Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8a84af80-ae05-3060-a437-10321d63719b.roa
File:                     8a84af80-ae05-3060-a437-10321d63719b.roa (raw, json)
Hash identifier:          8FLAfSmQKB3CWu8Ii2z4FFR1hiVwMYRzfLX+qBOSJk8=
Subject key identifier:   17:00:34:76:DF:9F:0E:72:F6:8A:CA:2A:68:81:55:D4:85:B5:CF:98
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584F3CE27A0B239B5C97B6110C80
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8a84af80-ae05-3060-a437-10321d63719b.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     397268
IP address blocks:        199.58.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:7a:0b:23:9b:5c:97:b6:11:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=be329d90-0d9a-4715-8e32-0716b628e82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:9b:52:09:38:c6:23:cf:ac:4b:e4:7b:64:
                    5f:5e:ef:4b:21:48:3b:48:93:e3:0a:5d:d7:83:c4:
                    fe:5d:26:f4:b3:8c:16:5d:b2:1c:23:dd:d1:ae:72:
                    78:91:d6:5f:d9:4f:56:35:2b:94:49:1e:ed:27:93:
                    36:0c:86:9c:14:ad:3e:d4:c8:39:e1:b3:0e:5f:8d:
                    57:fc:ad:43:c1:b5:f2:f3:67:90:c2:c2:63:4e:77:
                    20:86:03:63:35:02:2f:14:81:36:da:3b:fe:17:66:
                    67:98:e4:df:0e:80:e0:8f:04:82:bd:ed:fe:82:e0:
                    f6:57:c6:ac:13:84:e1:e7:c8:e2:a7:04:3d:cd:e0:
                    b3:07:ec:c9:55:87:6e:04:3d:6a:06:ab:29:a6:74:
                    79:28:ae:21:5d:f9:d7:a4:9c:26:06:fd:09:4b:92:
                    1b:2f:9a:ec:fc:c7:b5:e9:55:ff:55:da:65:7a:46:
                    02:23:06:b2:b3:ae:af:0f:a3:d0:ae:d3:43:b0:9a:
                    ad:4c:4c:09:69:31:5f:19:6e:9e:2e:2b:f5:c8:37:
                    e4:b5:b3:60:22:43:f0:09:5b:3c:bb:3f:d3:99:2a:
                    fe:70:60:34:ac:e6:9a:7f:15:7b:33:50:db:a3:1c:
                    9a:2d:a3:e4:97:c9:d8:86:7a:6d:8d:7f:fc:b8:5e:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:00:34:76:DF:9F:0E:72:F6:8A:CA:2A:68:81:55:D4:85:B5:CF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8a84af80-ae05-3060-a437-10321d63719b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b2:4c:84:3b:0f:1d:d5:7c:dd:50:77:bf:76:24:82:de:d1:
         07:3b:04:99:32:50:a4:89:9b:d0:a9:b2:6a:e2:16:99:68:08:
         a4:00:14:b9:d6:8f:f1:e4:ed:56:86:b5:8d:41:39:76:ea:c8:
         f1:20:1f:18:3e:31:79:a3:bb:8e:69:38:72:b8:4a:d9:2b:93:
         65:05:36:ed:7a:8c:ec:28:b5:cf:06:43:25:ca:f0:af:f2:ce:
         3a:a0:a2:8e:a6:06:08:84:5c:b3:38:ea:67:eb:d7:fb:f1:e0:
         ed:d0:4a:b2:6c:51:b5:28:ee:cc:04:1a:f1:e8:17:74:fa:dc:
         11:ef:11:f6:06:09:88:48:ed:75:43:d8:ae:68:da:15:bd:52:
         97:7c:67:9b:a3:5a:8e:ac:0b:3d:c0:97:75:9f:ce:2f:d8:bb:
         e1:4a:38:79:4a:45:4d:3d:4e:c0:81:07:a0:ec:ee:e8:7f:05:
         e0:ad:e3:52:d0:5b:88:f1:a4:c5:d7:44:9f:6e:62:72:74:6b:
         10:2a:d6:a7:5d:22:69:42:97:56:a0:96:80:0f:7e:44:4f:9c:
         c4:04:5c:1c:a1:49:a0:16:83:fc:79:fd:fe:d9:44:76:1e:16:
         ee:ce:c4:26:d9:63:01:aa:82:70:fa:c6:c0:3f:d4:81:36:85:
         2c:5a:5d:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884noLI5tcl7YRDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2
MWYxMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
YmUzMjlkOTAtMGQ5YS00NzE1LThlMzItMDcxNmI2MjhlODJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznWbUgk4xiPPrEvke2RfXu9LIUg7SJPjCl3X
g8T+XSb0s4wWXbIcI93RrnJ4kdZf2U9WNSuUSR7tJ5M2DIacFK0+1Mg54bMOX41X
/K1DwbXy82eQwsJjTncghgNjNQIvFIE22jv+F2ZnmOTfDoDgjwSCve3+guD2V8as
E4Th58jipwQ9zeCzB+zJVYduBD1qBqsppnR5KK4hXfnXpJwmBv0JS5IbL5rs/Me1
6VX/VdplekYCIways66vD6PQrtNDsJqtTEwJaTFfGW6eLiv1yDfktbNgIkPwCVs8
uz/TmSr+cGA0rOaafxV7M1DboxyaLaPkl8nYhnptjX/8uF640wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcANHbfnw5y9orKKmiBVdSFtc+YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx
NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvOGE4NGFmODAtYWUwNS0z
MDYwLWE0MzctMTAzMjFkNjM3MTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh
YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh
NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0
N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyyTIQ7Dx3VfN1Qd792JILe0Qc7BJkyUKSJm9CpsmriFploCKQAFLnW
j/Hk7VaGtY1BOXbqyPEgHxg+MXmju45pOHK4Stkrk2UFNu16jOwotc8GQyXK8K/y
zjqgoo6mBgiEXLM46mfr1/vx4O3QSrJsUbUo7swEGvHoF3T63BHvEfYGCYhI7XVD
2K5o2hW9Upd8Z5ujWo6sCz3Al3Wfzi/Yu+FKOHlKRU09TsCBB6Ds7uh/BeCt41LQ
W4jxpMXXRJ9uYnJ0axAq1qddImlCl1agloAPfkRPnMQEXByhSaAWg/x5/f7ZRHYe
Fu7OxCbZYwGqgnD6xsA/1IE2hSxaXU8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:15:24 2026 by rpki-client