Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/efe38f12-5346-33f0-b996-32d3800a34fb.roa
File:                     efe38f12-5346-33f0-b996-32d3800a34fb.roa (raw, json)
Hash identifier:          Qm65sd66mmMaBDnnbkrsdfm5P4HZYzWjettPGuOHjtI=
Subject key identifier:   58:DE:49:93:31:4F:2C:6C:61:43:16:0C:E2:5A:DB:1B:88:47:35:2B
Certificate issuer:       /CN=de95cd47-ae4c-4b35-822a-ac72bf6fdce2
Certificate serial:       010D0C9F4328584ED0C6A91B821AC718423C48C0
Authority key identifier: 49:BC:DC:EA:14:AA:FD:9A:46:CD:B9:02:BD:7A:B2:C3:D7:E6:CE:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/efe38f12-5346-33f0-b996-32d3800a34fb.roa
Signing time:             Wed 12 Aug 2026 19:36:56 +0000
ROA not before:           Wed 12 Aug 2026 19:36:56 +0000
ROA not after:            Tue 10 Nov 2026 20:36:56 +0000
asID:                     210
IP address blocks:        161.28.0.0/16 maxlen: 16
                          192.80.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:c6:a9:1b:82:1a:c7:18:42:3c:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de95cd47-ae4c-4b35-822a-ac72bf6fdce2
        Validity
            Not Before: Aug 12 19:36:56 2026 GMT
            Not After : Nov 10 20:36:56 2026 GMT
        Subject: CN=c7cfcc61-6cba-46a3-9ad6-3e13fa2ccb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:ad:4d:cc:4e:04:87:6b:d4:71:67:ef:d8:
                    48:c5:35:29:61:14:cc:3a:0f:60:f8:a3:6a:29:7f:
                    a6:60:6f:1e:78:6a:c0:67:31:92:0d:b6:c0:d5:02:
                    24:3a:db:fa:d6:13:22:9b:5e:ad:59:af:3c:72:6a:
                    e7:c1:16:c8:d6:08:a5:46:54:8e:22:cf:23:b7:e3:
                    b2:59:61:dd:d0:39:c0:ca:21:86:bb:ad:24:3d:37:
                    84:be:f4:ce:93:7d:31:04:2e:1d:92:eb:d7:d0:0b:
                    f4:18:29:87:77:06:96:22:d4:cd:33:b1:76:32:d8:
                    f5:57:c9:7c:75:73:5a:aa:c0:bb:21:b8:a7:73:65:
                    e7:a0:1e:d8:50:0d:57:f1:68:7f:85:4f:e9:a6:b8:
                    1a:a0:a6:83:09:50:88:13:57:fa:3d:13:0f:f6:52:
                    89:30:7b:f7:d6:c7:4f:5b:45:66:6e:e3:a2:03:7e:
                    7b:88:d1:6f:8d:bc:6f:40:29:d6:0d:60:0e:5d:e3:
                    62:16:7a:cb:d6:39:42:50:7b:e3:d2:94:23:01:b0:
                    5c:a6:b5:f4:44:54:dc:2c:41:24:f5:11:09:cf:a4:
                    58:78:6b:cc:1a:cd:41:f4:cf:54:8d:7b:0f:be:e4:
                    fb:a7:d2:f0:e1:f9:ed:0e:0e:0e:30:f5:b4:29:cf:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:49:93:31:4F:2C:6C:61:43:16:0C:E2:5A:DB:1B:88:47:35:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/efe38f12-5346-33f0-b996-32d3800a34fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BC:DC:EA:14:AA:FD:9A:46:CD:B9:02:BD:7A:B2:C3:D7:E6:CE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/de95cd47-ae4c-4b35-822a-ac72bf6fdce2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.28.0.0/16
