Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cca0fe-48e8-32d0-997d-8a5be139b68d.roa
File:                     35cca0fe-48e8-32d0-997d-8a5be139b68d.roa (raw, json)
Hash identifier:          PvsiSDFCR0GuBBHi6YpY/ooWs3ijvFyH/9CxKLAToCU=
Subject key identifier:   53:B4:C6:63:5F:CA:8E:3C:32:59:7D:69:69:82:30:9B:14:EB:02:9F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E2FC30E042AD03F5CCC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cca0fe-48e8-32d0-997d-8a5be139b68d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        192.219.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:2f:c3:0e:04:2a:d0:3f:5c:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f1edfac4-12e7-40d7-9651-7d63f282c439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:4b:7b:ec:bf:5e:b9:7b:82:2e:48:5f:94:
                    ab:76:88:b1:67:f8:78:22:03:f5:ae:de:c3:8a:fa:
                    f9:4b:4e:5e:9c:69:4a:bb:14:47:1e:5c:b1:94:d1:
                    03:22:62:ac:41:48:c5:93:28:7d:77:c2:b0:47:34:
                    c9:10:80:0f:90:36:b6:b9:a7:de:af:f0:ed:70:a8:
                    12:ca:e8:90:7a:05:dc:d2:df:c2:e7:2e:ae:60:1f:
                    58:66:2c:0e:0f:af:55:45:63:32:10:0f:18:7c:f1:
                    91:f0:02:b8:60:66:f2:7e:6b:e7:1b:79:e7:80:10:
                    6a:5f:fb:69:b4:36:13:f4:60:b0:0a:e9:40:e2:48:
                    cf:68:47:7d:77:75:fc:0e:e1:23:55:49:78:5d:76:
                    8e:ea:b9:5f:fb:de:8a:a0:6d:1b:93:d3:a5:c2:ce:
                    22:b7:42:08:5b:63:db:06:fc:40:bc:14:8a:73:f4:
                    a4:c3:fd:01:8f:0d:4d:43:58:27:46:15:00:67:4a:
                    00:e4:39:b6:ff:6f:04:7f:0d:9d:81:f6:70:4e:b9:
                    60:34:d3:79:42:96:62:e7:bb:fc:b5:83:81:79:0b:
                    52:f6:28:8d:4e:6c:77:71:f6:b2:d5:2c:6a:d4:82:
                    c2:24:56:28:ee:4c:43:cb:5e:a8:d3:7a:9e:31:26:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B4:C6:63:5F:CA:8E:3C:32:59:7D:69:69:82:30:9B:14:EB:02:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cca0fe-48e8-32d0-997d-8a5be139b68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:26:5f:c5:33:54:70:ba:43:1a:32:78:c6:e6:81:a6:30:
         a1:3e:b6:94:09:6e:6a:d4:6e:2f:e1:f9:77:96:3a:f2:73:ec:
         3c:35:e4:78:a6:a1:fd:16:b0:cf:e1:c8:14:eb:79:0a:55:d0:
         1b:2b:0a:26:67:6a:26:33:8d:9d:2c:a1:d5:f6:6c:55:d2:0f:
         62:02:67:a5:f3:fd:bc:1b:53:a7:fd:24:98:5a:82:00:fe:3b:
         f0:16:94:13:53:61:a7:45:33:de:66:75:d1:c6:03:09:9a:67:
         c6:46:c0:b6:00:49:70:f6:46:f0:e2:be:54:a3:78:1c:71:64:
         4b:20:8a:d1:26:bc:45:a5:d9:66:db:1d:9e:1f:cf:7b:e5:9a:
         c3:f1:6a:79:80:53:4d:4b:30:6b:e3:60:30:f9:23:d0:fc:df:
         2b:b5:23:92:8a:5e:0e:84:ec:c4:79:56:e7:d0:f5:5d:e2:99:
         cd:79:b0:29:b7:dc:d8:e5:3f:14:43:ce:24:8a:ff:1c:a4:f2:
         99:57:00:70:c5:4a:01:38:55:eb:1d:fe:80:65:9d:7d:31:96:
         01:a2:b8:b4:f3:c2:7c:15:76:c1:ff:bd:72:fd:e7:e6:ca:a6:
         d1:5a:58:ab:59:9b:73:45:ba:70:7e:37:1b:a4:3a:4a:95:17:
         34:a6:11:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXi/DDgQq0D9czAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
ZjFlZGZhYzQtMTJlNy00MGQ3LTk2NTEtN2Q2M2YyODJjNDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQVLe+y/Xrl7gi5IX5SrdoixZ/h4IgP1rt7D
ivr5S05enGlKuxRHHlyxlNEDImKsQUjFkyh9d8KwRzTJEIAPkDa2uafer/DtcKgS
yuiQegXc0t/C5y6uYB9YZiwOD69VRWMyEA8YfPGR8AK4YGbyfmvnG3nngBBqX/tp
tDYT9GCwCulA4kjPaEd9d3X8DuEjVUl4XXaO6rlf+96KoG0bk9Olws4it0IIW2Pb
BvxAvBSKc/Skw/0Bjw1NQ1gnRhUAZ0oA5Dm2/28Efw2dgfZwTrlgNNN5QpZi57v8
tYOBeQtS9iiNTmx3cfay1Sxq1ILCJFYo7kxDy16o03qeMSbhvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO0xmNfyo48Mll9aWmCMJsU6wKfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzVjY2EwZmUtNDhlOC0z
MmQwLTk5N2QtOGE1YmUxMzliNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNvkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKScJl/FM1RwukMaMnjG5oGmMKE+tpQJbmrUbi/h+XeWOvJz7Dw15Him
of0WsM/hyBTreQpV0BsrCiZnaiYzjZ0sodX2bFXSD2ICZ6Xz/bwbU6f9JJhaggD+
O/AWlBNTYadFM95mddHGAwmaZ8ZGwLYASXD2RvDivlSjeBxxZEsgitEmvEWl2Wbb
HZ4fz3vlmsPxanmAU01LMGvjYDD5I9D83yu1I5KKXg6E7MR5VufQ9V3imc15sCm3
3NjlPxRDziSK/xyk8plXAHDFSgE4Vesd/oBlnX0xlgGiuLTzwnwVdsH/vXL95+bK
ptFaWKtZm3NFunB+NxukOkqVFzSmEfA=
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:17:02 2026 by rpki-client