Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa
File:                     65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa (raw, json)
Hash identifier:          8NI1fvTY+wEtrCeW2URsanGTn0OAL8afMb4Z7TX5tyM=
Subject key identifier:   78:E1:D2:C3:3E:C1:CD:D3:4A:6A:C9:B9:0F:0B:D3:9D:8D:23:63:BA
Certificate issuer:       /CN=557a586a-7e35-45b6-bb87-b7631d4dda84
Certificate serial:       010D0C9F4328584EBB11ACC77BF57F69836E4BC0
Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.231.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ac:c7:7b:f5:7f:69:83:6e:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=91388e09-af6e-4191-a43d-f050a63e7c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:af:8e:1a:1e:f0:aa:5a:fc:10:94:dc:8a:
                    0e:97:75:4c:0d:48:2e:91:7f:c4:73:60:00:0b:77:
                    e0:0c:0d:3b:af:74:23:f1:ff:5d:d6:65:d1:26:fa:
                    7d:d4:f5:0b:da:a7:6c:85:0c:f9:33:4c:52:bf:32:
                    4d:86:5a:90:34:9a:e6:68:07:a4:0b:af:10:43:ca:
                    bd:6f:eb:c8:6a:0b:a0:b8:86:72:5e:fa:23:13:0c:
                    79:a6:38:a0:70:10:47:1c:01:a3:21:6c:d2:47:c0:
                    5e:d1:44:03:0b:f0:19:95:5c:e4:65:85:fb:2d:cc:
                    90:5a:20:54:66:2d:64:3d:e7:7e:15:d3:a9:c9:1a:
                    1c:30:7a:b4:32:55:30:4c:5e:ef:cf:3a:89:d0:b8:
                    e6:87:de:3e:4b:c7:05:06:bf:ef:81:54:81:a5:54:
                    02:80:89:d6:bb:a8:34:db:0f:a9:ba:a3:22:88:f6:
                    eb:56:ed:ee:8e:33:af:a3:36:cc:87:09:e7:86:ce:
                    cc:d9:34:a3:c6:cf:5a:bf:c7:c4:fc:6f:2e:ae:9f:
                    02:7a:26:62:0b:1c:49:d7:1b:da:d2:73:c1:03:3e:
                    45:e0:cb:b3:39:f5:c8:16:7d:91:f6:8b:75:fc:4e:
                    c5:c1:43:ab:3e:3c:76:82:50:26:75:26:7e:61:92:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:D2:C3:3E:C1:CD:D3:4A:6A:C9:B9:0F:0B:D3:9D:8D:23:63:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl

            X509v3 Authority Key Identifier:
                keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:52:38:f7:aa:6f:32:12:c9:40:6b:ff:3e:55:00:46:cd:ef:
         f1:75:45:0f:70:30:ea:a4:a3:60:bf:0a:e1:d6:08:dc:9e:92:
         e2:66:8a:54:4f:d1:85:8e:dd:74:b6:4a:a1:80:27:96:7a:5b:
         6b:b7:64:49:5a:f2:c4:ff:7c:2e:5b:59:4f:cc:37:a1:e0:bb:
         cb:3c:c8:90:d9:05:8e:27:15:d3:39:76:f6:90:36:02:eb:0e:
         4a:40:f1:0a:ac:84:b6:65:86:f8:64:85:2b:c3:cb:7b:9e:58:
         ae:14:a1:76:ca:a8:3a:12:07:4d:57:4d:2d:72:ab:ab:a0:bc:
         c4:bf:fe:ce:5b:af:69:93:4c:ff:90:5c:fe:0f:29:8e:34:78:
         00:42:f7:c8:d4:4a:fd:07:75:26:43:5e:46:ff:c0:0e:62:0a:
         1a:c7:db:97:73:95:16:e0:7e:8b:a8:fd:4c:89:a3:20:fc:3f:
         68:73:8f:df:ab:d9:9b:39:83:0d:cf:36:0b:ed:c7:fc:ef:46:
         d7:8e:a1:11:c4:99:41:24:14:a4:25:3b:66:8a:3b:49:cd:b8:
         6c:23:d7:b6:7f:3e:ec:8c:a3:d6:cf:37:10:50:6f:ea:f6:3e:
         75:ab:cf:55:62:fd:ae:ce:c7:60:26:fa:f2:db:dd:3e:2f:1e:
         81:10:29:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EazHe/V/aYNuS8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU3YTU4NmEtN2UzNS00NWI2LWJiODctYjc2MzFkNGRk
YTg0MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
OTEzODhlMDktYWY2ZS00MTkxLWE0M2QtZjA1MGE2M2U3YzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36evjhoe8Kpa/BCU3IoOl3VMDUgukX/Ec2AA
C3fgDA07r3Qj8f9d1mXRJvp91PUL2qdshQz5M0xSvzJNhlqQNJrmaAekC68QQ8q9
b+vIaguguIZyXvojEwx5pjigcBBHHAGjIWzSR8Be0UQDC/AZlVzkZYX7LcyQWiBU
Zi1kPed+FdOpyRocMHq0MlUwTF7vzzqJ0Ljmh94+S8cFBr/vgVSBpVQCgInWu6g0
2w+puqMiiPbrVu3ujjOvozbMhwnnhs7M2TSjxs9av8fE/G8urp8CeiZiCxxJ1xva
0nPBAz5F4MuzOfXIFn2R9ot1/E7FwUOrPjx2glAmdSZ+YZL3swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjh0sM+wc3TSmrJuQ8L052NI2O6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdh
NTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYzMWQ0ZGRhODQvNjVhOThkY2YtMWYyNC0z
YThlLTlmNGEtYzY5ZDMyZWRiODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTU3YTU4NmEtN2UzNS00NWI2LWJi
ODctYjc2MzFkNGRkYTg0LzU1N2E1ODZhLTdlMzUtNDViNi1iYjg3LWI3NjMxZDRk
ZGE4NC5jcmwwHwYDVR0jBBgwFoAUp138/nyBEt/M9IcKfEtG1UhERSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdhNTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYz
MWQ0ZGRhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOcVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdSOPeqbzISyUBr/z5VAEbN7/F1RQ9wMOqko2C/CuHWCNyekuJmilRP
0YWO3XS2SqGAJ5Z6W2u3ZEla8sT/fC5bWU/MN6Hgu8s8yJDZBY4nFdM5dvaQNgLr
DkpA8QqshLZlhvhkhSvDy3ueWK4UoXbKqDoSB01XTS1yq6ugvMS//s5br2mTTP+Q
XP4PKY40eABC98jUSv0HdSZDXkb/wA5iChrH25dzlRbgfouo/UyJoyD8P2hzj9+r
2Zs5gw3PNgvtx/zvRteOoRHEmUEkFKQlO2aKO0nNuGwj17Z/PuyMo9bPNxBQb+r2
PnWrz1Vi/a7Ox2Am+vLb3T4vHoEQKck=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:20 2026 by rpki-client