                  192.80.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:13:9e:d0:63:85:f7:55:3f:bd:ab:6f:a9:bc:88:07:ca:
         76:d5:6e:9e:d1:21:5a:33:f3:bb:10:3a:36:8a:52:f7:e0:95:
         f6:1a:f3:96:bc:99:2f:0a:51:70:17:75:af:b4:11:54:59:ea:
         01:85:d0:99:95:5d:db:82:36:32:b0:b2:3f:6b:e7:e2:d4:43:
         3b:2e:67:70:9e:bc:32:52:10:4d:ad:fe:42:32:d1:e5:b2:0e:
         e1:5e:4b:d8:88:2d:7e:78:34:a1:5b:17:e2:ba:e9:02:07:67:
         4e:97:66:6b:76:9c:fb:98:58:eb:a8:16:e4:6d:1c:6e:4a:5d:
         f0:e5:6a:3c:30:3b:73:08:df:75:fd:d1:3c:36:71:c2:60:ee:
         36:ff:dd:75:c4:cf:b7:e6:30:1c:f0:fc:fa:2f:26:8d:f6:28:
         71:9c:11:ca:c3:42:a8:67:f3:70:95:89:b1:c9:63:ba:99:af:
         d5:b3:43:7d:6e:35:38:e3:c4:62:17:d5:20:ea:ee:22:14:03:
         1b:d1:bc:f2:8d:07:73:0a:81:2c:c1:08:01:98:10:75:e8:8f:
         c1:03:4d:0c:97:81:9b:84:d1:eb:d2:38:f2:e2:c7:cf:82:8b:
         6b:ee:34:a4:e9:cc:e5:b4:a0:ee:78:05:b4:dc:fc:c9:3b:99:
         f7:0e:66:cd
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7QxqkbghrHGEI8SMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU5NWNkNDctYWU0Yy00YjM1LTgyMmEtYWM3MmJmNmZk
Y2UyMB4XDTI2MDgxMjE5MzY1NloXDTI2MTExMDIwMzY1NlowLzEtMCsGA1UEAxMk
YzdjZmNjNjEtNmNiYS00NmEzLTlhZDYtM2UxM2ZhMmNjYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9WtTcxOBIdr1HFn79hIxTUpYRTMOg9g+KNq
KX+mYG8eeGrAZzGSDbbA1QIkOtv61hMim16tWa88cmrnwRbI1gilRlSOIs8jt+Oy
WWHd0DnAyiGGu60kPTeEvvTOk30xBC4dkuvX0Av0GCmHdwaWItTNM7F2Mtj1V8l8
dXNaqsC7Ibinc2XnoB7YUA1X8Wh/hU/pprgaoKaDCVCIE1f6PRMP9lKJMHv31sdP
W0VmbuOiA357iNFvjbxvQCnWDWAOXeNiFnrL1jlCUHvj0pQjAbBcprX0RFTcLEEk
9REJz6RYeGvMGs1B9M9UjXsPvuT7p9Lw4fntDg4OMPW0Kc8cfwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFjeSZMxTyxsYUMWDOJa2xuIRzUrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kZTk1
Y2Q0Ny1hZTRjLTRiMzUtODIyYS1hYzcyYmY2ZmRjZTIvZWZlMzhmMTItNTM0Ni0z
M2YwLWI5OTYtMzJkMzgwMGEzNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGU5NWNkNDctYWU0Yy00YjM1LTgy
MmEtYWM3MmJmNmZkY2UyL2RlOTVjZDQ3LWFlNGMtNGIzNS04MjJhLWFjNzJiZjZm
ZGNlMi5jcmwwHwYDVR0jBBgwFoAUSbzc6hSq/ZpGzbkCvXqyw9fmzqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9kZTk1Y2Q0Ny1hZTRjLTRiMzUtODIyYS1hYzcy
YmY2ZmRjZTIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAoRwDBADA
UBswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEATCgTntBjhfdVP72rb6m8iAfKdtVuntEhWjPzuxA6NopS9+CV
9hrzlryZLwpRcBd1r7QRVFnqAYXQmZVd24I2MrCyP2vn4tRDOy5ncJ68MlIQTa3+
QjLR5bIO4V5L2Igtfng0oVsX4rrpAgdnTpdma3ac+5hY66gW5G0cbkpd8OVqPDA7
cwjfdf3RPDZxwmDuNv/ddcTPt+YwHPD8+i8mjfYocZwRysNCqGfzcJWJscljupmv
1bNDfW41OOPEYhfVIOruIhQDG9G88o0HcwqBLMEIAZgQdeiPwQNNDJeBm4TR69I4
8uLHz4KLa+40pOnM5bSg7ngFtNz8yTuZ9w5mzQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:21 2026 by rpki-client