85:17:6c:19:88:74:
         dc:d6:1b:e2:af:3f:80:40:23:1e:fe:c0:a9:25:a3:d0:7c:8a:
         1b:23:5e:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4v97t9c3CIXRVcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ZkOTYwYWItOWFmNi00N2UyLWEyOGQtNjIzYjdkNGNl
ZDZhMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
MTM3MTBjYWQtZmQ2ZC00YjllLWE5YTAtZjIzMWIzZDkxM2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/xCZZw/rLR6q+4TUo98AmR8pPtqxmcVmV9e
nObJwEGsflVEkqQ3oMi+fHkFDj73pHRo4ZY+sAnsTPjZrKpSin8hWdjYAu4O4rpi
yG1Fgk9+XsfDqBwyKp+P2wA1I2+bMvMiUTqzgaHUeSuypaI29WGlcSCtn/cBc/0m
k+q5ZyPvesnFY3rVQact9fFtghtGAQsmRcXc8An+mShp/SGOpot/LBc7aMZaXGih
ZS759z1Ok3AXMlrwZgtsjP+4QwZcw+6bAHTvqiWVzF2lukPj64rfY4SX5fm6Nnb8
P7UDTWAmgpCKstbw8lSTAHhraAsULt5cRX0tNPa6LlCkjjzMTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAYtwjmiTGzKj3w0YCXovCHRc4uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5
NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNiN2Q0Y2VkNmEvZDI0MThhZWMtN2E5My0z
Nzg5LTg4MWUtNmU5YmIzNWUxNTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ZkOTYwYWItOWFmNi00N2UyLWEy
OGQtNjIzYjdkNGNlZDZhLzNmZDk2MGFiLTlhZjYtNDdlMi1hMjhkLTYyM2I3ZDRj
ZWQ2YS5jcmwwHwYDVR0jBBgwFoAUNxMbooWnBA3GnpfGqlb+qDu1BsIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNi
N2Q0Y2VkNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxmIWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmGUqKJMi4cANSnv2MUdWmes8UjR2EFnMuEig0HHT3aTWDWGWPDAQ1R
nqyioRMqOKuylbyorUHb0STIMh4R67IZF0UV6Azy5xBHi6/5q7K8srNTFReBTPVC
sbbrL2FCQLMnvQLPrWuCHpw75ZaVauCZLXEPqz3O/W/869FKeWB7y2OXi9Hx4RuE
4FgkbVnQr1qRWI52D/f6m6Cnt2qCISLqX2Vqs0Jlq7xxoQby1aPHRAZ4d+pGbYSF
wN4lmoEMSErhDMTvDH+dw1vOBdKa0JMun8ahWFddYF7tYBKz4sB+oBHSRYUXbBmI
dNzWG+KvP4BAIx7+wKklo9B8ihsjXus=
-----END CERTIFICATE-----
Generated at Thu Oct 29 02:17:15 2026 by rpki-client