Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa
File:                     7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa (raw, json)
Hash identifier:          s5E7vVQxNiUK9KI5amjS/fcgbhwo4pBfENEXqgTphKE=
Subject key identifier:   05:59:00:F1:8C:F2:B2:EB:1C:0C:E7:C7:8C:99:E5:3F:75:91:3D:B6
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584F03A7EA95CF51659556534200
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16839
IP address blocks:        199.91.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:ea:95:cf:51:65:95:56:53:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=5d6f8425-717e-4d7d-8612-c51602796aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:42:e3:78:32:6f:04:d1:47:26:87:fb:81:
                    4b:05:45:53:6c:6c:68:bb:90:15:d0:27:3e:0c:02:
                    59:88:f7:65:22:96:69:44:77:72:2f:52:e6:e3:55:
                    a5:a9:1a:49:95:98:d8:89:39:6c:22:92:e0:73:b3:
                    85:41:dc:1b:17:89:6e:2f:92:1c:2a:1c:39:61:3a:
                    a8:66:79:a6:28:68:fd:9a:bb:69:d3:6a:29:08:3f:
                    ea:d7:73:ae:e9:94:0a:42:14:a3:64:b3:42:bb:09:
                    03:ab:ae:e7:10:33:c7:58:5d:c7:69:2e:5f:ff:fd:
                    75:8a:68:76:c4:b2:d6:8b:7f:98:ef:ad:3e:02:f5:
                    0c:70:2c:fc:a7:c9:ae:82:9b:60:ec:fa:19:ac:75:
                    ab:57:df:7f:6a:15:47:9f:8f:5a:ed:6e:40:63:30:
                    42:8e:59:80:57:94:9c:51:60:c0:dc:44:dd:37:37:
                    4b:f6:d8:a8:a8:df:e8:74:3c:da:32:2d:5b:92:7d:
                    92:70:b7:d9:97:e0:63:78:a6:c4:2d:b6:63:d5:5f:
                    48:47:b1:44:fb:f1:f3:02:b6:27:dd:52:21:11:62:
                    19:38:54:5d:e3:97:43:11:e9:11:f1:71:0b:03:5d:
                    e7:a0:2c:a5:69:3e:79:48:89:f9:6b:bd:34:52:21:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:59:00:F1:8C:F2:B2:EB:1C:0C:E7:C7:8C:99:E5:3F:75:91:3D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:87:a6:f4:72:0c:65:f1:f8:be:d4:7e:e4:f9:fc:75:2f:
         16:22:27:97:96:23:40:23:65:37:69:9c:31:92:28:df:ae:dd:
         bc:a1:7f:fe:f2:41:b9:76:bc:37:55:20:fe:df:92:b8:44:6c:
         26:b7:ec:c6:ff:fc:80:fc:c9:b8:09:d4:29:27:2a:7d:7a:5e:
         b9:73:54:55:17:c9:2b:34:ef:7d:31:b1:72:83:55:72:34:e2:
         b6:a3:b9:83:05:0a:da:07:ba:8b:f7:a3:15:e5:35:47:b4:d6:
         ab:cf:78:3e:d8:09:3d:4b:83:41:b6:b5:a1:b8:f0:63:90:b5:
         b2:14:32:a7:a3:89:7a:a8:43:91:75:fb:5a:22:b9:c7:54:e9:
         79:39:26:bc:9b:87:92:04:69:c7:af:55:12:40:0f:de:15:f6:
         e2:f8:3d:b5:ff:da:d4:fe:10:0a:ec:f9:b9:33:ae:6b:da:ae:
         17:a0:29:11:6b:c2:49:d4:06:2a:8e:23:af:bf:9d:7b:64:89:
         4b:70:d7:61:40:47:e9:98:8e:8a:c2:66:b9:a0:d0:4c:1f:e3:
         45:d1:fd:07:d5:6a:de:df:a7:52:47:d8:15:c8:0f:18:59:f5:
         12:bc:07:8c:7b:6c:e2:45:10:b6:16:3c:6a:3a:af:9f:57:d6:
         d8:a3:f1:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+qVz1FllVZTQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NWQ2Zjg0MjUtNzE3ZS00ZDdkLTg2MTItYzUxNjAyNzk2YWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVC43gybwTRRyaH+4FLBUVTbGxou5AV0Cc+
DAJZiPdlIpZpRHdyL1Lm41WlqRpJlZjYiTlsIpLgc7OFQdwbF4luL5IcKhw5YTqo
ZnmmKGj9mrtp02opCD/q13Ou6ZQKQhSjZLNCuwkDq67nEDPHWF3HaS5f//11imh2
xLLWi3+Y760+AvUMcCz8p8mugptg7PoZrHWrV99/ahVHn49a7W5AYzBCjlmAV5Sc
UWDA3ETdNzdL9tioqN/odDzaMi1bkn2ScLfZl+BjeKbELbZj1V9IR7FE+/HzArYn
3VIhEWIZOFRd45dDEekR8XELA13noCylaT55SIn5a700UiHqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVZAPGM8rLrHAznx4yZ5T91kT22MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiNTlkOTUtMjhiZi0z
ZjNkLThmYzItMzZiNmNlZmE4ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjkh6b0cgxl8fi+1H7k+fx1LxYiJ5eWI0AjZTdpnDGSKN+u3byhf/7y
Qbl2vDdVIP7fkrhEbCa37Mb//ID8ybgJ1CknKn16XrlzVFUXySs0730xsXKDVXI0
4rajuYMFCtoHuov3oxXlNUe01qvPeD7YCT1Lg0G2taG48GOQtbIUMqejiXqoQ5F1
+1oiucdU6Xk5Jrybh5IEacevVRJAD94V9uL4PbX/2tT+EArs+bkzrmvarhegKRFr
wknUBiqOI6+/nXtkiUtw12FAR+mYjorCZrmg0Ewf40XR/QfVat7fp1JH2BXIDxhZ
9RK8B4x7bOJFELYWPGo6r59X1tij8aw=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:35:44 2026 by rpki-client