Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/f4f81962-094b-35ed-aff2-27e92a76c214.roa
File:                     f4f81962-094b-35ed-aff2-27e92a76c214.roa (raw, json)
Hash identifier:          6qtFC2g+1r9uqrn6aNgSKvQsipQnkbiM7HGHAPHiydQ=
Subject key identifier:   AF:8E:61:82:C2:68:DD:2D:58:34:14:DE:06:FB:26:62:D9:22:24:5A
Certificate issuer:       /CN=56ce5662-3b8d-4725-80ff-829d50d5beda
Certificate serial:       010D0C9F4328584EF01CA2CB3E44877BDB515300
Authority key identifier: 7A:87:C6:39:F2:3D:8B:23:DB:EF:31:36:0F:50:0F:79:FB:97:C7:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/f4f81962-094b-35ed-aff2-27e92a76c214.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     3128
IP address blocks:        138.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/56ce5662-3b8d-4725-80ff-829d50d5beda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/56ce5662-3b8d-4725-80ff-829d50d5beda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a2:cb:3e:44:87:7b:db:51:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ce5662-3b8d-4725-80ff-829d50d5beda
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=2be744bc-f113-4bee-be8b-5f917b7fd87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:e5:87:ce:5e:58:aa:f4:48:bb:cc:11:f4:
                    ae:47:a8:be:8d:56:07:10:bc:6a:30:fd:c2:11:65:
                    62:17:29:89:1e:f7:02:c1:19:3e:21:eb:71:5f:4e:
                    b0:ed:a3:33:3d:0a:46:2b:8a:cd:21:37:63:85:d0:
                    3f:b2:79:2b:e8:d1:9a:7d:a7:09:d7:97:22:f3:c5:
                    d9:c5:a5:b4:85:4f:53:b2:c0:38:e5:2c:d1:cc:d7:
                    52:6e:04:a9:f6:48:24:10:13:71:cb:ce:1c:75:f7:
                    bd:c0:34:b2:e0:3c:2d:59:cb:e1:02:d2:c9:47:81:
                    6c:f2:fb:68:60:b6:3f:55:86:ae:15:29:cf:80:3a:
                    3e:15:21:e0:f6:19:ac:bf:26:4d:3b:c6:c7:6b:3d:
                    e9:bb:16:8b:34:4a:71:8a:94:23:8e:40:14:3f:ce:
                    bc:ed:fa:6c:2f:a6:71:fe:c1:bc:c7:29:b1:f5:a6:
                    35:71:81:85:0d:22:a7:21:d6:38:a6:3e:ba:9e:2f:
                    e6:ca:ae:d5:72:a3:c4:fb:7c:43:2b:9a:85:c6:02:
                    fe:07:45:00:62:92:e5:97:6c:6f:05:e3:26:e9:3b:
                    ce:59:d5:d6:13:37:e1:06:e6:39:74:8d:c2:e9:af:
                    14:fb:4f:bf:e4:d7:19:5e:d4:86:60:11:b6:e1:a2:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8E:61:82:C2:68:DD:2D:58:34:14:DE:06:FB:26:62:D9:22:24:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/f4f81962-094b-35ed-aff2-27e92a76c214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/56ce5662-3b8d-4725-80ff-829d50d5beda.crl

            X509v3 Authority Key Identifier:
