Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b5200d39-cf76-3267-8305-75da29762757.roa
File:                     b5200d39-cf76-3267-8305-75da29762757.roa (raw, json)
Hash identifier:          KBvshJjcrWr78DBUQolTBpmywQA9fNyMv8YAB/9zemk=
Subject key identifier:   62:5D:F9:FA:3A:29:8B:5C:E7:7C:3F:B5:94:7F:53:35:8E:58:2D:89
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796CA9E57603FADA62D0370
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b5200d39-cf76-3267-8305-75da29762757.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        198.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:ca:9e:57:60:3f:ad:a6:2d:03:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3b9eb0aa-3769-4c66-b5f4-cc9d5d43f0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:61:42:81:ef:19:ac:03:b7:45:79:c7:62:
                    e5:67:71:ad:c1:d1:61:0e:09:1e:a0:f0:9d:34:a6:
                    1a:56:c7:f7:ed:cf:b8:e4:b4:d7:82:a3:11:3d:34:
                    28:de:71:1c:18:2d:11:6f:8f:df:c9:01:6f:76:2f:
                    16:98:41:71:f6:b4:11:df:12:4f:cd:4e:1e:ee:17:
                    a7:99:4b:68:09:b2:05:db:da:d8:72:d6:46:a7:84:
                    6a:76:05:f3:0e:f4:27:b8:b7:57:99:cd:f0:6a:b0:
                    80:c7:bf:c2:39:c5:6e:5e:29:92:ff:72:5e:4b:a0:
                    52:14:34:1e:aa:58:a3:b7:85:f6:54:a2:11:37:3a:
                    bf:3c:c7:20:72:0f:79:86:11:9e:cd:66:2e:c6:17:
                    95:f8:6e:fc:7f:20:6e:d6:b5:ce:78:be:0d:74:33:
                    67:23:4f:17:ec:5a:29:4c:2a:45:d5:e9:f0:7a:41:
                    7b:f4:8c:a2:f2:13:ae:4f:81:b1:1b:0c:4a:7a:07:
                    8b:2a:fe:d8:66:be:ed:8f:8c:4b:3e:22:f9:76:9d:
                    07:0f:ad:76:4a:21:a6:09:17:c0:b3:27:b8:f7:2a:
                    68:cd:84:66:40:14:86:64:73:b6:ec:6f:81:92:a6:
                    07:c3:02:41:53:d3:82:ab:c0:65:54:85:97:d1:b9:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:F9:FA:3A:29:8B:5C:E7:7C:3F:B5:94:7F:53:35:8E:58:2D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b5200d39-cf76-3267-8305-75da29762757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:20:c9:9a:c9:66:0b:b0:a4:ef:c8:8f:9a:59:28:54:81:
         93:f0:e0:a7:a4:d0:df:90:fc:8b:61:f2:43:cc:10:e9:18:2c:
         97:a0:a9:47:ad:6c:a4:a7:c7:a0:de:48:6a:11:19:b5:bf:35:
         11:f4:0b:3b:9a:7a:11:51:33:cc:e2:c1:11:a5:c3:57:05:61:
         a3:8d:3e:bd:fd:97:24:9b:05:ca:12:ef:8d:40:51:4a:49:34:
         71:86:7e:e7:a0:05:f6:a0:4b:c3:05:65:99:8f:0d:f2:b1:f2:
         f2:b9:d1:3f:9c:e5:da:08:04:f7:04:8f:aa:e6:b6:8a:db:42:
         48:63:9a:ff:c7:25:47:44:60:d7:ea:9b:1d:e3:86:81:3a:da:
         13:71:59:5b:96:d9:e4:0e:5f:99:f9:38:01:a2:5a:75:b8:98:
         74:af:37:b0:88:da:a5:b1:19:ca:a8:a4:4a:a6:eb:65:1c:12:
         8d:36:ed:43:aa:a2:a9:e7:12:38:8f:fc:6d:e6:29:17:a9:c4:
         5d:dc:67:8e:00:83:b8:f4:79:08:a7:ae:c5:bf:3a:ac:51:5c:
         8e:c9:c9:e1:47:3e:36:e7:69:82:3a:f1:b3:bd:92:b0:ab:78:
         61:68:a6:f2:6f:82:67:52:a4:86:f5:54:39:ba:a9:08:26:64:
         9e:6c:e1:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nlsqeV2A/raYtA3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2I5ZWIwYWEtMzc2OS00YzY2LWI1ZjQtY2M5ZDVkNDNmMGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY1hQoHvGawDt0V5x2LlZ3GtwdFhDgkeoPCd
NKYaVsf37c+45LTXgqMRPTQo3nEcGC0Rb4/fyQFvdi8WmEFx9rQR3xJPzU4e7hen
mUtoCbIF29rYctZGp4RqdgXzDvQnuLdXmc3warCAx7/COcVuXimS/3JeS6BSFDQe
qlijt4X2VKIRNzq/PMcgcg95hhGezWYuxheV+G78fyBu1rXOeL4NdDNnI08X7Fop
TCpF1enwekF79Iyi8hOuT4GxGwxKegeLKv7YZr7tj4xLPiL5dp0HD612SiGmCRfA
sye49ypozYRmQBSGZHO27G+BkqYHwwJBU9OCq8BlVIWX0bnUbwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGJd+fo6KYtc53w/tZR/UzWOWC2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjUyMDBkMzktY2Y3Ni0z
MjY3LTgzMDUtNzVkYTI5NzYyNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxlYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhLsgyZrJZguwpO/Ij5pZKFSBk/Dgp6TQ35D8i2HyQ8wQ6Rgsl6CpR61s
pKfHoN5IahEZtb81EfQLO5p6EVEzzOLBEaXDVwVho40+vf2XJJsFyhLvjUBRSkk0
cYZ+56AF9qBLwwVlmY8N8rHy8rnRP5zl2ggE9wSPqua2ittCSGOa/8clR0Rg1+qb
HeOGgTraE3FZW5bZ5A5fmfk4AaJadbiYdK83sIjapbEZyqikSqbrZRwSjTbtQ6qi
qecSOI/8beYpF6nEXdxnjgCDuPR5CKeuxb86rFFcjsnJ4Uc+Nudpgjrxs72SsKt4
YWim8m+CZ1KkhvVUObqpCCZknmzhxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:47 2026 by rpki-client