Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa
File:                     8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa (raw, json)
Hash identifier:          Kuf4twT2ps0p6tWrCPtABl+fm5+S5qFmsZYsTMaDVIA=
Subject key identifier:   5E:24:C3:A0:8B:3F:F7:C3:FA:BF:C6:AA:E5:F0:C7:2F:83:DD:32:5C
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584ED431EAA08801DFDA098E7AC0
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     13813
IP address blocks:        199.19.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ea:a0:88:01:df:da:09:8e:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=bfce7e96-8bde-456d-9d5b-9cf68bf148b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:f0:b5:72:f7:6d:ed:98:d5:38:95:44:ff:
                    fe:18:5c:a3:74:43:cc:a2:69:1d:93:86:2e:c6:a3:
                    5f:07:f1:39:83:58:7a:ff:14:e6:db:c8:39:b9:48:
                    0a:f0:f6:11:df:09:06:09:eb:13:b0:82:ab:b5:44:
                    a9:56:82:c5:02:8a:7b:af:ca:a3:75:5f:bb:47:81:
                    ea:4b:b1:8d:be:35:17:6f:c3:a0:29:94:45:f2:31:
                    86:b3:48:b6:0a:f1:05:54:63:df:e1:74:6f:55:97:
                    5d:f6:a3:b7:62:6d:6c:14:6b:ce:91:9a:d5:b2:5f:
                    7d:ec:a7:00:ff:e4:6e:74:89:a9:6e:de:1f:f9:13:
                    1a:60:f8:6c:40:ba:9c:cc:30:43:67:59:a3:0e:61:
                    4c:24:e8:99:38:53:46:df:4a:7f:6a:e0:80:5a:44:
                    6e:a3:d3:5d:9b:33:34:4f:09:d2:ee:35:1e:5b:54:
                    9c:c7:df:3d:05:cd:3c:05:fe:b4:43:3d:4b:52:97:
                    9d:bc:6d:14:08:c6:d6:00:be:c8:95:f3:47:8e:4e:
                    26:6e:ba:a8:94:63:6e:62:b5:65:5d:62:31:b7:4c:
                    d2:83:68:75:71:62:14:db:c6:c5:27:c8:e4:80:42:
                    06:13:06:46:92:4e:d8:db:e3:07:64:80:77:2b:2d:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:C3:A0:8B:3F:F7:C3:FA:BF:C6:AA:E5:F0:C7:2F:83:DD:32:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:b3:bd:91:b8:dc:71:db:bc:97:12:65:84:38:dc:4e:da:
         1e:3a:86:d0:f7:15:69:ba:be:53:d8:ae:b5:87:40:72:e5:90:
         3c:6a:a9:da:65:7a:4c:af:46:0b:11:82:d8:a4:d4:f4:9c:c8:
         c8:95:34:81:10:07:72:70:54:b3:49:5d:2c:0a:5c:64:ea:f5:
         b3:58:5d:67:1f:af:c8:76:a7:98:e0:b3:4c:ff:a1:30:42:ed:
         21:94:9b:36:b6:8b:92:fb:ba:36:53:6d:ff:b3:d1:43:5e:07:
         86:3a:5e:88:4d:db:81:78:79:23:8b:ea:db:fb:48:11:5b:eb:
         87:f9:8c:f5:7c:01:c5:09:d4:95:1e:a9:9f:ef:5c:eb:e5:7f:
         3d:b0:d7:05:3d:3f:f2:34:8e:75:3b:af:5d:f6:01:32:ab:95:
         f3:cb:ac:d7:09:86:d5:e5:99:bb:2e:56:4f:ce:bf:87:ef:28:
         f9:dd:11:1c:6c:0e:71:e0:15:cc:49:3f:76:57:9e:48:19:d7:
         d4:2f:0c:96:fa:8f:6f:e5:af:c4:b7:d0:88:05:8a:dd:ed:c0:
         38:1b:cb:0c:b1:30:a9:f7:e1:24:bd:90:6f:c0:79:38:bb:e1:
         35:12:5d:a3:5e:a0:87:19:07:02:43:18:1b:c2:94:a1:3a:21:
         c6:3f:97:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeqgiAHf2gmOesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm
YjNiMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
YmZjZTdlOTYtOGJkZS00NTZkLTlkNWItOWNmNjhiZjE0OGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnvwtXL3be2Y1TiVRP/+GFyjdEPMomkdk4Yu
xqNfB/E5g1h6/xTm28g5uUgK8PYR3wkGCesTsIKrtUSpVoLFAop7r8qjdV+7R4Hq
S7GNvjUXb8OgKZRF8jGGs0i2CvEFVGPf4XRvVZdd9qO3Ym1sFGvOkZrVsl997KcA
/+RudImpbt4f+RMaYPhsQLqczDBDZ1mjDmFMJOiZOFNG30p/auCAWkRuo9NdmzM0
TwnS7jUeW1Scx989Bc08Bf60Qz1LUpedvG0UCMbWAL7IlfNHjk4mbrqolGNuYrVl
XWIxt0zSg2h1cWIU28bFJ8jkgEIGEwZGkk7Y2+MHZIB3Ky1ZPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4kw6CLP/fD+r/GquXwxy+D3TJcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl
NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvOGVlOWUxN2QtYWJjOC0z
MWI5LWExZTgtMGI0OGEyZTY5NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw
MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5
ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj
ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEvs72RuNxx27yXEmWEONxO2h46htD3FWm6vlPYrrWHQHLlkDxqqdpl
ekyvRgsRgtik1PScyMiVNIEQB3JwVLNJXSwKXGTq9bNYXWcfr8h2p5jgs0z/oTBC
7SGUmza2i5L7ujZTbf+z0UNeB4Y6XohN24F4eSOL6tv7SBFb64f5jPV8AcUJ1JUe
qZ/vXOvlfz2w1wU9P/I0jnU7r132ATKrlfPLrNcJhtXlmbsuVk/Ov4fvKPndERxs
DnHgFcxJP3ZXnkgZ19QvDJb6j2/lr8S30IgFit3twDgbywyxMKn34SS9kG/AeTi7
4TUSXaNeoIcZBwJDGBvClKE6IcY/ly8=
-----END CERTIFICATE-----
Generated at Sat Sep 12 17:23:09 2026 by rpki-client