Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
File:                     81d14041-cb0e-36df-be9e-80b114230d9a.roa (raw, json)
Hash identifier:          LS8fJxj3wX4ghAK0TScT7BBkXRfxZFRPz3gddTtnpGY=
Subject key identifier:   9A:FF:7C:4E:F0:30:03:9B:AD:2C:F3:0D:87:0F:0F:3A:63:D1:C2:39
Certificate issuer:       /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
Certificate serial:       010D0C9F4328584ECD3726FA6502C4CFAD4F9580
Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        198.137.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:26:fa:65:02:c4:cf:ad:4f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=c70f585f-531f-454f-9071-d8950f5cce33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:95:43:2f:67:c6:80:58:95:a3:e2:c7:d6:
                    67:ac:d1:36:67:03:8c:ae:1a:99:6c:17:09:c2:14:
                    b7:bd:a4:e7:92:31:23:a0:c9:06:5e:7c:47:96:60:
                    00:ee:85:e3:5b:21:2c:1c:67:e8:aa:7b:2e:ce:0c:
                    ad:01:48:65:8f:77:73:fd:18:41:65:ef:89:64:81:
                    6f:5e:7e:de:95:41:f9:69:ed:05:92:a3:6c:26:43:
                    20:ba:e1:cb:45:12:03:f1:19:da:65:99:e3:f0:1d:
                    99:c0:24:2f:79:4a:94:6c:e3:f3:9b:d1:71:26:b2:
                    38:40:39:10:07:94:99:fc:cb:68:2c:87:28:85:bf:
                    9c:ba:f2:30:4c:d8:30:fa:95:46:60:d6:7f:6d:c1:
                    ff:4c:ae:62:44:2d:4e:b7:5a:4e:ba:6c:be:de:8b:
                    b7:31:1c:cb:0c:3c:1d:21:8b:c0:47:78:10:25:05:
                    f1:9d:f4:25:30:c6:bb:27:d7:06:ec:62:3d:f5:63:
                    2c:fd:86:d9:f2:d9:e0:33:b8:a4:72:1f:12:b1:3f:
                    b0:dc:9f:b5:e4:8b:aa:ea:34:9b:2b:c3:06:48:ae:
                    5a:b7:24:88:41:4a:29:ec:f5:46:93:51:ff:0f:f1:
                    ad:6c:51:33:ef:e0:41:19:fe:99:78:55:0b:f2:35:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:7C:4E:F0:30:03:9B:AD:2C:F3:0D:87:0F:0F:3A:63:D1:C2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl

            X509v3 Authority Key Identifier:
                keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6f:83:33:49:d3:0e:a1:1d:9d:a3:0f:27:c4:2e:13:54:53:
         2e:6b:a9:d6:15:8c:78:81:66:41:9b:d6:73:3f:95:28:65:58:
         91:98:51:d9:a3:3a:31:ab:25:b9:fc:07:59:92:c6:d9:cc:ff:
         7b:fe:ff:cb:91:66:f9:5c:3a:c6:87:2d:83:73:2d:ed:44:dd:
         4c:f6:60:49:b9:6e:9c:a6:6f:b8:ab:01:26:ef:cc:a8:72:89:
         de:0e:cd:c2:55:46:ea:f3:04:08:be:60:c4:0b:d2:14:f8:79:
         c8:88:cf:ef:ac:2e:a5:7a:80:8d:16:02:cb:7c:0e:24:9a:ac:
         42:8d:e4:77:ee:ab:f7:7d:03:18:7d:79:21:8e:d5:7a:a2:74:
         66:2f:a6:19:50:c2:ee:54:2a:c9:94:65:d2:a5:d7:b1:4e:5b:
         bb:71:5f:6c:8a:a4:89:85:59:49:4b:25:91:90:1c:f9:8f:ed:
         b7:fc:b1:d6:bf:86:39:b7:74:7b:59:62:06:30:37:df:3d:6e:
         a6:de:c8:2e:3d:2d:3b:86:fa:2e:39:37:db:2f:09:f8:0d:fb:
         8c:42:16:ba:59:7e:76:ad:06:38:8d:da:59:59:b6:b4:e9:60:
         52:0e:0a:f0:ac:07:cb:64:27:03:b9:d0:92:cf:54:d3:5e:1e:
         91:33:b3:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyb6ZQLEz61PlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU5ZDQyNGUtZjU2YS00YTlkLWJiY2MtZGJiOGVkOTZj
ZGYwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
YzcwZjU4NWYtNTMxZi00NTRmLTkwNzEtZDg5NTBmNWNjZTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhSVQy9nxoBYlaPix9ZnrNE2ZwOMrhqZbBcJ
whS3vaTnkjEjoMkGXnxHlmAA7oXjWyEsHGfoqnsuzgytAUhlj3dz/RhBZe+JZIFv
Xn7elUH5ae0FkqNsJkMguuHLRRID8RnaZZnj8B2ZwCQveUqUbOPzm9FxJrI4QDkQ
B5SZ/MtoLIcohb+cuvIwTNgw+pVGYNZ/bcH/TK5iRC1Ot1pOumy+3ou3MRzLDDwd
IYvAR3gQJQXxnfQlMMa7J9cG7GI99WMs/YbZ8tngM7ikch8SsT+w3J+15Iuq6jSb
K8MGSK5atySIQUop7PVGk1H/D/GtbFEz7+BBGf6ZeFUL8jUvswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJr/fE7wMAObrSzzDYcPDzpj0cI5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTlk
NDI0ZS1mNTZhLTRhOWQtYmJjYy1kYmI4ZWQ5NmNkZjAvODFkMTQwNDEtY2IwZS0z
NmRmLWJlOWUtODBiMTE0MjMwZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDU5ZDQyNGUtZjU2YS00YTlkLWJi
Y2MtZGJiOGVkOTZjZGYwLzQ1OWQ0MjRlLWY1NmEtNGE5ZC1iYmNjLWRiYjhlZDk2
Y2RmMC5jcmwwHwYDVR0jBBgwFoAU8UNX6MsanlCIO3KFS9uM1iWmHpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NTlkNDI0ZS1mNTZhLTRhOWQtYmJjYy1kYmI4
ZWQ5NmNkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZvgzNJ0w6hHZ2jDyfELhNUUy5rqdYVjHiBZkGb1nM/lShlWJGYUdmj
OjGrJbn8B1mSxtnM/3v+/8uRZvlcOsaHLYNzLe1E3Uz2YEm5bpymb7irASbvzKhy
id4OzcJVRurzBAi+YMQL0hT4eciIz++sLqV6gI0WAst8DiSarEKN5Hfuq/d9Axh9
eSGO1XqidGYvphlQwu5UKsmUZdKl17FOW7txX2yKpImFWUlLJZGQHPmP7bf8sda/
hjm3dHtZYgYwN989bqbeyC49LTuG+i45N9svCfgN+4xCFrpZfnatBjiN2llZtrTp
YFIOCvCsB8tkJwO50JLPVNNeHpEzswQ=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:27 2026 by rpki-client