Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351/d42471fb-8cc0-3b82-bfe6-f882ef1e0f8e.roa
File:                     d42471fb-8cc0-3b82-bfe6-f882ef1e0f8e.roa (raw, json)
Hash identifier:          LSPSDOj/FXSGg4/QaB7ylv/Hyx7mf+VR0OXmuGK5PqQ=
Subject key identifier:   E7:1D:3F:54:5A:BF:9A:04:50:57:4E:D1:63:B0:16:E0:37:7E:26:81
Certificate issuer:       /CN=fb95b960-7f5c-4f76-a55c-bb6f82c74351
Certificate serial:       010D0C9F4328584F60B82882A0A5A25292916BE0
Authority key identifier: A1:D3:EF:B7:51:5D:9F:BE:AA:19:5C:1B:59:40:71:08:C4:27:E0:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351/d42471fb-8cc0-3b82-bfe6-f882ef1e0f8e.roa
Signing time:             Sat 03 Oct 2026 09:04:06 +0000
ROA not before:           Sat 03 Oct 2026 09:04:06 +0000
ROA not after:            Fri 01 Jan 2027 10:04:06 +0000
asID:                     29802
IP address blocks:        199.127.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351/fb95b960-7f5c-4f76-a55c-bb6f82c74351.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351/fb95b960-7f5c-4f76-a55c-bb6f82c74351.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:60:b8:28:82:a0:a5:a2:52:92:91:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb95b960-7f5c-4f76-a55c-bb6f82c74351
        Validity
            Not Before: Oct  3 09:04:06 2026 GMT
            Not After : Jan  1 10:04:06 2027 GMT
        Subject: CN=94031d30-dbea-46a1-918d-3af6c750535c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:2f:c5:d1:c6:ec:17:a7:78:c7:d4:90:52:
                    9a:31:16:7a:b3:8d:3f:5c:18:af:88:8d:c1:cf:1a:
                    56:4a:5c:8e:07:3d:1b:6a:6a:42:ad:fb:f5:c6:64:
                    ed:56:a6:85:38:86:e0:21:f8:ed:89:1f:ec:2d:54:
                    53:67:fc:df:ed:a2:f4:45:01:26:7a:4b:1b:e1:20:
                    3c:8e:0f:fa:5a:08:e8:79:23:1c:a4:bf:36:00:54:
                    4e:22:8e:5f:0c:c6:c4:d4:a5:7b:bb:df:68:af:cd:
                    89:13:ca:0d:d8:e7:71:b2:85:64:9a:6b:a3:61:48:
                    1c:c3:a2:5b:22:5f:43:00:c1:56:1b:6b:8f:ed:93:
                    e2:c7:79:0a:c1:01:aa:30:a9:b7:3d:2f:ad:8a:5c:
                    6f:84:b8:0a:d7:ef:a8:2a:95:e9:de:18:00:5a:3c:
                    96:2e:24:fa:a4:e2:9d:f6:0d:bf:d2:83:aa:ef:ea:
                    c3:0b:2d:04:59:97:9b:1c:80:af:f7:08:b5:93:ef:
                    a5:d0:1f:be:84:1d:89:ea:8f:f6:8d:4c:43:8d:14:
                    ea:a1:42:b6:68:ae:10:bf:cc:3c:1b:3d:c1:37:32:
                    d5:d1:05:be:34:9c:a3:ba:32:ff:68:e1:bf:91:e0:
                    27:2f:7f:20:8d:54:f9:de:3b:b1:ca:79:da:7c:9d:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:3F:54:5A:BF:9A:04:50:57:4E:D1:63:B0:16:E0:37:7E:26:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351/d42471fb-8cc0-3b82-bfe6-f882ef1e0f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351/fb95b960-7f5c-4f76-a55c-bb6f82c74351.crl

            X509v3 Authority Key Identifier:
