Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa
File:                     5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa (raw, json)
Hash identifier:          Pi5cJjWS2RoMl7OOKxLVmW3a1kZG/kdw13DD/zSePUs=
Subject key identifier:   53:ED:63:FC:15:8D:CF:6A:8B:63:27:2E:D4:61:CD:45:40:C3:A8:C6
Certificate issuer:       /CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
Certificate serial:       010D0C9F4328584F4F0815F21BD26157F1411940
Authority key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     21529
IP address blocks:        149.112.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:15:f2:1b:d2:61:57:f1:41:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=8cc98a21-af37-4ac3-ab80-f3965c067565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:56:af:13:ea:92:ad:e2:5f:18:32:aa:4a:
                    b9:b4:a1:a6:24:2e:2d:3d:39:e4:1e:b6:bc:44:0c:
                    eb:e6:7e:04:72:15:33:b8:0e:e1:13:4d:7a:b2:83:
                    8b:6b:1b:80:84:9c:bc:e9:44:4e:97:94:8d:36:c6:
                    f9:82:59:13:e3:62:9a:00:8c:02:45:a6:db:ca:d6:
                    68:05:4a:ba:8b:30:f9:b0:55:16:08:9d:2b:13:88:
                    3c:c9:0c:b4:c9:c9:b7:e7:e1:a4:fc:08:ed:0d:e0:
                    7b:b8:6b:82:57:8d:4c:e1:1f:52:39:85:7b:20:bb:
                    07:1d:df:0f:4b:6a:c0:71:f9:bd:12:b0:80:6d:05:
                    b9:64:a7:9a:59:5e:ff:b2:5e:fb:1b:ca:12:9d:b0:
                    5b:99:d1:7d:d3:21:26:03:af:77:7a:a2:a8:30:a9:
                    84:3e:7f:3e:f7:f9:bb:3e:0d:28:19:d1:cf:e2:6f:
                    33:35:1c:f3:cb:de:8b:39:ba:51:68:8a:ea:97:a8:
                    2c:06:5a:b2:17:91:b8:8c:20:e7:64:59:82:25:f6:
                    57:e5:1f:14:7b:3d:39:7e:7d:4b:55:f2:c6:46:19:
                    d6:4c:a6:5f:a3:ad:ea:63:75:46:8c:e4:2c:3e:e7:
                    ad:09:bd:30:91:c5:8d:84:dc:92:36:3e:c6:d1:79:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:63:FC:15:8D:CF:6A:8B:63:27:2E:D4:61:CD:45:40:C3:A8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:16:7a:be:3f:6d:45:88:cb:df:1c:e3:8e:92:3c:9f:a5:8b:
         51:c2:51:53:6a:aa:7f:f2:38:39:9e:19:ab:c5:0d:b2:77:98:
         45:c9:07:da:03:27:70:b6:6a:1c:26:e0:3d:90:54:bc:7a:b8:
         c8:11:c6:2b:f0:0e:7c:3d:d9:1c:b9:99:97:1d:e4:67:3f:86:
         bd:6d:14:ee:a8:a6:d7:d2:11:6e:39:6c:75:69:36:6a:28:3b:
         bc:6d:6d:50:0c:05:28:96:19:f3:c0:c0:ba:6a:ad:be:d1:6e:
         e6:ab:28:29:e7:5d:69:44:c8:a7:13:22:dc:21:16:bf:16:09:
         19:80:cc:be:63:8d:4c:68:1f:ef:85:1a:0e:a2:e6:cc:02:b2:
         ca:ec:e1:3a:f2:9a:84:58:dc:45:14:f5:a7:56:d4:e6:44:f1:
         a8:f7:0a:40:f8:aa:fc:e8:94:76:3b:c3:8b:78:4b:a7:8a:9a:
         d3:b8:ee:fe:ef:8b:c7:2c:0e:9b:5b:55:d0:24:16:8c:a9:c9:
         60:fd:a1:0b:9a:56:60:2f:36:9a:f6:f8:49:45:18:9a:32:84:
         1e:82:3f:3d:ae:6b:21:19:d8:c9:cd:cd:c9:72:ed:85:60:1d:
         eb:ec:c1:1a:50:83:fe:9d:23:6c:4a:e7:dc:09:30:f8:21:11:
         74:c3:5a:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBXyG9JhV/FBGUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkzNGZhMDUtZDdhMy00YjdkLWJlNWQtZGM4M2Q0YTcx
OTlkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
OGNjOThhMjEtYWYzNy00YWMzLWFiODAtZjM5NjVjMDY3NTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM1WrxPqkq3iXxgyqkq5tKGmJC4tPTnkHra8
RAzr5n4EchUzuA7hE016soOLaxuAhJy86UROl5SNNsb5glkT42KaAIwCRabbytZo
BUq6izD5sFUWCJ0rE4g8yQy0ycm35+Gk/AjtDeB7uGuCV41M4R9SOYV7ILsHHd8P
S2rAcfm9ErCAbQW5ZKeaWV7/sl77G8oSnbBbmdF90yEmA693eqKoMKmEPn8+9/m7
Pg0oGdHP4m8zNRzzy96LObpRaIrql6gsBlqyF5G4jCDnZFmCJfZX5R8Uez05fn1L
VfLGRhnWTKZfo63qY3VGjOQsPuetCb0wkcWNhNySNj7G0XlweQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPtY/wVjc9qi2MnLtRhzUVAw6jGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTM0
ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRhNzE5OWQvNWFmNjY0NmYtYmY0YS0z
ZGVkLWIzYjQtNzUzMmZhODFmZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkzNGZhMDUtZDdhMy00YjdkLWJl
NWQtZGM4M2Q0YTcxOTlkLzE5MzRmYTA1LWQ3YTMtNGI3ZC1iZTVkLWRjODNkNGE3
MTk5ZC5jcmwwHwYDVR0jBBgwFoAUOIuVNSytrzzuaOApRYYPJ0jQ1MEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xOTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgz
ZDRhNzE5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAWer4/bUWIy98c446SPJ+li1HCUVNqqn/yODmeGavFDbJ3mEXJB9oD
J3C2ahwm4D2QVLx6uMgRxivwDnw92Ry5mZcd5Gc/hr1tFO6optfSEW45bHVpNmoo
O7xtbVAMBSiWGfPAwLpqrb7RbuarKCnnXWlEyKcTItwhFr8WCRmAzL5jjUxoH++F
Gg6i5swCssrs4TrymoRY3EUU9adW1OZE8aj3CkD4qvzolHY7w4t4S6eKmtO47v7v
i8csDptbVdAkFoypyWD9oQuaVmAvNpr2+ElFGJoyhB6CPz2uayEZ2MnNzcly7YVg
HevswRpQg/6dI2xK59wJMPghEXTDWrw=
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:51:52 2026 by rpki-client