Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa
File:                     cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa (raw, json)
Hash identifier:          JkRyYSzzdBKUrx1l469JlSegbl4g022aA0UC4MYye7w=
Subject key identifier:   91:9E:97:F2:74:41:ED:CA:97:E7:64:37:8C:21:11:DB:9B:B7:3E:E1
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584DFFA1C911DE0B9F43D0BC1040
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa
Signing time:             Fri 29 May 2026 21:38:41 +0000
ROA not before:           Fri 29 May 2026 21:38:41 +0000
ROA not after:            Thu 27 Aug 2026 21:37:06 +0000
asID:                     401015
IP address blocks:        192.5.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ff:a1:c9:11:de:0b:9f:43:d0:bc:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: May 29 21:38:41 2026 GMT
            Not After : Aug 27 21:37:06 2026 GMT
        Subject: CN=aa4bc309-969c-466d-8b7a-c01cbaccad09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:89:64:3c:91:40:1b:08:96:f3:93:d8:9c:
                    5d:21:48:05:63:8c:37:5f:43:ca:15:f6:09:0b:43:
                    a1:95:53:7a:69:30:36:0d:e3:bf:df:22:c6:a4:a7:
                    c5:92:73:f6:e2:bc:5c:e4:a2:02:02:9f:81:6d:92:
                    1c:5f:1e:4e:0e:3f:16:31:69:49:5b:1f:f4:2b:d2:
                    2d:2b:d6:11:8f:d1:7d:38:c1:4f:e5:8e:14:6c:9f:
                    d4:84:77:d5:a4:ef:10:4d:be:bb:cc:f4:0b:dc:45:
                    e1:e3:2d:9a:f5:12:b6:a2:ba:47:8c:cd:05:58:8a:
                    dd:d9:36:3a:0f:5c:eb:44:93:48:a5:d0:ac:fc:aa:
                    c0:fa:00:30:94:56:2c:3e:b0:78:8d:22:29:0a:1e:
                    97:8e:07:e1:9a:1e:15:75:65:5c:03:34:f9:6e:7e:
                    41:89:1d:96:cb:be:bd:29:44:95:5c:5a:15:6d:5a:
                    12:01:b8:e1:d5:04:f7:7d:28:9c:b0:c9:c0:48:ac:
                    81:2c:ec:e9:f9:db:76:a0:ac:ad:62:ac:cd:03:56:
                    8f:00:69:36:84:9e:59:c3:3b:19:59:ae:8b:f9:f5:
                    16:ca:ac:7b:fb:c9:3b:ee:94:9c:1d:54:21:62:6d:
                    5a:19:a1:f6:35:54:cf:e2:06:a0:75:d1:50:45:cc:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9E:97:F2:74:41:ED:CA:97:E7:64:37:8C:21:11:DB:9B:B7:3E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:ab:37:fe:cd:31:7d:97:9c:c4:8f:39:b6:2e:18:09:57:
         bd:af:76:74:87:f8:93:34:27:9f:a5:c9:a1:15:ca:e7:75:6e:
         c2:ec:7a:79:e7:c8:44:3f:08:52:20:65:f5:fa:0d:4a:96:93:
         af:4f:42:e4:a9:d7:d3:b8:cc:69:15:1b:8d:a1:ed:40:ce:09:
         46:0a:75:c6:d9:0a:59:fa:a7:f9:02:93:86:b2:09:e1:c0:1b:
         52:b5:fe:ea:8c:a8:d3:96:24:99:9d:d3:ba:f1:df:62:12:15:
         82:0b:f2:33:ad:bd:5b:74:16:db:af:b1:4c:be:4a:0a:f6:34:
         9e:db:5d:6e:2f:c6:65:a6:d1:66:75:9a:1c:d3:60:5f:38:eb:
         f9:25:03:98:28:8c:48:2c:df:ba:7c:53:df:80:50:11:8d:f9:
         42:6f:ca:cf:a3:f7:42:96:42:69:15:bf:8c:9d:55:dd:b1:1b:
         2b:64:56:53:e8:6a:8a:9f:41:8e:f7:5a:56:93:1a:71:b9:5d:
         7e:02:a4:4a:60:9b:1d:ee:fb:67:bf:bd:cf:ac:35:3d:85:e8:
         b2:4b:7a:18:35:35:38:fb:29:c8:41:71:0d:6f:21:99:92:4f:
         2d:a8:5e:e3:38:0e:f3:dd:26:98:3e:a6:7c:fc:c8:2f:d0:31:
         c0:46:61:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3/ockR3gufQ9C8EEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1
ZmY1MB4XDTI2MDUyOTIxMzg0MVoXDTI2MDgyNzIxMzcwNlowLzEtMCsGA1UEAxMk
YWE0YmMzMDktOTY5Yy00NjZkLThiN2EtYzAxY2JhY2NhZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlleJZDyRQBsIlvOT2JxdIUgFY4w3X0PKFfYJ
C0OhlVN6aTA2DeO/3yLGpKfFknP24rxc5KICAp+BbZIcXx5ODj8WMWlJWx/0K9It
K9YRj9F9OMFP5Y4UbJ/UhHfVpO8QTb67zPQL3EXh4y2a9RK2orpHjM0FWIrd2TY6
D1zrRJNIpdCs/KrA+gAwlFYsPrB4jSIpCh6Xjgfhmh4VdWVcAzT5bn5BiR2Wy769
KUSVXFoVbVoSAbjh1QT3fSicsMnASKyBLOzp+dt2oKytYqzNA1aPAGk2hJ5ZwzsZ
Wa6L+fUWyqx7+8k77pScHVQhYm1aGaH2NVTP4gagddFQRcywKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGel/J0Qe3Kl+dkN4whEdubtz7hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz
ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvY2NlOTE5MTUtM2YwMC0z
ZTljLWIyZWEtYjVmZjhlMjJhMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2
ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2
NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5
ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwAXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKpqzf+zTF9l5zEjzm2LhgJV72vdnSH+JM0J5+lyaEVyud1bsLsennn
yEQ/CFIgZfX6DUqWk69PQuSp19O4zGkVG42h7UDOCUYKdcbZCln6p/kCk4ayCeHA
G1K1/uqMqNOWJJmd07rx32ISFYIL8jOtvVt0FtuvsUy+Sgr2NJ7bXW4vxmWm0WZ1
mhzTYF846/klA5gojEgs37p8U9+AUBGN+UJvys+j90KWQmkVv4ydVd2xGytkVlPo
aoqfQY73WlaTGnG5XX4CpEpgmx3u+2e/vc+sNT2F6LJLehg1NTj7KchBcQ1vIZmS
Ty2oXuM4DvPdJpg+pnz8yC/QMcBGYSg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:19 2026 by rpki-client