Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa
File:                     0ea7e4d7-09c6-3ffa-8dee-902326476334.roa (raw, json)
Hash identifier:          hdUD0nGELjX6qEcNR61VeolDyKKNmGBiUkOzAy2iZH8=
Subject key identifier:   C7:C2:32:8F:E4:9E:17:80:49:01:59:FB:7E:CC:88:72:E0:C9:DB:0B
Certificate issuer:       /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Certificate serial:       010D0C9F4328584EFB475E8B6F12F61864A7E280
Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     38551
IP address blocks:        161.121.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:5e:8b:6f:12:f6:18:64:a7:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=4a4ddc58-0384-453f-9f9b-ee19d5634af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:9c:e1:73:0a:cc:6e:f6:8a:41:c1:5f:1a:
                    ed:4c:62:ff:0c:b1:f2:e7:32:c1:69:2f:f6:00:ea:
                    86:9f:5c:b7:cc:36:e6:f5:46:e5:ec:cb:e2:37:ed:
                    37:7e:82:7d:e3:e2:cc:d3:23:00:8c:d9:0e:cf:c0:
                    f3:62:8d:ef:05:3d:7b:6c:d1:db:9b:3c:b7:79:aa:
                    65:a1:ed:35:ca:b6:d1:e7:77:3d:3f:83:95:58:1f:
                    10:c7:14:bc:fe:a0:4e:38:ad:7d:a6:db:59:b2:db:
                    37:01:f5:ff:70:aa:7f:2e:a3:ce:b3:7e:2d:7c:68:
                    ae:97:06:56:40:5e:c7:9c:62:69:4e:46:ff:b7:ce:
                    09:e9:59:e5:11:1a:96:f4:90:7f:30:ae:76:aa:4d:
                    03:58:11:6f:6a:21:3e:2c:0e:c7:c5:9b:89:3a:6d:
                    31:73:2c:7f:7c:b9:93:02:59:fe:0f:ee:0c:97:95:
                    c6:c2:6f:58:8a:ec:cf:fe:d4:30:ba:b0:7c:64:0a:
                    06:58:52:cb:57:0f:f0:ac:60:39:b4:12:d9:7c:cb:
                    6a:12:ef:79:f2:1f:c2:38:cf:a4:0b:ee:5b:b4:fb:
                    43:6b:59:46:97:e8:d1:e7:2f:17:91:c8:1b:39:d5:
                    10:75:42:07:67:be:1e:92:a7:69:ec:95:3b:58:a7:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:32:8F:E4:9E:17:80:49:01:59:FB:7E:CC:88:72:E0:C9:DB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl

            X509v3 Authority Key Identifier:
                keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.121.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:56:f1:31:be:eb:64:d4:07:0a:09:32:f4:64:7c:57:e2:
         99:54:4d:34:71:98:7c:12:e2:87:0a:74:b9:b1:96:01:cc:bf:
         e6:4a:ed:6b:2f:0a:51:6c:9f:68:42:6b:01:45:02:b8:41:5a:
         bf:13:05:83:bf:ce:d0:26:28:b8:e3:26:f8:15:86:77:c9:16:
         0b:ee:cf:49:bf:dd:5e:ca:00:af:51:80:c3:ce:dd:c2:1a:ea:
         6c:d1:c3:57:98:e4:5d:46:09:f9:57:10:46:d0:f2:26:07:ab:
         fd:5e:36:b8:51:fd:a0:bb:e7:8c:e8:13:02:ee:c1:3e:1b:c3:
         be:c7:1e:25:0e:da:83:2e:f8:17:9d:61:5a:4c:96:d1:29:78:
         cd:c4:4f:67:c8:93:c4:2a:fe:93:43:4d:aa:98:ff:af:8c:21:
         96:db:42:f6:8e:ed:b8:15:5c:8a:a5:d0:ef:56:65:e4:c5:14:
         4c:8e:63:c3:be:c1:fc:79:f4:d0:64:73:31:7c:bc:4c:e4:9d:
         36:b2:ca:08:8f:09:6a:a7:36:d1:63:f3:ae:6f:c2:e9:6d:36:
         75:c7:93:fd:65:70:e1:81:d7:28:d1:7d:ba:20:e9:91:44:97:
         c2:a7:33:df:12:c1:30:4b:01:3c:07:9b:14:fc:95:71:c0:f7:
         e5:04:ee:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R16LbxL2GGSn4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4
N2ZjMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NGE0ZGRjNTgtMDM4NC00NTNmLTlmOWItZWUxOWQ1NjM0YWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ac4XMKzG72ikHBXxrtTGL/DLHy5zLBaS/2
AOqGn1y3zDbm9Ubl7MviN+03foJ94+LM0yMAjNkOz8DzYo3vBT17bNHbmzy3eapl
oe01yrbR53c9P4OVWB8QxxS8/qBOOK19pttZsts3AfX/cKp/LqPOs34tfGiulwZW
QF7HnGJpTkb/t84J6VnlERqW9JB/MK52qk0DWBFvaiE+LA7HxZuJOm0xcyx/fLmT
Aln+D+4Ml5XGwm9YiuzP/tQwurB8ZAoGWFLLVw/wrGA5tBLZfMtqEu958h/COM+k
C+5btPtDa1lGl+jR5y8XkcgbOdUQdUIHZ74ekqdp7JU7WKft2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfCMo/knheASQFZ+37MiHLgydsLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm
ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvMGVhN2U0ZDctMDljNi0z
ZmZhLThkZWUtOTAyMzI2NDc2MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3
ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi
ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj
MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoXnIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7JVvExvutk1AcKCTL0ZHxX4plUTTRxmHwS4ocKdLmxlgHMv+ZK7Wsv
ClFsn2hCawFFArhBWr8TBYO/ztAmKLjjJvgVhnfJFgvuz0m/3V7KAK9RgMPO3cIa
6mzRw1eY5F1GCflXEEbQ8iYHq/1eNrhR/aC754zoEwLuwT4bw77HHiUO2oMu+Bed
YVpMltEpeM3ET2fIk8Qq/pNDTaqY/6+MIZbbQvaO7bgVXIql0O9WZeTFFEyOY8O+
wfx59NBkczF8vEzknTayygiPCWqnNtFj865vwultNnXHk/1lcOGB1yjRfbog6ZFE
l8KnM98SwTBLATwHmxT8lXHA9+UE7nw=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:24:15 2026 by rpki-client