Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/0c5f03d3-4b41-3241-8ffc-9fc29ded6067.roa
File:                     0c5f03d3-4b41-3241-8ffc-9fc29ded6067.roa (raw, json)
Hash identifier:          Ie0ppylbUiFTA2c2IxLd5MzXuesE+yG+RPeyWDY2t7k=
Subject key identifier:   D8:3C:56:45:25:0C:89:75:46:45:53:CE:B8:A2:D0:21:1D:7B:E5:E8
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584ECA6C6F38359CF6C45F3867EB
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/0c5f03d3-4b41-3241-8ffc-9fc29ded6067.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     55178
IP address blocks:        192.230.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:6f:38:35:9c:f6:c4:5f:38:67:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=30fe77fa-9c2f-4b11-87b1-44bb73c416f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0f:ee:bb:ab:c6:d7:9b:29:7b:c4:b4:cf:2b:
                    a0:28:60:23:37:f8:af:f1:06:87:71:d7:03:6c:9c:
                    ec:6e:b9:82:28:59:f9:ea:f9:8b:19:e5:ee:2d:2d:
                    02:eb:27:a5:ce:e3:db:47:03:2c:7b:73:6b:16:07:
                    38:0d:75:03:64:3d:b8:d3:c4:42:93:77:6a:22:da:
                    6a:f1:4a:27:c2:c9:9a:d3:c6:40:7d:0a:05:8b:16:
                    f6:b2:8b:b2:69:f8:15:60:c4:2c:9a:20:40:c2:8c:
                    77:94:d6:46:72:88:70:98:dd:12:49:7d:e2:80:c1:
                    37:3f:60:4c:b0:b1:76:a5:6b:4b:1a:ad:5f:d8:80:
                    3c:37:eb:b6:31:6b:11:26:e1:43:af:cd:07:c0:62:
                    6a:d9:a5:b8:16:3c:ed:2e:ff:79:5e:f8:e6:76:7b:
                    d2:4f:35:99:0e:be:b7:ea:14:04:44:ad:99:b1:95:
                    86:54:38:26:98:67:3d:0a:79:5f:41:46:79:96:fa:
                    39:07:8f:97:69:98:30:7c:c1:7d:c2:4f:9e:9e:a3:
                    34:29:f1:85:18:07:02:0f:d3:9f:d4:dc:e2:3f:3c:
                    13:16:fd:64:9c:ba:67:6b:b4:41:81:c0:ed:42:af:
                    10:30:12:c0:54:eb:b2:47:7c:c1:8a:e2:ee:a5:3e:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:56:45:25:0C:89:75:46:45:53:CE:B8:A2:D0:21:1D:7B:E5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/0c5f03d3-4b41-3241-8ffc-9fc29ded6067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:55:40:d7:68:f8:b0:a7:5a:17:2c:a3:93:fb:aa:01:ce:
         9c:29:29:80:57:b5:3c:c8:22:a2:b1:7e:74:a0:66:07:01:5f:
         ee:01:7f:f1:52:cd:7d:e8:0b:3d:8f:08:a0:63:14:c3:62:50:
         ad:6a:48:d9:d3:2b:70:22:23:0c:9f:d9:04:7b:67:cf:a2:04:
         41:bb:60:bc:33:98:c3:76:fd:01:23:e4:01:8a:d7:c2:ee:3b:
         73:22:d3:50:02:37:93:8f:06:30:cc:25:8f:7d:ba:6a:10:a2:
         18:37:56:9e:6b:e7:f4:68:29:54:cd:7a:1a:af:e3:3a:c6:53:
         8b:75:35:e2:84:af:52:ae:83:b4:96:4b:88:e5:ee:77:0b:5b:
         94:0e:4e:a3:ca:ab:6f:47:9e:6f:7f:d4:eb:01:0b:16:b0:9e:
         59:b6:bc:5c:f7:ab:50:72:74:40:25:7c:e3:ee:7e:af:1a:0a:
         df:13:44:98:4a:ff:f1:df:5f:05:7f:ec:b1:f4:6b:f2:ca:85:
         a7:0e:9a:bc:f6:a2:fc:f9:90:65:91:36:21:fe:6a:8d:55:b2:
         fd:68:d7:0c:67:9a:56:a6:38:97:bc:d2:33:bb:2c:82:50:b5:
         71:c3:b6:da:fb:c2:0c:b2:20:8a:cf:15:b8:1a:b6:a0:a2:38:
         6b:5e:13:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbG84NZz2xF84Z+swDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2
MWE5MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
MzBmZTc3ZmEtOWMyZi00YjExLTg3YjEtNDRiYjczYzQxNmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg/uu6vG15spe8S0zyugKGAjN/iv8QaHcdcD
bJzsbrmCKFn56vmLGeXuLS0C6yelzuPbRwMse3NrFgc4DXUDZD2408RCk3dqItpq
8Uonwsma08ZAfQoFixb2souyafgVYMQsmiBAwox3lNZGcohwmN0SSX3igME3P2BM
sLF2pWtLGq1f2IA8N+u2MWsRJuFDr80HwGJq2aW4FjztLv95XvjmdnvSTzWZDr63
6hQERK2ZsZWGVDgmmGc9CnlfQUZ5lvo5B4+XaZgwfMF9wk+enqM0KfGFGAcCD9Of
1NziPzwTFv1knLpna7RBgcDtQq8QMBLAVOuyR3zBiuLupT519wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNg8VkUlDIl1RkVTzrii0CEde+XoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw
M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMGM1ZjAzZDMtNGI0MS0z
MjQxLThmZmMtOWZjMjlkZWQ2MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2
OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj
NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0
OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJb0VUDXaPiwp1oXLKOT+6oBzpwpKYBXtTzIIqKxfnSgZgcBX+4Bf/FS
zX3oCz2PCKBjFMNiUK1qSNnTK3AiIwyf2QR7Z8+iBEG7YLwzmMN2/QEj5AGK18Lu
O3Mi01ACN5OPBjDMJY99umoQohg3Vp5r5/RoKVTNehqv4zrGU4t1NeKEr1Kug7SW
S4jl7ncLW5QOTqPKq29Hnm9/1OsBCxawnlm2vFz3q1BydEAlfOPufq8aCt8TRJhK
//HfXwV/7LH0a/LKhacOmrz2ovz5kGWRNiH+ao1Vsv1o1wxnmlamOJe80jO7LIJQ
tXHDttr7wgyyIIrPFbgatqCiOGteE/8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:29 2026 by rpki-client