                keyid:7A:87:C6:39:F2:3D:8B:23:DB:EF:31:36:0F:50:0F:79:FB:97:C7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:19:3f:b3:56:16:49:e4:89:d3:e1:11:46:ea:b5:93:00:48:
         86:b0:47:69:7a:61:d1:00:b8:76:f3:5a:01:54:27:ec:8a:55:
         66:17:64:65:02:7c:8a:19:55:de:19:03:06:65:4f:94:96:e6:
         ae:d8:f7:0c:2a:64:44:8d:28:71:f8:1c:2b:39:3b:93:ee:86:
         f1:8b:a0:03:a3:ec:fb:5a:22:91:9c:c0:7e:a7:b4:73:1e:5d:
         43:2e:2c:b9:47:b3:f0:77:1d:e5:ee:99:7b:70:b2:2a:78:9a:
         39:41:70:b4:31:20:5e:00:86:a6:64:fb:8a:6b:b7:de:39:17:
         4a:eb:db:30:32:02:a1:cf:5f:5d:16:3e:75:54:9e:c7:b0:f1:
         4e:83:d7:71:44:c1:58:5e:90:1e:ed:8e:22:f1:ad:64:4d:38:
         01:2b:4c:1c:6f:3a:41:2b:a3:96:c8:7c:a8:b4:90:3f:e4:36:
         44:08:3c:27:9d:b6:78:de:8f:0a:75:38:c6:f2:f8:87:dd:64:
         14:94:24:07:19:65:df:5d:ab:da:ae:05:3d:6c:dc:72:15:d3:
         75:db:16:49:26:f0:46:d1:8c:b6:7a:7d:d5:56:9d:35:e8:6d:
         82:9e:ad:0e:7b:d2:76:31:7f:8d:b5:e4:5d:1b:5b:95:a8:61:
         90:8c:25:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7wHKLLPkSHe9tRUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZjZTU2NjItM2I4ZC00NzI1LTgwZmYtODI5ZDUwZDVi
ZWRhMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MmJlNzQ0YmMtZjExMy00YmVlLWJlOGItNWY5MTdiN2ZkODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfPlh85eWKr0SLvMEfSuR6i+jVYHELxqMP3C
EWViFymJHvcCwRk+IetxX06w7aMzPQpGK4rNITdjhdA/snkr6NGafacJ15ci88XZ
xaW0hU9TssA45SzRzNdSbgSp9kgkEBNxy84cdfe9wDSy4DwtWcvhAtLJR4Fs8vto
YLY/VYauFSnPgDo+FSHg9hmsvyZNO8bHaz3puxaLNEpxipQjjkAUP8687fpsL6Zx
/sG8xymx9aY1cYGFDSKnIdY4pj66ni/myq7VcqPE+3xDK5qFxgL+B0UAYpLll2xv
BeMm6TvOWdXWEzfhBuY5dI3C6a8U+0+/5NcZXtSGYBG24aJDgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK+OYYLCaN0tWDQU3gb7JmLZIiRaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NmNl
NTY2Mi0zYjhkLTQ3MjUtODBmZi04MjlkNTBkNWJlZGEvZjRmODE5NjItMDk0Yi0z
NWVkLWFmZjItMjdlOTJhNzZjMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTZjZTU2NjItM2I4ZC00NzI1LTgw
ZmYtODI5ZDUwZDViZWRhLzU2Y2U1NjYyLTNiOGQtNDcyNS04MGZmLTgyOWQ1MGQ1
YmVkYS5jcmwwHwYDVR0jBBgwFoAUeofGOfI9iyPb7zE2D1APefuXxz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi81NmNlNTY2Mi0zYjhkLTQ3MjUtODBmZi04Mjlk
NTBkNWJlZGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAijEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZxk/s1YWSeSJ0+ERRuq1kwBIhrBHaXph0QC4dvNaAVQn7IpVZhdkZQJ8
ihlV3hkDBmVPlJbmrtj3DCpkRI0ocfgcKzk7k+6G8YugA6Ps+1oikZzAfqe0cx5d
Qy4suUez8Hcd5e6Ze3CyKniaOUFwtDEgXgCGpmT7imu33jkXSuvbMDICoc9fXRY+
dVSex7DxToPXcUTBWF6QHu2OIvGtZE04AStMHG86QSujlsh8qLSQP+Q2RAg8J522
eN6PCnU4xvL4h91kFJQkBxll312r2q4FPWzcchXTddsWSSbwRtGMtnp91VadNeht
gp6tDnvSdjF/jbXkXRtblahhkIwlUw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:24:08 2026 by rpki-client