Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa
File:                     7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa (raw, json)
Hash identifier:          rzezMEZdtjtElLYCLlmD+Bs4CZKgx7ozM5HIjrXbkyI=
Subject key identifier:   ED:91:A6:29:A4:46:99:86:9E:60:86:BD:56:B3:07:AC:79:D7:D3:B3
Certificate issuer:       /CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Certificate serial:       010D0C9F4328584B5DD1E0298081B71FEB694740
Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     400380
IP address blocks:        81.199.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e0:29:80:81:b7:1f:eb:69:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=1aa92130-58c1-4fb7-b649-be60074d3c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e1:e0:80:b4:eb:94:cc:75:50:ca:14:ad:61:
                    b9:c8:a0:db:97:f5:92:83:55:64:a1:28:e0:d1:ab:
                    9a:07:ac:53:54:72:05:f0:bd:5c:1e:25:83:bd:7b:
                    3d:28:7f:4d:b2:7c:9d:3f:30:4b:25:b1:db:27:b8:
                    13:33:44:d5:2d:05:99:c7:6c:37:9e:4e:b5:a8:8d:
                    b0:a7:32:03:de:ba:6f:12:e8:7f:87:3e:a7:dd:48:
                    f2:ef:a1:e3:d7:1b:a7:63:07:32:16:69:d9:b4:76:
                    eb:d5:47:36:64:fa:2b:87:5d:6b:0a:d4:28:78:d0:
                    13:1c:3c:67:93:56:81:5f:d7:53:36:2e:f6:14:37:
                    26:58:44:6f:86:d4:c9:b7:65:a7:b7:36:05:dd:07:
                    22:60:8e:80:ca:e5:80:27:07:d4:f8:98:18:8d:29:
                    c6:3f:d8:6d:41:b5:3f:27:10:28:6a:b1:ed:f3:16:
                    87:8a:51:55:44:b4:0d:38:42:01:c7:c5:4a:7a:14:
                    b7:15:6a:05:63:85:9a:68:bf:df:23:e4:64:01:c2:
                    d4:0d:65:10:6f:bc:6c:c2:9c:20:63:9a:89:99:d7:
                    40:96:d2:65:ab:29:e0:b8:a4:bc:65:c9:0c:6f:02:
                    70:24:ee:4e:47:36:fc:fc:f4:3f:ce:5e:71:19:59:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:91:A6:29:A4:46:99:86:9E:60:86:BD:56:B3:07:AC:79:D7:D3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/7ea1614b-8a2d-35f0-a9a6-1d71ffd396b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl

            X509v3 Authority Key Identifier:
                keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:48:ca:a4:38:06:92:e1:c2:c5:3d:c2:a1:b2:55:94:a6:
         e5:37:66:3e:5c:c3:66:f4:52:ac:54:fd:bd:f3:e5:a4:64:50:
         55:13:20:12:ae:6a:92:0e:a1:ed:13:74:4c:24:c9:5c:b6:c0:
         45:ba:1f:21:d0:c3:63:34:f1:47:d8:5c:9f:bd:e9:eb:7e:74:
         d0:b0:0e:12:a5:4b:9a:21:96:7d:0e:06:c3:a3:4c:4f:62:7a:
         8d:1e:13:51:87:ac:1f:ed:e2:03:00:a7:72:c0:a3:dc:b5:0b:
         3a:99:40:40:df:7a:61:f4:ad:35:04:e8:8f:7a:1e:8c:ca:5f:
         29:9d:ae:a5:7a:6b:39:e0:35:3e:af:32:d9:bb:97:36:95:56:
         90:eb:fd:74:c6:c4:ac:b0:79:63:35:2c:39:9e:5c:2b:ab:2b:
         78:05:88:f8:43:9d:67:69:36:30:96:01:13:4a:ae:07:0a:0a:
         6d:66:c6:73:f5:aa:8e:b5:0a:c6:4b:ed:9f:e8:68:78:85:ff:
         95:d4:31:49:70:1d:88:00:f0:c2:39:05:19:95:f3:59:de:8f:
         d0:4b:72:a9:ad:6a:08:c8:55:19:86:84:f3:9b:d1:a4:e5:72:
         f5:92:68:da:45:25:6f:fa:cb:aa:92:a8:e6:13:d3:bc:79:6b:
         e7:ff:3c:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eApgIG3H+tpR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy
NmFhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
MWFhOTIxMzAtNThjMS00ZmI3LWI2NDktYmU2MDA3NGQzYzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieHggLTrlMx1UMoUrWG5yKDbl/WSg1VkoSjg
0auaB6xTVHIF8L1cHiWDvXs9KH9NsnydPzBLJbHbJ7gTM0TVLQWZx2w3nk61qI2w
pzID3rpvEuh/hz6n3Ujy76Hj1xunYwcyFmnZtHbr1Uc2ZPorh11rCtQoeNATHDxn
k1aBX9dTNi72FDcmWERvhtTJt2WntzYF3QciYI6AyuWAJwfU+JgYjSnGP9htQbU/
JxAoarHt8xaHilFVRLQNOEIBx8VKehS3FWoFY4WaaL/fI+RkAcLUDWUQb7xswpwg
Y5qJmddAltJlqynguKS8ZckMbwJwJO5ORzb8/PQ/zl5xGVk3ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2RpimkRpmGnmCGvVazB6x519OzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1
MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvN2VhMTYxNGItOGEyZC0z
NWYwLWE5YTYtMWQ3MWZmZDM5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz
NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4
MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2
YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrrSMqkOAaS4cLFPcKhslWUpuU3Zj5cw2b0UqxU/b3z5aRkUFUTIBKu
apIOoe0TdEwkyVy2wEW6HyHQw2M08UfYXJ+96et+dNCwDhKlS5ohln0OBsOjTE9i
eo0eE1GHrB/t4gMAp3LAo9y1CzqZQEDfemH0rTUE6I96HozKXymdrqV6azngNT6v
Mtm7lzaVVpDr/XTGxKyweWM1LDmeXCurK3gFiPhDnWdpNjCWARNKrgcKCm1mxnP1
qo61CsZL7Z/oaHiF/5XUMUlwHYgA8MI5BRmV81nej9BLcqmtagjIVRmGhPOb0aTl
cvWSaNpFJW/6y6qSqOYT07x5a+f/PPE=
-----END CERTIFICATE-----
Generated at Thu Oct 16 08:56:02 2025 by rpki-client