Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/2cde65b4-5ec5-32e3-8282-f38ad67cde19.roa
File:                     2cde65b4-5ec5-32e3-8282-f38ad67cde19.roa (raw, json)
Hash identifier:          nYpMm1cOuH0Cb9QPuIUGR/C6n8ufGR0LMDXPXy1ovJk=
Subject key identifier:   C5:6D:59:36:0E:D9:0B:3B:F3:D7:13:2A:24:73:59:22:0F:D8:FC:B1
Certificate issuer:       /CN=c9789d30-0da1-46bb-89d2-2d887198f2b9
Certificate serial:       010D0C9F4328584F91BAA719D87037B3A8DE3A80
Authority key identifier: 22:33:94:58:F7:3B:3E:D1:F0:98:5E:73:90:DE:3E:32:CE:F1:EB:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/2cde65b4-5ec5-32e3-8282-f38ad67cde19.roa
Signing time:             Tue 20 Oct 2026 22:23:45 +0000
ROA not before:           Tue 20 Oct 2026 22:23:45 +0000
ROA not after:            Mon 18 Jan 2027 23:23:45 +0000
asID:                     16792
IP address blocks:        199.5.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:91:ba:a7:19:d8:70:37:b3:a8:de:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9789d30-0da1-46bb-89d2-2d887198f2b9
        Validity
            Not Before: Oct 20 22:23:45 2026 GMT
            Not After : Jan 18 23:23:45 2027 GMT
        Subject: CN=f3abc0d3-c1de-4e65-8a3c-7cd59e20f1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:25:73:4f:f9:ea:24:5e:60:a9:c0:e9:db:
                    5d:5d:ec:f0:d8:88:db:d9:88:a1:12:a4:e6:39:a2:
                    c9:fe:dc:40:73:41:49:91:36:4d:4f:b1:87:e0:19:
                    e6:f4:28:05:30:79:ed:10:90:fa:80:4f:68:f1:e9:
                    2f:4d:15:2e:22:b4:78:f7:20:91:e5:35:39:24:f5:
                    64:0d:3c:47:0d:e3:2a:8e:6f:89:c4:62:30:f4:6e:
                    1d:04:32:34:4e:51:db:8d:f5:72:cc:74:da:78:04:
                    c6:27:d0:a1:9b:bb:b5:5b:3e:1a:12:1e:46:da:ab:
                    90:e9:42:d3:b8:d8:66:82:0c:56:2f:75:38:2f:6b:
                    dd:ac:76:dc:27:31:5f:6d:c3:64:1f:76:89:ab:47:
                    c8:54:18:8a:56:44:c0:eb:40:43:37:94:d9:71:5a:
                    d2:7c:2f:c1:5f:be:45:bd:8f:1e:f7:11:22:4a:e0:
                    f5:3d:97:a6:26:4a:3f:06:67:a0:bf:ec:16:b3:b5:
                    f9:8e:32:6b:a1:36:b2:3a:35:90:02:bf:da:8c:28:
                    a9:73:d1:73:28:5a:90:40:fc:ea:e0:9a:6a:9a:b7:
                    21:0b:7c:0f:85:df:36:81:10:2e:04:d7:3f:d1:83:
                    42:9c:1c:d8:e4:fa:78:3c:26:5b:b8:9d:11:04:f8:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:59:36:0E:D9:0B:3B:F3:D7:13:2A:24:73:59:22:0F:D8:FC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/2cde65b4-5ec5-32e3-8282-f38ad67cde19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.crl

            X509v3 Authority Key Identifier:
                keyid:22:33:94:58:F7:3B:3E:D1:F0:98:5E:73:90:DE:3E:32:CE:F1:EB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:08:3f:27:8b:d3:af:85:30:49:1f:29:2c:b0:dd:0f:d6:
         0e:9c:e7:e5:ef:a6:b8:21:21:a8:bb:5a:63:31:3c:83:de:ab:
         ad:ec:5b:08:73:62:0b:33:ad:dc:63:89:62:a6:1b:c5:47:a1:
         18:ab:6b:04:9d:15:7c:0c:3c:54:e9:cc:6c:79:39:84:77:05:
         f5:ac:c5:c0:7a:5b:d4:fb:23:7f:e4:d6:7c:51:7f:0e:f8:56:
         d8:74:82:da:4b:e2:83:f0:45:d4:f7:6c:6a:2b:4f:4d:8f:28:
         97:ae:0c:47:35:b1:f7:dc:47:05:6d:14:37:27:80:d6:ef:62:
         6c:16:0b:78:98:8b:f6:0c:c4:b2:e1:e3:6b:47:c8:9a:47:5a:
         68:44:b1:d5:f3:bc:52:be:a8:e8:94:e1:07:5e:31:1e:46:e0:
         0a:83:db:69:02:0d:d2:a8:59:b4:45:e5:a0:3b:3f:ad:d3:d9:
         ec:53:51:f7:cf:72:dc:1f:31:77:9c:09:b9:39:89:84:76:c8:
         15:0f:58:f8:f7:1e:22:34:d0:97:5d:24:07:09:14:aa:2a:54:
         96:ea:4a:03:ca:4a:53:7e:ba:a5:db:ca:d5:12:5f:57:c8:42:
         0a:a9:e7:45:4e:ee:5a:7a:0b:07:34:dd:9c:37:7f:93:86:4e:
         51:e6:16:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RuqcZ2HA3s6jeOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk3ODlkMzAtMGRhMS00NmJiLTg5ZDItMmQ4ODcxOThm
MmI5MB4XDTI2MTAyMDIyMjM0NVoXDTI3MDExODIzMjM0NVowLzEtMCsGA1UEAxMk
ZjNhYmMwZDMtYzFkZS00ZTY1LThhM2MtN2NkNTllMjBmMWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN0lc0/56iReYKnA6dtdXezw2Ijb2YihEqTm
OaLJ/txAc0FJkTZNT7GH4Bnm9CgFMHntEJD6gE9o8ekvTRUuIrR49yCR5TU5JPVk
DTxHDeMqjm+JxGIw9G4dBDI0TlHbjfVyzHTaeATGJ9Chm7u1Wz4aEh5G2quQ6ULT
uNhmggxWL3U4L2vdrHbcJzFfbcNkH3aJq0fIVBiKVkTA60BDN5TZcVrSfC/BX75F
vY8e9xEiSuD1PZemJko/Bmegv+wWs7X5jjJroTayOjWQAr/ajCipc9FzKFqQQPzq
4JpqmrchC3wPhd82gRAuBNc/0YNCnBzY5Pp4PCZbuJ0RBPhy4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVtWTYO2Qs789cTKiRzWSIP2PyxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTc4
OWQzMC0wZGExLTQ2YmItODlkMi0yZDg4NzE5OGYyYjkvMmNkZTY1YjQtNWVjNS0z
MmUzLTgyODItZjM4YWQ2N2NkZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk3ODlkMzAtMGRhMS00NmJiLTg5
ZDItMmQ4ODcxOThmMmI5L2M5Nzg5ZDMwLTBkYTEtNDZiYi04OWQyLTJkODg3MTk4
ZjJiOS5jcmwwHwYDVR0jBBgwFoAUIjOUWPc7PtHwmF5zkN4+Ms7x6zkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTc4OWQzMC0wZGExLTQ2YmItODlkMi0yZDg4
NzE5OGYyYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwU6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLWCD8ni9OvhTBJHykssN0P1g6c5+XvprghIai7WmMxPIPeq63sWwhz
YgszrdxjiWKmG8VHoRirawSdFXwMPFTpzGx5OYR3BfWsxcB6W9T7I3/k1nxRfw74
Vth0gtpL4oPwRdT3bGorT02PKJeuDEc1sffcRwVtFDcngNbvYmwWC3iYi/YMxLLh
42tHyJpHWmhEsdXzvFK+qOiU4QdeMR5G4AqD22kCDdKoWbRF5aA7P63T2exTUffP
ctwfMXecCbk5iYR2yBUPWPj3HiI00JddJAcJFKoqVJbqSgPKSlN+uqXbytUSX1fI
Qgqp50VO7lp6Cwc03Zw3f5OGTlHmFhg=
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:56 2026 by rpki-client