Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa
File:                     f55978ed-0a94-33e2-ad68-45b7734b3677.roa (raw, json)
Hash identifier:          88mqN+3zNRx/EjAMpys0mhX5tWCzmHChrPRZxqDM6SM=
Subject key identifier:   59:93:46:F6:8A:11:E8:6F:3E:03:16:E5:3C:53:03:74:6E:DB:FD:47
Certificate issuer:       /CN=5b326d4d-84cb-4b68-b303-78f3cdef804f
Certificate serial:       010D0C9F4328584ECBD1D4819681B2069ABA2420
Authority key identifier: A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        199.30.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d4:81:96:81:b2:06:9a:ba:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b326d4d-84cb-4b68-b303-78f3cdef804f
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a8e995d8-a2fd-411f-8a95-26755d70e92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:82:0e:9d:51:96:5d:e9:b3:fe:bf:0b:67:
                    77:da:5d:59:59:78:21:b4:cc:fc:91:14:87:91:36:
                    36:41:cb:9e:10:7b:75:5e:4a:ac:4a:c9:46:c2:b6:
                    dc:28:ff:80:04:8c:12:11:c1:56:7d:f5:0f:46:06:
                    32:1c:c4:14:cb:62:82:32:d7:7f:8d:cd:d8:f8:a6:
                    34:64:9e:8f:55:a1:d1:06:25:3d:d5:08:2f:19:61:
                    57:42:82:5a:6d:01:70:61:ca:72:fd:0e:80:bf:b4:
                    2b:cc:df:87:b2:d5:3a:3f:4f:d2:a0:9d:c3:05:40:
                    b0:75:61:de:1e:d7:b8:13:46:68:ff:03:23:3f:cc:
                    81:51:8d:d3:d4:15:78:7e:a8:74:92:b9:9b:6d:70:
                    29:5c:1f:ba:0a:d5:37:9a:cb:81:da:16:98:e3:33:
                    58:8e:50:ca:da:fa:72:bb:0f:d4:4e:97:e6:32:b9:
                    74:7b:99:cf:46:4e:62:5d:55:62:1f:7a:8b:63:b7:
                    be:f7:60:e1:20:6f:26:f9:b0:b7:78:7a:08:6a:fa:
                    63:6d:07:d6:74:77:77:fd:f8:62:58:e8:bd:fa:cd:
                    b3:3a:5d:98:e9:95:e6:67:5c:90:9e:a6:d9:37:ce:
                    db:70:c5:fa:60:48:4b:24:1e:c7:90:06:02:ea:85:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:46:F6:8A:11:E8:6F:3E:03:16:E5:3C:53:03:74:6E:DB:FD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl

            X509v3 Authority Key Identifier:
                keyid:A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:9e:97:23:10:90:4b:7d:d9:e2:b2:16:c4:50:1f:a5:df:
         53:6a:87:b9:98:65:16:42:7e:45:f9:0d:9f:d9:b0:0d:3d:39:
         99:b8:93:e1:76:1d:f9:5c:32:1c:93:9b:87:57:f8:58:2f:16:
         b6:22:a9:ba:52:2a:a3:ee:20:42:78:f6:c6:de:3d:5a:9b:7e:
         0f:9c:3d:06:66:20:bb:77:c8:5c:2c:62:c4:26:7e:d5:31:1f:
         93:fb:e1:a8:0b:09:8a:20:13:5d:2d:45:50:cb:f7:46:7e:24:
         dd:f3:ad:9b:4d:17:af:3e:f0:c4:32:12:e5:a9:60:63:65:e0:
         3b:a6:d2:76:58:f7:b2:b7:03:29:04:18:4c:31:6f:95:ae:e5:
         ef:5d:4a:22:6d:67:bb:7c:f7:c3:61:78:57:ac:49:ae:d4:0f:
         c1:a9:b6:8f:a5:b1:f2:0e:2c:d3:9e:5c:11:fa:1a:02:50:b7:
         ed:4a:a6:5e:83:b5:39:77:47:e5:86:79:60:6e:a0:2f:3b:5d:
         58:9f:2a:27:5c:e3:87:a2:b5:66:74:a1:1b:f1:6e:e9:3a:de:
         49:fc:d3:7f:43:6d:c4:43:b4:db:e1:eb:ec:44:7a:38:71:da:
         19:27:6a:a7:6d:60:8b:5a:9f:a8:c4:a5:95:b2:94:8a:9d:62:
         6f:61:b9:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dSBloGyBpq6JCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWIzMjZkNGQtODRjYi00YjY4LWIzMDMtNzhmM2NkZWY4
MDRmMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
YThlOTk1ZDgtYTJmZC00MTFmLThhOTUtMjY3NTVkNzBlOTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPWCDp1Rll3ps/6/C2d32l1ZWXghtMz8kRSH
kTY2QcueEHt1XkqsSslGwrbcKP+ABIwSEcFWffUPRgYyHMQUy2KCMtd/jc3Y+KY0
ZJ6PVaHRBiU91QgvGWFXQoJabQFwYcpy/Q6Av7QrzN+HstU6P0/SoJ3DBUCwdWHe
Hte4E0Zo/wMjP8yBUY3T1BV4fqh0krmbbXApXB+6CtU3msuB2haY4zNYjlDK2vpy
uw/UTpfmMrl0e5nPRk5iXVViH3qLY7e+92DhIG8m+bC3eHoIavpjbQfWdHd3/fhi
WOi9+s2zOl2Y6ZXmZ1yQnqbZN87bcMX6YEhLJB7HkAYC6oUwBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmTRvaKEehvPgMW5TxTA3Ru2/1HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81YjMy
NmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYzY2RlZjgwNGYvZjU1OTc4ZWQtMGE5NC0z
M2UyLWFkNjgtNDViNzczNGIzNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWIzMjZkNGQtODRjYi00YjY4LWIz
MDMtNzhmM2NkZWY4MDRmLzViMzI2ZDRkLTg0Y2ItNGI2OC1iMzAzLTc4ZjNjZGVm
ODA0Zi5jcmwwHwYDVR0jBBgwFoAUp9Dev8SXbtBaflWiRB9lQpcfiXEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81YjMyNmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYz
Y2RlZjgwNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx6wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETFnpcjEJBLfdnishbEUB+l31Nqh7mYZRZCfkX5DZ/ZsA09OZm4k+F2
HflcMhyTm4dX+FgvFrYiqbpSKqPuIEJ49sbePVqbfg+cPQZmILt3yFwsYsQmftUx
H5P74agLCYogE10tRVDL90Z+JN3zrZtNF68+8MQyEuWpYGNl4Dum0nZY97K3AykE
GEwxb5Wu5e9dSiJtZ7t898NheFesSa7UD8Gpto+lsfIOLNOeXBH6GgJQt+1Kpl6D
tTl3R+WGeWBuoC87XVifKidc44eitWZ0oRvxbuk63kn8039DbcRDtNvh6+xEejhx
2hknaqdtYItan6jEpZWylIqdYm9huQI=
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:06:56 2026 by rpki-client