Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4fc10b1a-49c3-3929-9421-871da18a3032.roa
File:                     4fc10b1a-49c3-3929-9421-871da18a3032.roa (raw, json)
Hash identifier:          0Qbvsj/mFikl2Z4T+hGE/bFn833zHSX+aMO4N6fz/zQ=
Subject key identifier:   A3:3A:88:AE:7B:BE:B3:2F:B2:EA:5B:F1:AE:E7:31:86:A3:FF:A1:4E
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA7912B557EBED4AC777A9280
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4fc10b1a-49c3-3929-9421-871da18a3032.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.161.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:2b:55:7e:be:d4:ac:77:7a:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=27f0be09-73ad-4d64-a4f4-b63e6d66a02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:26:80:2b:79:04:39:ad:33:f8:cd:fb:46:
                    50:62:80:42:86:48:e4:47:85:22:4b:ae:e9:39:d2:
                    82:85:86:3d:8d:8a:ae:32:6b:2a:a9:e8:cb:ac:04:
                    d9:e2:11:4a:47:0a:e7:d6:55:b7:ad:23:94:fc:69:
                    e3:09:fd:15:99:d8:82:96:92:5b:16:4f:88:2d:a3:
                    c7:77:b6:91:52:32:59:4c:ec:15:2a:ff:ee:c2:e7:
                    c6:35:79:2a:3b:43:e3:8e:95:cc:3a:34:01:29:64:
                    3f:15:c8:65:46:fa:d7:97:54:a7:c3:a6:58:55:42:
                    3f:ad:fc:7a:d0:56:51:84:78:09:77:7f:eb:c7:e9:
                    23:ef:94:7d:4c:56:30:d0:30:68:3d:6b:a9:aa:89:
                    01:59:4b:19:b3:69:dc:be:77:8f:a3:9d:83:c9:ee:
                    83:5c:43:0e:72:e8:72:d3:3f:c7:8e:13:d4:1d:ec:
                    fa:fe:f1:e4:e8:52:89:9d:a6:80:11:6d:d5:88:48:
                    17:db:f4:0f:29:c9:cb:b7:1c:b1:32:01:57:30:c9:
                    2a:da:3c:fa:83:f1:07:21:fd:eb:93:84:38:6a:2f:
                    e8:9b:37:a6:56:f2:1d:99:f7:7c:37:c4:6f:da:b4:
                    2b:49:ab:b1:16:53:66:2c:65:3c:43:c3:aa:06:84:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3A:88:AE:7B:BE:B3:2F:B2:EA:5B:F1:AE:E7:31:86:A3:FF:A1:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4fc10b1a-49c3-3929-9421-871da18a3032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8a:a4:e5:f8:93:7a:3f:28:a1:24:d8:13:13:3b:37:ea:d0:
         b6:9e:7a:fa:87:e7:4b:39:32:93:7e:fa:f0:13:f2:ed:8e:7e:
         03:2b:dd:22:e1:44:ea:e7:05:e0:07:ff:83:44:90:a2:c4:cb:
         8b:d7:83:b6:9b:fc:23:d9:f5:16:91:23:55:ee:94:ff:fa:e2:
         6f:0a:cc:4f:8f:ea:88:26:26:bf:5e:73:d6:34:10:dd:22:b1:
         bd:cd:0c:28:e8:4c:98:05:83:c7:bc:63:54:83:ff:f0:60:92:
         f9:b5:4d:6b:42:36:a6:84:1f:f0:49:d4:65:bb:aa:0d:b3:cd:
         87:ab:ef:ea:3e:78:a8:c4:bd:af:8b:b7:3e:28:78:fc:7c:20:
         2a:8f:aa:a1:65:87:27:e0:db:da:46:e0:4f:2a:44:1c:b0:ba:
         1a:58:cd:ef:58:31:5b:55:9a:3c:19:bf:0f:60:00:00:7c:6c:
         6a:a6:75:c8:7f:6d:dc:3a:3e:aa:86:b6:bf:c9:be:14:a3:64:
         bf:0c:94:c5:5b:74:dd:e3:6b:8b:40:32:d4:67:df:a0:6a:92:
         76:c9:a4:5a:7c:1c:cc:94:0c:c1:8e:9a:1e:e1:1d:48:89:62:
         58:c4:54:9e:ca:d5:27:2d:31:5f:43:d3:5b:c9:60:0a:71:a9:
         97:42:3b:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkStVfr7UrHd6koAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjdmMGJlMDktNzNhZC00ZDY0LWE0ZjQtYjYzZTZkNjZhMDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdImgCt5BDmtM/jN+0ZQYoBChkjkR4UiS67p
OdKChYY9jYquMmsqqejLrATZ4hFKRwrn1lW3rSOU/GnjCf0VmdiClpJbFk+ILaPH
d7aRUjJZTOwVKv/uwufGNXkqO0PjjpXMOjQBKWQ/FchlRvrXl1Snw6ZYVUI/rfx6
0FZRhHgJd3/rx+kj75R9TFYw0DBoPWupqokBWUsZs2ncvnePo52Dye6DXEMOcuhy
0z/HjhPUHez6/vHk6FKJnaaAEW3ViEgX2/QPKcnLtxyxMgFXMMkq2jz6g/EHIf3r
k4Q4ai/omzemVvIdmfd8N8Rv2rQrSauxFlNmLGU8Q8OqBoRDNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKM6iK57vrMvsupb8a7nMYaj/6FOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNGZjMTBiMWEtNDljMy0z
OTI5LTk0MjEtODcxZGExOGEzMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6FQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+KpOX4k3o/KKEk2BMTOzfq0LaeevqH50s5MpN++vAT8u2OfgMr3SLh
ROrnBeAH/4NEkKLEy4vXg7ab/CPZ9RaRI1XulP/64m8KzE+P6ogmJr9ec9Y0EN0i
sb3NDCjoTJgFg8e8Y1SD//Bgkvm1TWtCNqaEH/BJ1GW7qg2zzYer7+o+eKjEva+L
tz4oePx8ICqPqqFlhyfg29pG4E8qRBywuhpYze9YMVtVmjwZvw9gAAB8bGqmdch/
bdw6PqqGtr/JvhSjZL8MlMVbdN3ja4tAMtRn36BqknbJpFp8HMyUDMGOmh7hHUiJ
YljEVJ7K1SctMV9D01vJYApxqZdCOwc=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:55 2026 by rpki-client