Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa
File:                     25c41bce-b5c1-3b2a-b684-645e9a83a595.roa (raw, json)
Hash identifier:          HGxkCHbQtpdXh2R6mDjp/txZV1USTuoZcicnRJjmBhY=
Subject key identifier:   4F:57:59:C9:0D:56:4A:6B:D2:3B:59:23:2A:A9:8F:FA:1C:71:39:58
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584D8EF586C31D567E91610A1B40
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     4181
IP address blocks:        198.150.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:86:c3:1d:56:7e:91:61:0a:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=de5b7c2e-cdc0-4d11-9eed-9ab491027d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:f2:c5:58:04:58:ab:0d:e9:87:a3:c3:40:
                    36:ab:ce:68:74:3d:b3:f1:30:b9:e3:b8:3a:49:3a:
                    63:8b:74:5c:5a:c8:c4:ea:50:e5:ac:2a:07:e7:89:
                    cb:9d:8b:85:2e:28:a6:ec:10:73:ab:74:09:4c:3e:
                    a5:3c:59:5d:21:66:a6:0c:70:14:f5:f8:e1:f4:14:
                    16:b1:95:2d:8f:e6:89:ff:c1:c8:99:dd:93:98:84:
                    40:3b:50:87:2a:b7:76:f5:ad:14:03:b4:a6:78:5c:
                    50:ac:9a:2e:7d:c5:81:bf:9a:5c:7d:d5:65:81:cf:
                    25:02:84:f3:fd:c9:73:94:0e:8c:97:0e:d5:10:db:
                    54:33:b8:fd:56:f4:77:ca:1f:1b:5c:d3:29:aa:52:
                    f8:dc:29:15:a7:bf:b4:c1:1c:57:02:6d:e1:16:f2:
                    25:56:d0:ca:5c:f0:c0:b5:84:b9:e4:1d:fe:71:c7:
                    5e:48:27:35:50:af:59:0b:77:6b:60:ee:24:5c:93:
                    c8:90:5f:25:e5:e7:84:80:5f:0e:48:d3:56:4c:05:
                    5d:ac:a5:a2:f1:91:f7:6e:5f:82:3b:fe:08:32:a4:
                    ad:be:64:65:ed:e7:ef:c5:1b:d1:32:2d:f4:9d:db:
                    4a:7f:2d:e2:2b:d5:92:b8:6b:0d:ae:32:e2:77:b2:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:57:59:C9:0D:56:4A:6B:D2:3B:59:23:2A:A9:8F:FA:1C:71:39:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:95:b1:24:e8:a7:93:0b:f5:1a:ae:1e:10:f2:46:c0:fb:
         61:a0:40:c9:2d:3d:0d:28:a0:c3:c7:f1:ce:d0:fd:17:10:57:
         4b:23:4e:d1:7a:fd:ce:45:8d:ca:c5:fe:84:9a:ae:60:3b:aa:
         74:74:22:e2:64:8b:be:85:18:4b:46:d7:8b:b4:ed:c6:b3:c9:
         15:98:16:d3:a6:4d:12:37:ea:0e:5b:2e:64:1b:eb:98:db:4c:
         8b:fa:ed:b6:62:13:3a:10:c4:d5:02:27:f7:2b:90:f7:10:bb:
         c9:61:82:25:ea:25:12:9e:ca:d0:8b:1b:3c:46:13:ee:f7:66:
         a6:2e:62:68:7c:14:7f:52:be:2b:10:aa:8c:69:33:b2:e4:0f:
         9f:a1:e6:c8:d8:cc:e4:fb:f1:97:88:52:a2:4f:fe:49:69:1d:
         e6:1d:c8:e3:32:10:33:75:61:16:22:28:75:e6:47:a7:80:d5:
         e5:93:73:d6:3b:b3:3b:33:2b:90:1c:6e:e8:b5:eb:b9:97:9d:
         64:f6:23:28:af:28:fd:38:5c:e0:67:96:d1:bf:b6:92:0c:ef:
         59:9c:30:8c:09:9d:c5:36:a0:11:4c:9b:27:77:6d:0e:c9:fd:
         fb:06:08:7b:51:c1:ef:b2:eb:18:04:ad:c2:96:ec:c7:f6:b0:
         6b:02:19:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YbDHVZ+kWEKG0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZGU1YjdjMmUtY2RjMC00ZDExLTllZWQtOWFiNDkxMDI3ZDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqXyxVgEWKsN6Yejw0A2q85odD2z8TC547g6
STpji3RcWsjE6lDlrCoH54nLnYuFLiim7BBzq3QJTD6lPFldIWamDHAU9fjh9BQW
sZUtj+aJ/8HImd2TmIRAO1CHKrd29a0UA7SmeFxQrJoufcWBv5pcfdVlgc8lAoTz
/clzlA6Mlw7VENtUM7j9VvR3yh8bXNMpqlL43CkVp7+0wRxXAm3hFvIlVtDKXPDA
tYS55B3+ccdeSCc1UK9ZC3drYO4kXJPIkF8l5eeEgF8OSNNWTAVdrKWi8ZH3bl+C
O/4IMqStvmRl7efvxRvRMi30ndtKfy3iK9WSuGsNrjLid7Js4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9XWckNVkpr0jtZIyqpj/occTlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMjVjNDFiY2UtYjVjMS0z
YjJhLWI2ODQtNjQ1ZTlhODNhNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpa8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuolbEk6KeTC/Uarh4Q8kbA+2GgQMktPQ0ooMPH8c7Q/RcQV0sjTtF6
/c5FjcrF/oSarmA7qnR0IuJki76FGEtG14u07cazyRWYFtOmTRI36g5bLmQb65jb
TIv67bZiEzoQxNUCJ/crkPcQu8lhgiXqJRKeytCLGzxGE+73ZqYuYmh8FH9SvisQ
qoxpM7LkD5+h5sjYzOT78ZeIUqJP/klpHeYdyOMyEDN1YRYiKHXmR6eA1eWTc9Y7
szszK5Acbui167mXnWT2IyivKP04XOBnltG/tpIM71mcMIwJncU2oBFMmyd3bQ7J
/fsGCHtRwe+y6xgErcKW7Mf2sGsCGVI=
-----END CERTIFICATE-----
Generated at Fri May 8 16:27:51 2026 by rpki-client