Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa
File:                     534e5e03-5a54-38cc-a774-6d07f571b6a5.roa (raw, json)
Hash identifier:          n9Iu5lvNCoBi8/mooJxSpiEkCVll9MIs39+oOjJ2xg0=
Subject key identifier:   01:6A:BC:D9:A0:04:55:0C:47:55:6B:09:9F:B7:30:1F:38:80:36:E4
Certificate issuer:       /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial:       010D0C9F4328584EA7879EF6C97EF5AADB36B060
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40545
IP address blocks:        199.190.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9e:f6:c9:7e:f5:aa:db:36:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=afdfcf59-dd15-445a-a709-d73ee19008e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:f5:f1:d8:b1:5e:b1:f3:a9:26:30:1c:60:
                    2e:04:92:76:f4:29:e0:37:9e:90:06:59:a9:c5:87:
                    db:29:70:14:f2:d6:6b:cc:46:e9:cf:2c:20:d9:a1:
                    9c:b6:19:3d:88:16:f1:1f:51:d0:ad:6d:97:ce:33:
                    36:3a:ca:6c:54:1f:c8:9a:9b:97:32:2c:db:ca:f3:
                    50:a3:ea:06:4c:90:9b:cb:3c:5e:62:ca:aa:f8:99:
                    c5:10:63:e2:d1:e4:a1:aa:a4:bb:31:c4:6a:b1:e3:
                    75:e5:b6:f2:4d:84:a3:db:59:5b:4f:a4:63:65:03:
                    a9:0d:bd:be:e7:5a:40:c2:33:7b:f8:72:7f:8c:37:
                    36:dd:b7:c1:1b:96:e3:d1:18:ca:b7:9f:24:54:56:
                    d8:0b:45:62:e3:6d:fd:d9:24:23:22:11:32:37:4c:
                    12:12:9e:04:c3:a5:c0:17:e4:68:c4:2a:fc:02:bf:
                    36:0b:cc:06:26:9a:b6:17:31:50:d1:0f:be:44:ce:
                    e7:51:b0:dd:4f:0a:39:a9:fc:20:3f:a1:cb:aa:8e:
                    ee:11:22:20:99:3d:76:a8:2d:be:3e:f9:c6:8c:98:
                    7d:8a:c1:a6:cd:d7:df:9c:50:5a:8d:d4:81:55:6a:
                    8f:37:09:9d:25:51:7f:0c:99:ac:65:bb:a6:45:c1:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6A:BC:D9:A0:04:55:0C:47:55:6B:09:9F:B7:30:1F:38:80:36:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0c:f2:be:dc:6a:8c:ed:4a:fd:70:82:51:cf:05:8e:78:77:
         4c:66:82:04:1f:eb:c7:19:10:46:31:3c:f1:72:a9:3c:5e:6d:
         83:9b:2d:1c:f4:5a:ab:fb:85:b2:0d:2b:c4:ee:6a:50:55:a1:
         7f:65:95:a8:5b:5f:01:81:e2:d2:3f:66:ac:5e:f1:fd:d7:a1:
         16:4e:19:ba:42:7e:68:54:9c:8e:85:1a:23:a2:e1:74:2d:e3:
         bc:f8:93:dd:2d:b0:5e:e9:cd:d9:a4:ea:72:f5:d7:4e:8f:03:
         a1:22:12:49:cc:89:03:d0:0e:82:76:cc:30:57:a9:8e:ab:56:
         4e:f6:65:cd:5c:82:ff:3e:4a:f2:8e:1e:e6:1e:1e:0e:36:14:
         ff:7a:6b:71:e8:f1:2f:30:69:d0:3f:85:d4:e9:00:b6:d2:18:
         a4:fe:6a:03:08:af:4f:93:3f:5a:88:ca:d8:9e:e9:e7:30:be:
         d2:bd:0f:3d:3d:b5:ef:23:46:92:26:9a:98:5e:3f:54:32:94:
         12:ab:d3:39:88:66:9f:3a:73:09:2c:d5:76:12:b1:6e:cb:7c:
         fd:2f:14:bb:55:3b:8e:c3:3b:d5:3f:64:61:f1:64:ba:e1:8b:
         d2:69:2c:02:6d:1b:87:8d:58:28:6a:b7:fd:23:15:c5:db:fb:
         7d:b7:ef:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh572yX71qts2sGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm
YWIwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWZkZmNmNTktZGQxNS00NDVhLWE3MDktZDczZWUxOTAwOGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreX18dixXrHzqSYwHGAuBJJ29CngN56QBlmp
xYfbKXAU8tZrzEbpzywg2aGcthk9iBbxH1HQrW2XzjM2OspsVB/ImpuXMizbyvNQ
o+oGTJCbyzxeYsqq+JnFEGPi0eShqqS7McRqseN15bbyTYSj21lbT6RjZQOpDb2+
51pAwjN7+HJ/jDc23bfBG5bj0RjKt58kVFbYC0Vi42392SQjIhEyN0wSEp4Ew6XA
F+RoxCr8Ar82C8wGJpq2FzFQ0Q++RM7nUbDdTwo5qfwgP6HLqo7uESIgmT12qC2+
PvnGjJh9isGmzdffnFBajdSBVWqPNwmdJVF/DJmsZbumRcFmiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFqvNmgBFUMR1VrCZ+3MB84gDbkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz
N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvNTM0ZTVlMDMtNWE1NC0z
OGNjLWE3NzQtNmQwN2Y1NzFiNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz
NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh
ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2
NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx77EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUM8r7caoztSv1wglHPBY54d0xmggQf68cZEEYxPPFyqTxebYObLRz0
Wqv7hbINK8TualBVoX9llahbXwGB4tI/Zqxe8f3XoRZOGbpCfmhUnI6FGiOi4XQt
47z4k90tsF7pzdmk6nL1106PA6EiEknMiQPQDoJ2zDBXqY6rVk72Zc1cgv8+SvKO
HuYeHg42FP96a3Ho8S8wadA/hdTpALbSGKT+agMIr0+TP1qIytie6ecwvtK9Dz09
te8jRpImmpheP1QylBKr0zmIZp86cwks1XYSsW7LfP0vFLtVO47DO9U/ZGHxZLrh
i9JpLAJtG4eNWChqt/0jFcXb+3237+o=
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:07:52 2026 by rpki-client