                keyid:A1:D3:EF:B7:51:5D:9F:BE:AA:19:5C:1B:59:40:71:08:C4:27:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb95b960-7f5c-4f76-a55c-bb6f82c74351.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2b:72:41:a1:41:f2:d9:c8:e1:e7:8f:02:38:5c:dc:56:1d:
         34:14:0b:60:b4:a0:70:3a:f6:4b:cb:20:0e:e4:ad:df:cb:75:
         c3:ad:7f:04:4d:66:ae:37:57:97:d2:d7:de:08:c8:88:25:a8:
         54:35:5a:83:6d:de:26:ed:42:1f:e7:a3:c1:32:30:e7:6e:e4:
         49:66:db:38:b0:36:99:3a:9e:b2:41:3c:5d:28:a3:b1:80:ee:
         1c:13:a1:bb:ef:92:1b:68:84:16:7a:af:5f:a8:6a:c6:b2:8d:
         a8:75:61:46:c8:cd:ae:c9:45:48:62:0e:80:6c:39:c6:90:b7:
         3d:e1:3b:f5:ce:c1:2e:2b:53:38:6c:1d:b3:71:06:43:76:45:
         8a:bc:74:ce:2a:62:fc:6c:24:2d:83:64:7d:ae:63:ee:89:f6:
         4a:2e:3d:93:9e:a2:cb:11:e4:f7:e4:4c:2f:1f:39:c5:cf:c4:
         b7:ec:e4:b0:e2:1a:5c:e8:80:e1:7d:bc:8d:ff:6a:5c:b3:9b:
         c7:6a:89:0d:40:24:43:15:a1:f7:38:48:02:15:dd:7d:fd:c5:
         bb:3b:b8:a5:cf:d0:dc:31:83:55:d6:43:b2:03:42:50:8b:95:
         fc:cb:b4:5a:23:36:ac:b7:1f:48:b2:c5:41:a9:e6:28:68:2f:
         52:f4:77:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9guCiCoKWiUpKRa+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmI5NWI5NjAtN2Y1Yy00Zjc2LWE1NWMtYmI2ZjgyYzc0
MzUxMB4XDTI2MTAwMzA5MDQwNloXDTI3MDEwMTEwMDQwNlowLzEtMCsGA1UEAxMk
OTQwMzFkMzAtZGJlYS00NmExLTkxOGQtM2FmNmM3NTA1MzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRsvxdHG7BeneMfUkFKaMRZ6s40/XBiviI3B
zxpWSlyOBz0bampCrfv1xmTtVqaFOIbgIfjtiR/sLVRTZ/zf7aL0RQEmeksb4SA8
jg/6WgjoeSMcpL82AFROIo5fDMbE1KV7u99or82JE8oN2OdxsoVkmmujYUgcw6Jb
Il9DAMFWG2uP7ZPix3kKwQGqMKm3PS+tilxvhLgK1++oKpXp3hgAWjyWLiT6pOKd
9g2/0oOq7+rDCy0EWZebHICv9wi1k++l0B++hB2J6o/2jUxDjRTqoUK2aK4Qv8w8
Gz3BNzLV0QW+NJyjujL/aOG/keAnL38gjVT53juxynnafJ1kswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcdP1Rav5oEUFdO0WOwFuA3fiaBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mYjk1
Yjk2MC03ZjVjLTRmNzYtYTU1Yy1iYjZmODJjNzQzNTEvZDQyNDcxZmItOGNjMC0z
YjgyLWJmZTYtZjg4MmVmMWUwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmI5NWI5NjAtN2Y1Yy00Zjc2LWE1
NWMtYmI2ZjgyYzc0MzUxL2ZiOTViOTYwLTdmNWMtNGY3Ni1hNTVjLWJiNmY4MmM3
NDM1MS5jcmwwHwYDVR0jBBgwFoAUodPvt1Fdn76qGVwbWUBxCMQn4NswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mYjk1Yjk2MC03ZjVjLTRmNzYtYTU1Yy1iYjZm
ODJjNzQzNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx385MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4rckGhQfLZyOHnjwI4XNxWHTQUC2C0oHA69kvLIA7krd/LdcOtfwRN
Zq43V5fS194IyIglqFQ1WoNt3ibtQh/no8EyMOdu5Elm2ziwNpk6nrJBPF0oo7GA
7hwTobvvkhtohBZ6r1+oasayjah1YUbIza7JRUhiDoBsOcaQtz3hO/XOwS4rUzhs
HbNxBkN2RYq8dM4qYvxsJC2DZH2uY+6J9kouPZOeossR5PfkTC8fOcXPxLfs5LDi
GlzogOF9vI3/alyzm8dqiQ1AJEMVofc4SAIV3X39xbs7uKXP0Nwxg1XWQ7IDQlCL
lfzLtFojNqy3H0iyxUGp5ihoL1L0d5c=
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:25:01 2026 by rpki-client