Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
File:                     33383e35-cfc9-334b-848e-ad7ba56090f1.roa (raw, json)
Hash identifier:          B6Qn1tAfWpPmAWasTrQ8KlyvXP8hvI4/TfdRQiSDJZk=
Subject key identifier:   07:E1:38:76:7E:5F:75:FC:A6:DE:89:E9:37:25:F1:59:31:FF:28:88
Certificate issuer:       /CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
Certificate serial:       010D0C9F4328584EDC91FE160B0157C027337A00
Authority key identifier: 4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     55179
IP address blocks:        198.168.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fe:16:0b:01:57:c0:27:33:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=4a909475-431c-41d1-8ad2-5cccd66980a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:ef:f0:23:d6:b4:95:98:4e:b1:af:fb:cf:
                    ea:67:3c:86:7d:c5:d2:20:74:ea:4c:47:dc:a7:c0:
                    22:88:8b:f6:7d:72:85:20:e8:f1:95:ae:db:c9:67:
                    24:23:ec:f6:2c:e6:44:a5:bd:74:2d:73:eb:e7:54:
                    37:f3:96:44:cd:4a:54:51:f1:36:19:93:be:e1:c4:
                    3a:e7:a8:ba:3b:3f:35:6c:78:ca:30:9f:2a:f0:c3:
                    3d:69:d8:bb:22:2a:da:22:e8:05:f4:3a:de:a8:23:
                    de:49:96:ee:1f:07:bd:c3:39:de:d0:a1:78:1c:a4:
                    80:b1:93:8a:a5:00:73:25:73:18:09:b1:28:fa:79:
                    85:71:f4:cf:b7:5b:56:60:a0:47:30:ea:bc:7e:56:
                    ab:8e:f2:0d:6b:2a:7e:3b:b7:86:d7:30:48:d3:b2:
                    92:d6:06:a4:37:c9:4f:45:d2:42:29:df:e6:39:f6:
                    32:55:45:16:0c:c1:b4:ea:98:3f:a6:4a:37:7e:7c:
                    9c:67:4d:2b:6b:69:34:9b:f3:e3:96:19:1a:e8:c2:
                    44:68:3f:40:6d:89:85:88:44:72:37:3d:e1:4b:84:
                    8e:08:46:c2:b4:89:86:3e:19:1e:18:46:32:03:4d:
                    72:8b:48:8f:a1:a1:d1:a3:96:4d:cf:60:da:41:12:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E1:38:76:7E:5F:75:FC:A6:DE:89:E9:37:25:F1:59:31:FF:28:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl

            X509v3 Authority Key Identifier:
                keyid:4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:2c:ec:bc:7e:36:49:06:bd:f4:c6:15:48:ff:14:0a:11:
         04:0f:36:8d:f4:9f:0a:9c:88:2e:c3:6f:4b:93:61:a4:ae:16:
         88:fd:a7:42:45:19:74:a8:6c:52:68:6d:57:11:1a:11:14:6f:
         6c:85:90:48:76:b4:2a:e3:80:43:89:55:54:cd:64:94:b3:50:
         c1:88:f6:6a:86:ac:67:06:2f:80:02:61:b5:f8:3b:0a:65:11:
         6a:3b:0b:07:69:be:12:cc:8c:aa:78:bd:91:06:c7:29:16:a1:
         d4:2d:c7:50:c5:9d:07:0e:b7:b8:f2:a1:a0:c8:37:24:77:d8:
         0a:51:5b:51:bf:7f:0f:0a:47:21:91:2c:92:10:f8:f1:f4:05:
         26:d4:f6:41:65:f2:7e:51:a1:e5:71:5f:46:1f:dd:49:43:31:
         e1:8c:80:e1:8a:53:82:61:61:66:2d:74:ff:96:3e:aa:2d:d8:
         e5:4d:e5:f6:5e:34:6d:3a:f6:b4:77:92:1d:4f:e2:00:a7:2e:
         62:d5:93:86:c7:0e:5b:a2:a6:a5:e8:a5:dd:ac:f6:8e:6e:9d:
         c7:cd:ff:63:89:d0:df:ae:14:5f:c2:ad:5f:94:c7:7d:91:f7:
         5e:c6:5d:74:3a:2a:03:6f:65:c0:e3:77:6d:3f:8b:eb:5f:34:
         56:87:08:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckf4WCwFXwCczegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VhNWI2MDYtMzFjMC00MDg2LWI1M2QtZWRmN2ZiZGQw
MDc4MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NGE5MDk0NzUtNDMxYy00MWQxLThhZDItNWNjY2Q2Njk4MGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl53v8CPWtJWYTrGv+8/qZzyGfcXSIHTqTEfc
p8AiiIv2fXKFIOjxla7byWckI+z2LOZEpb10LXPr51Q385ZEzUpUUfE2GZO+4cQ6
56i6Oz81bHjKMJ8q8MM9adi7IiraIugF9DreqCPeSZbuHwe9wzne0KF4HKSAsZOK
pQBzJXMYCbEo+nmFcfTPt1tWYKBHMOq8flarjvINayp+O7eG1zBI07KS1gakN8lP
RdJCKd/mOfYyVUUWDMG06pg/pko3fnycZ00ra2k0m/Pjlhka6MJEaD9AbYmFiERy
Nz3hS4SOCEbCtImGPhkeGEYyA01yi0iPoaHRo5ZNz2DaQRJGdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfhOHZ+X3X8pt6J6Tcl8Vkx/yiIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZWE1
YjYwNi0zMWMwLTQwODYtYjUzZC1lZGY3ZmJkZDAwNzgvMzMzODNlMzUtY2ZjOS0z
MzRiLTg0OGUtYWQ3YmE1NjA5MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2VhNWI2MDYtMzFjMC00MDg2LWI1
M2QtZWRmN2ZiZGQwMDc4LzNlYTViNjA2LTMxYzAtNDA4Ni1iNTNkLWVkZjdmYmRk
MDA3OC5jcmwwHwYDVR0jBBgwFoAUTyeo8BruySwDwW2f+XxPNoZ+kHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZWE1YjYwNi0zMWMwLTQwODYtYjUzZC1lZGY3
ZmJkZDAwNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqhqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrGLOy8fjZJBr30xhVI/xQKEQQPNo30nwqciC7Db0uTYaSuFoj9p0JF
GXSobFJobVcRGhEUb2yFkEh2tCrjgEOJVVTNZJSzUMGI9mqGrGcGL4ACYbX4Owpl
EWo7CwdpvhLMjKp4vZEGxykWodQtx1DFnQcOt7jyoaDINyR32ApRW1G/fw8KRyGR
LJIQ+PH0BSbU9kFl8n5RoeVxX0Yf3UlDMeGMgOGKU4JhYWYtdP+WPqot2OVN5fZe
NG069rR3kh1P4gCnLmLVk4bHDluipqXopd2s9o5uncfN/2OJ0N+uFF/CrV+Ux32R
917GXXQ6KgNvZcDjd20/i+tfNFaHCCU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:30 2026 by rpki-client