Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9debc7cc-c5c4-3700-8afe-6df3f7325c06.roa
File:                     9debc7cc-c5c4-3700-8afe-6df3f7325c06.roa (raw, json)
Hash identifier:          sNqFrYillAgrO4Jlg5TJxkORDBgwD5Jpc7h6dJ/qqsI=
Subject key identifier:   37:40:91:9E:82:13:84:D1:97:2E:18:10:2E:5E:ED:02:26:E1:3A:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB12A7DEF01483B71DF780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9debc7cc-c5c4-3700-8afe-6df3f7325c06.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        198.235.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:12:a7:de:f0:14:83:b7:1d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1b8c7e18-b26a-4df2-8783-1aadd2867835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:9e:59:c9:b7:a4:a5:a7:5d:51:ec:e1:e1:
                    dd:87:68:8e:4b:a4:50:68:c6:f0:4e:3f:76:de:6d:
                    bf:9f:4a:1d:70:55:44:8a:90:9d:c8:1e:7a:d8:b3:
                    90:6e:a1:76:a9:cd:9f:0f:20:8c:dd:d4:27:01:d5:
                    56:27:f3:47:ef:a1:5c:11:00:5a:7e:e4:53:12:60:
                    79:b8:1b:b2:2e:5b:5e:e6:f9:e3:72:62:b0:35:37:
                    42:ac:48:df:77:78:48:7b:1c:69:86:25:03:53:ca:
                    7a:5a:01:07:f6:6f:6a:c5:ca:88:58:8b:c1:dd:02:
                    90:63:b2:de:ee:8f:4f:c3:46:f8:1c:db:b1:98:98:
                    c1:bb:e9:fe:16:5d:f3:99:1c:1c:ee:81:f4:09:7a:
                    7f:2a:8a:8e:13:7f:9a:b3:5e:c0:00:1e:48:e8:ef:
                    b5:3d:47:8a:52:d8:a7:0a:40:6f:a7:66:ad:ab:05:
                    ec:be:d7:93:c2:34:1b:eb:a7:78:a7:13:c3:af:16:
                    e9:ef:cb:6c:d5:f2:1b:7b:22:6b:29:34:c5:7d:65:
                    56:c6:e9:88:d3:65:17:19:0d:44:05:4e:d5:28:66:
                    03:10:eb:16:0d:8c:a9:d5:81:e3:d1:ce:b0:ce:21:
                    f5:96:11:e9:d6:ff:e2:8a:f6:7b:ee:77:56:da:06:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:91:9E:82:13:84:D1:97:2E:18:10:2E:5E:ED:02:26:E1:3A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9debc7cc-c5c4-3700-8afe-6df3f7325c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:fd:59:45:8b:23:8b:63:67:a9:aa:a1:63:a8:ae:a3:0a:
         82:d3:89:b5:ec:34:db:3b:85:b7:7e:ed:68:41:3e:7c:a5:62:
         b7:b3:c6:83:72:5b:ea:5e:d3:93:6a:0b:06:a8:6c:66:e0:b7:
         0f:4b:6b:60:ba:35:3d:66:58:c4:11:d7:1f:c4:20:25:02:9a:
         f7:4a:62:4c:67:d4:f6:5a:3b:c7:9e:4e:fb:e1:4b:dd:f3:28:
         e9:24:61:3b:3f:37:56:13:98:fd:09:4a:07:5d:e7:c8:8b:d0:
         a0:87:4e:b8:d8:23:ad:6d:90:c4:f5:4c:d6:3c:92:09:d6:1b:
         9e:f5:f0:90:1a:7b:d8:7f:89:31:e2:3a:55:73:49:1a:db:4b:
         1f:24:d5:69:65:65:6c:d9:de:66:00:dc:c1:9d:34:f0:54:3b:
         9b:64:75:60:40:07:2a:ac:1b:91:1c:7a:53:d5:2a:1a:28:df:
         0e:19:fe:c0:e9:46:8c:96:cc:6d:5a:4d:65:2a:54:c9:45:51:
         bf:31:f9:d6:b7:67:c8:e2:ac:82:00:a1:df:cc:eb:5c:78:0e:
         b3:74:41:3b:88:c8:a2:77:73:91:bc:1e:c6:4a:4a:dc:25:db:
         d0:5f:c0:b6:3c:3b:e5:66:90:2a:70:54:c9:ac:c9:fa:94:89:
         cd:41:ff:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyxKn3vAUg7cd94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MWI4YzdlMTgtYjI2YS00ZGYyLTg3ODMtMWFhZGQyODY3ODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbOeWcm3pKWnXVHs4eHdh2iOS6RQaMbwTj92
3m2/n0odcFVEipCdyB562LOQbqF2qc2fDyCM3dQnAdVWJ/NH76FcEQBafuRTEmB5
uBuyLlte5vnjcmKwNTdCrEjfd3hIexxphiUDU8p6WgEH9m9qxcqIWIvB3QKQY7Le
7o9Pw0b4HNuxmJjBu+n+Fl3zmRwc7oH0CXp/KoqOE3+as17AAB5I6O+1PUeKUtin
CkBvp2atqwXsvteTwjQb66d4pxPDrxbp78ts1fIbeyJrKTTFfWVWxumI02UXGQ1E
BU7VKGYDEOsWDYyp1YHj0c6wziH1lhHp1v/iivZ77ndW2gb+kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdAkZ6CE4TRly4YEC5e7QIm4Tp6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWRlYmM3Y2MtYzVjNC0z
NzAwLThhZmUtNmRmM2Y3MzI1YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxutFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwI/VlFiyOLY2epqqFjqK6jCoLTibXsNNs7hbd+7WhBPnylYrezxoNy
W+pe05NqCwaobGbgtw9La2C6NT1mWMQR1x/EICUCmvdKYkxn1PZaO8eeTvvhS93z
KOkkYTs/N1YTmP0JSgdd58iL0KCHTrjYI61tkMT1TNY8kgnWG5718JAae9h/iTHi
OlVzSRrbSx8k1WllZWzZ3mYA3MGdNPBUO5tkdWBAByqsG5EcelPVKhoo3w4Z/sDp
RoyWzG1aTWUqVMlFUb8x+da3Z8jirIIAod/M61x4DrN0QTuIyKJ3c5G8HsZKStwl
29BfwLY8O+VmkCpwVMmsyfqUic1B/7o=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:16 2026 by rpki-client