Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/84924855-307c-3f87-b8c5-8d7a760a49da.roa
File:                     84924855-307c-3f87-b8c5-8d7a760a49da.roa (raw, json)
Hash identifier:          gnqBxgU2rioS+IMEzo7Ts1lcM6/bi4PuhgbpEED4ijU=
Subject key identifier:   FA:F3:DD:6C:75:2B:9D:23:C5:04:1D:D0:E0:2C:74:66:BA:DB:A6:B1
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584D67DFF86705E564E7787FF3C0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/84924855-307c-3f87-b8c5-8d7a760a49da.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     19637
IP address blocks:        192.19.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f8:67:05:e5:64:e7:78:7f:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=a511348c-6e60-4726-a7cf-7a395db79c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:80:43:32:dc:6e:1a:35:fb:20:74:d8:30:dc:
                    a7:21:66:ac:61:1a:26:2f:87:38:3d:79:6c:45:89:
                    fa:3c:3b:92:c5:fc:52:ed:ec:d8:09:73:36:cc:e6:
                    40:48:12:19:46:1e:52:7e:fd:9b:09:20:c0:af:0b:
                    38:54:53:d2:2d:77:08:3d:83:8d:5b:36:d5:1c:c4:
                    6d:70:4d:07:dc:44:6e:84:a6:73:82:a0:54:8c:be:
                    ed:5d:eb:56:af:d0:50:47:26:bf:fc:71:e8:4b:44:
                    62:dc:60:43:53:21:15:e8:cf:4a:cc:36:cb:76:34:
                    e1:78:5d:d5:67:98:9c:d9:55:5d:9e:05:9b:23:89:
                    4c:59:69:c9:51:95:26:87:c5:b0:87:0f:2e:07:df:
                    35:c4:4c:5e:22:e1:1d:01:0c:94:bb:b4:53:a1:d8:
                    14:11:92:7d:41:d4:12:9f:2a:33:75:80:95:c6:e9:
                    62:d2:44:07:9e:7f:11:67:ba:fe:58:8f:8d:af:7c:
                    5c:b4:14:46:12:f9:6a:0f:e6:66:1c:e9:3c:fd:32:
                    7f:08:00:b9:15:0c:45:0e:43:b5:1b:19:d1:0b:75:
                    f1:39:02:60:49:b5:a7:9a:f1:32:4d:e8:80:12:d9:
                    66:4d:5e:6c:31:65:d5:30:cf:ad:4d:17:31:44:74:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F3:DD:6C:75:2B:9D:23:C5:04:1D:D0:E0:2C:74:66:BA:DB:A6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/84924855-307c-3f87-b8c5-8d7a760a49da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:ed:3c:50:3b:cc:43:d5:81:35:30:48:57:de:ae:8c:11:
         a8:ea:0b:19:f5:cd:d6:af:23:08:6b:d9:39:73:db:2b:57:7a:
         57:96:ba:67:d2:62:d0:db:95:45:67:e6:f1:db:08:2f:08:b4:
         96:f6:aa:b0:f8:95:15:ad:c2:4b:33:1a:e1:2b:63:0f:2d:41:
         9e:23:51:fc:ca:10:b2:91:4f:33:a6:0c:e5:bc:1c:e8:9e:a5:
         06:6f:fd:48:49:09:de:d7:ce:73:62:50:ae:e8:53:6c:a5:84:
         df:ad:b4:32:2c:06:2a:44:3a:b9:3a:17:b9:98:b7:3b:3f:8b:
         17:4e:81:6f:b2:d7:04:63:dc:df:69:40:4d:76:65:8a:5b:a3:
         ea:47:2f:42:07:89:4a:30:2e:66:45:8d:e2:98:46:26:ae:b9:
         fe:af:3c:4d:42:a2:b3:45:8b:0f:08:81:be:46:31:d1:9d:e1:
         5f:de:df:3b:b3:40:ac:d9:c6:35:52:33:37:ee:36:7c:3f:16:
         cc:a1:48:bb:67:fe:3e:1f:8b:ee:3b:58:9a:b9:b4:2d:45:e5:
         52:fc:40:67:61:44:20:e6:39:09:85:f1:46:dc:5b:7c:93:20:
         e9:17:60:e4:bd:03:7d:ea:16:4a:4f:de:0e:ef:de:b6:8a:cd:
         7f:16:2e:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/hnBeVk53h/88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
YTUxMTM0OGMtNmU2MC00NzI2LWE3Y2YtN2EzOTVkYjc5YzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYBDMtxuGjX7IHTYMNynIWasYRomL4c4PXls
RYn6PDuSxfxS7ezYCXM2zOZASBIZRh5Sfv2bCSDArws4VFPSLXcIPYONWzbVHMRt
cE0H3ERuhKZzgqBUjL7tXetWr9BQRya//HHoS0Ri3GBDUyEV6M9KzDbLdjTheF3V
Z5ic2VVdngWbI4lMWWnJUZUmh8Wwhw8uB981xExeIuEdAQyUu7RTodgUEZJ9QdQS
nyozdYCVxuli0kQHnn8RZ7r+WI+Nr3xctBRGEvlqD+ZmHOk8/TJ/CAC5FQxFDkO1
GxnRC3XxOQJgSbWnmvEyTeiAEtlmTV5sMWXVMM+tTRcxRHT/mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrz3Wx1K50jxQQd0OAsdGa626axMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvODQ5MjQ4NTUtMzA3Yy0z
Zjg3LWI4YzUtOGQ3YTc2MGE0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVq7TxQO8xD1YE1MEhX3q6MEajqCxn1zdavIwhr2Tlz2ytXeleWumfS
YtDblUVn5vHbCC8ItJb2qrD4lRWtwkszGuErYw8tQZ4jUfzKELKRTzOmDOW8HOie
pQZv/UhJCd7XznNiUK7oU2ylhN+ttDIsBipEOrk6F7mYtzs/ixdOgW+y1wRj3N9p
QE12ZYpbo+pHL0IHiUowLmZFjeKYRiauuf6vPE1CorNFiw8Igb5GMdGd4V/e3zuz
QKzZxjVSMzfuNnw/FsyhSLtn/j4fi+47WJq5tC1F5VL8QGdhRCDmOQmF8UbcW3yT
IOkXYOS9A33qFkpP3g7v3raKzX8WLrM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:12 2026 by rpki-client