Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
File:                     8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json)
Hash identifier:          nOKf+FTUfbB5aL79GrpXqUCJPs+HWjQjZ+Pf4ZSCNi8=
Subject key identifier:   6B:74:D5:42:E7:A9:A9:83:11:D5:2E:EB:02:E3:9A:F3:1D:23:8A:31
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F4328584EFE122756C372B7FB43D40C20
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     30158
IP address blocks:        199.189.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:27:56:c3:72:b7:fb:43:d4:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=325989b0-3c19-4542-8cf9-ee6b6438bf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:07:a2:19:80:52:b0:c1:23:3f:09:de:94:
                    26:f8:c1:7a:82:45:cf:a3:f8:85:c7:e5:ac:e1:a1:
                    2f:5c:dc:57:3b:5d:ae:c2:64:0a:08:13:a3:6c:05:
                    30:31:05:c4:b1:a6:6d:bc:bb:c1:1f:40:cd:d2:1f:
                    14:a4:42:ea:be:92:bb:c2:ad:ec:25:9f:ae:3a:85:
                    da:a5:96:00:0e:d9:f6:3f:50:48:2c:e3:8e:30:af:
                    8f:b2:ec:0c:f0:76:45:68:d5:2a:ff:9e:1e:fe:5c:
                    53:20:2b:c4:dc:a1:c2:c7:05:af:70:d9:d1:e3:ca:
                    a7:9e:ee:b5:97:81:c5:e1:95:91:8d:aa:f9:5d:b6:
                    a8:ed:be:04:b6:f1:24:22:5b:2d:76:30:bc:89:73:
                    e3:90:e1:e1:6d:fc:3e:e0:41:25:06:55:3a:4b:6d:
                    d3:4f:28:f2:58:a5:83:c4:d8:d2:95:62:5b:4a:82:
                    6c:43:b2:f4:00:0e:78:79:6f:7f:58:da:16:c5:52:
                    09:a7:10:70:65:c6:e9:b2:e7:03:e1:6e:63:4b:bf:
                    91:36:17:69:14:0a:35:a9:d7:71:67:fc:1e:6e:fe:
                    94:56:cb:b1:a2:ee:c1:93:fe:8d:83:83:89:15:ad:
                    49:a4:e9:73:11:3c:c2:8b:e7:bf:cb:52:68:aa:73:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:D5:42:E7:A9:A9:83:11:D5:2E:EB:02:E3:9A:F3:1D:23:8A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:91:c6:14:10:c2:13:15:54:36:64:f2:7a:f9:2b:ef:34:
         fb:06:8c:36:57:67:db:34:89:a1:46:65:65:99:11:8f:84:bf:
         01:2c:a3:bd:32:d7:bc:59:1b:ce:10:f8:2b:cf:9d:e6:5a:66:
         1c:df:7e:82:8c:cc:c5:0f:3d:50:38:e9:6e:34:ab:15:c4:11:
         99:57:79:47:65:39:ad:e9:fa:e9:73:51:6d:83:0f:6a:55:5f:
         4d:dc:19:55:06:55:d4:5e:61:00:1d:d7:d9:da:e7:ff:11:d4:
         4c:16:a4:cb:39:62:aa:d0:0f:43:c4:80:c9:9b:7b:37:d2:93:
         46:f7:43:33:a8:34:5c:22:ce:eb:de:25:08:46:e7:ac:ad:1b:
         57:d8:7b:0f:90:cd:4c:86:5e:dc:1a:e8:11:b8:cf:d2:76:80:
         c8:0b:7e:1c:4e:c8:b7:97:92:c9:8e:5c:95:0b:e6:8f:14:a3:
         2c:7e:95:c3:63:70:bd:20:06:6c:83:c7:f8:09:3f:a8:d1:37:
         01:7a:eb:90:53:48:eb:ad:a7:0c:e8:ca:f6:70:10:2f:65:6f:
         71:3c:6b:54:c4:a6:aa:35:71:e7:63:a1:11:b8:20:47:7b:8b:
         83:6d:91:c4:b2:f4:da:be:63:ba:8b:6c:76:9d:f9:e6:30:d0:
         7d:37:1a:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EidWw3K3+0PUDCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz
MjU2MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MzI1OTg5YjAtM2MxOS00NTQyLThjZjktZWU2YjY0MzhiZjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArboHohmAUrDBIz8J3pQm+MF6gkXPo/iFx+Ws
4aEvXNxXO12uwmQKCBOjbAUwMQXEsaZtvLvBH0DN0h8UpELqvpK7wq3sJZ+uOoXa
pZYADtn2P1BILOOOMK+PsuwM8HZFaNUq/54e/lxTICvE3KHCxwWvcNnR48qnnu61
l4HF4ZWRjar5Xbao7b4EtvEkIlstdjC8iXPjkOHhbfw+4EElBlU6S23TTyjyWKWD
xNjSlWJbSoJsQ7L0AA54eW9/WNoWxVIJpxBwZcbpsucD4W5jS7+RNhdpFAo1qddx
Z/webv6UVsuxou7Bk/6Ng4OJFa1JpOlzETzCi+e/y1JoqnOr3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGt01ULnqamDEdUu6wLjmvMdI4oxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh
ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvOGI4YTg1YjAtZTE1Mi0z
NDBkLTk1NTItZDU3MWI2MThhMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi
YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl
MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx
ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx73IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0BkcYUEMITFVQ2ZPJ6+SvvNPsGjDZXZ9s0iaFGZWWZEY+EvwEso70y
17xZG84Q+CvPneZaZhzffoKMzMUPPVA46W40qxXEEZlXeUdlOa3p+ulzUW2DD2pV
X03cGVUGVdReYQAd19na5/8R1EwWpMs5YqrQD0PEgMmbezfSk0b3QzOoNFwizuve
JQhG56ytG1fYew+QzUyGXtwa6BG4z9J2gMgLfhxOyLeXksmOXJUL5o8Uoyx+lcNj
cL0gBmyDx/gJP6jRNwF665BTSOutpwzoyvZwEC9lb3E8a1TEpqo1cedjoRG4IEd7
i4NtkcSy9Nq+Y7qLbHad+eYw0H03Gjc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:58:29 2026 by rpki-client