Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa
File:                     a3e5781b-c448-3328-afe8-ee297ead9140.roa (raw, json)
Hash identifier:          2NorVqvru0WLtB5N4RvvkEVfH4G7IL3SASIJVRUf6ac=
Subject key identifier:   04:05:92:5C:91:BD:1B:49:63:0E:00:83:5F:78:EE:64:2B:32:8D:10
Certificate issuer:       /CN=557a586a-7e35-45b6-bb87-b7631d4dda84
Certificate serial:       010D0C9F4328584E18AF05C1DE0A374E084AD7C0
Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        192.231.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:05:c1:de:0a:37:4e:08:4a:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=f40ab86f-eab8-4cc1-b4c9-41e8e291cd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:87:c7:8d:9e:79:34:1e:e7:05:73:7f:19:
                    21:8c:f8:7b:29:83:ce:a8:f9:40:31:7a:90:d7:1e:
                    90:13:ed:be:b0:30:1a:17:0d:97:4f:96:d3:b2:37:
                    e4:a7:2a:7d:17:b3:2e:c4:71:89:5e:06:ca:3d:56:
                    07:c8:3b:34:36:43:a9:da:45:e2:c8:7d:e9:b7:0c:
                    b2:94:3a:22:72:d5:ca:d0:d4:1b:db:f7:be:76:ac:
                    10:33:f3:a7:89:6b:72:53:29:b9:e0:51:7a:c1:d7:
                    74:42:6c:a0:23:34:0a:34:55:47:9e:7d:62:d7:a9:
                    73:18:6d:c6:26:11:a0:d2:b7:d7:a8:2d:fd:a8:70:
                    7c:af:ac:25:58:88:0a:51:f7:c1:3e:28:39:c1:bb:
                    0f:35:84:ac:30:5f:64:bb:2b:c5:2f:45:12:81:3d:
                    cf:1d:c5:74:17:63:f2:11:15:e5:b7:56:d3:ed:7f:
                    4c:1f:fc:96:23:2f:90:5c:a8:cf:a2:d8:8c:53:d9:
                    25:37:db:e3:da:4e:31:ba:9d:bd:93:7a:74:ba:ad:
                    e3:16:f2:48:6d:56:cf:c1:a9:ca:53:23:f8:1a:e0:
                    42:83:cd:6b:60:3f:9f:fc:38:a9:c0:4d:20:91:7a:
                    0c:32:78:5c:cf:24:89:64:dd:c9:b1:1b:d1:d0:88:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:92:5C:91:BD:1B:49:63:0E:00:83:5F:78:EE:64:2B:32:8D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl

            X509v3 Authority Key Identifier:
                keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:89:46:f1:aa:ce:0d:b7:d5:be:cd:c0:68:d5:16:21:1e:86:
         79:95:bd:3e:47:35:d8:cb:06:6d:1e:61:d8:5c:83:f3:29:92:
         65:cf:7c:80:fe:16:d8:51:82:d9:21:04:06:38:45:d2:09:cc:
         57:8e:94:ab:c3:61:ba:c5:88:86:cf:81:77:11:9e:f5:f3:9a:
         e5:91:eb:57:ff:03:99:01:45:61:34:38:80:b8:00:d9:ed:28:
         db:54:d2:29:9b:b9:62:d7:c0:c5:dc:fa:60:a7:f6:7c:de:d2:
         f1:3d:ab:2c:f7:09:e6:c1:f8:fa:d0:99:7a:f7:ac:5b:04:5b:
         2c:06:a4:b9:3f:72:ab:85:bd:f4:bc:f8:6f:36:76:b8:dd:1f:
         9d:79:4e:8a:83:2f:a8:49:3e:c5:65:bf:7b:40:9c:52:4c:a2:
         a5:15:25:6f:00:37:d1:40:73:3d:6b:42:bf:c2:f2:2e:bc:7c:
         8f:a2:04:8b:0f:6f:ec:b2:32:78:21:69:99:5a:88:14:69:e8:
         cc:f9:2c:86:33:55:b6:f9:d7:0c:85:aa:32:68:e7:f7:dc:5d:
         9d:9f:fa:8d:cf:8e:12:98:cd:f1:ce:43:4b:2f:b6:32:84:61:
         76:31:05:a7:83:15:5e:28:ed:75:35:35:76:e1:b8:7d:ca:0b:
         82:93:56:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrwXB3go3TghK18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU3YTU4NmEtN2UzNS00NWI2LWJiODctYjc2MzFkNGRk
YTg0MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZjQwYWI4NmYtZWFiOC00Y2MxLWI0YzktNDFlOGUyOTFjZDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDKHx42eeTQe5wVzfxkhjPh7KYPOqPlAMXqQ
1x6QE+2+sDAaFw2XT5bTsjfkpyp9F7MuxHGJXgbKPVYHyDs0NkOp2kXiyH3ptwyy
lDoictXK0NQb2/e+dqwQM/OniWtyUym54FF6wdd0QmygIzQKNFVHnn1i16lzGG3G
JhGg0rfXqC39qHB8r6wlWIgKUffBPig5wbsPNYSsMF9kuyvFL0USgT3PHcV0F2Py
ERXlt1bT7X9MH/yWIy+QXKjPotiMU9klN9vj2k4xup29k3p0uq3jFvJIbVbPwanK
UyP4GuBCg81rYD+f/DipwE0gkXoMMnhczySJZN3JsRvR0IjvBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQFklyRvRtJYw4Ag1947mQrMo0QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdh
NTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYzMWQ0ZGRhODQvYTNlNTc4MWItYzQ0OC0z
MzI4LWFmZTgtZWUyOTdlYWQ5MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTU3YTU4NmEtN2UzNS00NWI2LWJi
ODctYjc2MzFkNGRkYTg0LzU1N2E1ODZhLTdlMzUtNDViNi1iYjg3LWI3NjMxZDRk
ZGE4NC5jcmwwHwYDVR0jBBgwFoAUp138/nyBEt/M9IcKfEtG1UhERSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81NTdhNTg2YS03ZTM1LTQ1YjYtYmI4Ny1iNzYz
MWQ0ZGRhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOcVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOJRvGqzg231b7NwGjVFiEehnmVvT5HNdjLBm0eYdhcg/MpkmXPfID+
FthRgtkhBAY4RdIJzFeOlKvDYbrFiIbPgXcRnvXzmuWR61f/A5kBRWE0OIC4ANnt
KNtU0imbuWLXwMXc+mCn9nze0vE9qyz3CebB+PrQmXr3rFsEWywGpLk/cquFvfS8
+G82drjdH515ToqDL6hJPsVlv3tAnFJMoqUVJW8AN9FAcz1rQr/C8i68fI+iBIsP
b+yyMnghaZlaiBRp6Mz5LIYzVbb51wyFqjJo5/fcXZ2f+o3PjhKYzfHOQ0svtjKE
YXYxBaeDFV4o7XU1NXbhuH3KC4KTVjg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:40 2026 by rpki-client