Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/42f0fab8-4484-3253-b11e-e6516205eed0.roa
File:                     42f0fab8-4484-3253-b11e-e6516205eed0.roa (raw, json)
Hash identifier:          3iXQvAvp9I66DGgDfrCI/b3M3jA+ttR4q7+Z7GwA2dE=
Subject key identifier:   20:28:1C:91:34:45:75:C3:DB:4A:00:54:F0:F9:D3:42:02:20:2D:57
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584F71EDBBE0C6FBE748E1167260
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/42f0fab8-4484-3253-b11e-e6516205eed0.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     394352
IP address blocks:        161.129.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:bb:e0:c6:fb:e7:48:e1:16:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=cb901e53-a6a8-4867-aaea-82d61abf5ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:37:21:f2:33:62:af:e2:4f:b2:88:4c:f9:
                    de:6c:de:d6:dc:5a:cd:87:85:8a:65:d8:ed:87:de:
                    fb:3e:1e:87:d1:58:36:24:67:a2:ce:cd:e7:50:c0:
                    97:52:da:38:5a:cc:a3:0c:f3:1a:91:dc:c9:13:cc:
                    5b:c1:31:21:d2:74:fc:c5:2c:be:4d:b0:ee:31:d4:
                    07:71:3f:24:eb:36:f2:b7:b9:0a:9c:ca:b5:7c:1c:
                    7c:78:d6:6d:e6:9d:52:d5:02:65:67:dd:cb:7f:28:
                    81:1c:32:51:8f:b5:02:0e:82:7c:ef:1b:72:94:12:
                    d4:a8:45:5d:85:46:2c:19:27:bd:6f:fe:7c:8f:70:
                    55:01:95:0a:d6:96:d7:fe:db:c8:d1:37:07:2b:21:
                    e4:f3:c7:9f:8c:82:61:41:49:99:a3:13:ec:38:33:
                    71:13:b5:b0:4e:de:96:c6:4a:6e:14:8d:19:80:32:
                    db:83:9f:87:10:28:f6:cf:5e:36:32:c2:3f:11:83:
                    bf:10:4b:aa:b8:84:a7:c2:74:6b:96:b8:65:27:e3:
                    8d:77:f0:d6:4b:fa:2d:44:b6:bf:18:52:f0:6c:7b:
                    5a:f1:86:de:ff:a5:56:73:77:93:ff:5e:9d:cc:1f:
                    a1:5f:c8:50:be:b8:bd:64:06:c3:93:6a:9e:ba:18:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:1C:91:34:45:75:C3:DB:4A:00:54:F0:F9:D3:42:02:20:2D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/42f0fab8-4484-3253-b11e-e6516205eed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:5e:05:be:77:87:a8:19:fa:db:44:9a:23:ab:6a:21:d7:
         f9:eb:68:b0:61:6c:ac:b9:6b:d8:c6:e3:69:dd:3f:14:25:2d:
         f4:56:73:3b:8b:a5:bd:fd:09:cd:42:99:62:3c:6d:a7:14:39:
         cd:7f:81:f5:50:2c:f8:95:f6:ae:c0:01:ff:f8:e3:dc:03:dd:
         11:2f:3f:4d:17:09:9e:ae:d1:e7:bc:30:b7:1f:29:de:be:df:
         de:2e:10:ca:4c:a1:95:3d:ea:4f:7e:99:f4:c6:ad:b5:d5:03:
         dd:a4:e0:d5:02:e3:eb:93:f8:7b:82:2f:00:63:08:dc:96:41:
         25:c0:5a:1a:de:94:7e:39:d1:74:35:4e:64:7a:b9:35:dc:4b:
         13:3d:9a:3a:a6:0d:22:bb:75:41:0c:ee:f1:1b:86:96:a9:24:
         4c:1e:b4:22:7f:b0:a5:3f:22:6c:9e:20:0b:06:1c:ca:12:51:
         0f:25:7f:fe:7e:19:b4:67:c8:7a:15:b2:a6:e2:8e:2e:ae:19:
         3d:2a:5f:8f:21:1c:7a:f7:f5:94:d8:c8:95:b5:b3:c9:b2:7c:
         40:7d:a4:36:f4:22:ab:6b:c3:36:c4:75:5a:1f:57:2a:f5:f5:
         17:56:23:ca:5c:75:10:27:d8:f4:c2:db:b9:5e:ce:35:37:5c:
         ed:19:26:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bvgxvvnSOEWcmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk
YzQ1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
Y2I5MDFlNTMtYTZhOC00ODY3LWFhZWEtODJkNjFhYmY1YWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq83IfIzYq/iT7KITPnebN7W3FrNh4WKZdjt
h977Ph6H0Vg2JGeizs3nUMCXUto4WsyjDPMakdzJE8xbwTEh0nT8xSy+TbDuMdQH
cT8k6zbyt7kKnMq1fBx8eNZt5p1S1QJlZ93LfyiBHDJRj7UCDoJ87xtylBLUqEVd
hUYsGSe9b/58j3BVAZUK1pbX/tvI0TcHKyHk88efjIJhQUmZoxPsODNxE7WwTt6W
xkpuFI0ZgDLbg5+HECj2z142MsI/EYO/EEuquISnwnRrlrhlJ+ONd/DWS/otRLa/
GFLwbHta8Ybe/6VWc3eT/16dzB+hX8hQvri9ZAbDk2qeuhjuAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAoHJE0RXXD20oAVPD500ICIC1XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh
NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvNDJmMGZhYjgtNDQ4NC0z
MjUzLWIxMWUtZTY1MTYyMDVlZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1
MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl
ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm
ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYH1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWoXgW+d4eoGfrbRJojq2oh1/nraLBhbKy5a9jG42ndPxQlLfRWczuL
pb39Cc1CmWI8bacUOc1/gfVQLPiV9q7AAf/449wD3REvP00XCZ6u0ee8MLcfKd6+
394uEMpMoZU96k9+mfTGrbXVA92k4NUC4+uT+HuCLwBjCNyWQSXAWhrelH450XQ1
TmR6uTXcSxM9mjqmDSK7dUEM7vEbhpapJEwetCJ/sKU/ImyeIAsGHMoSUQ8lf/5+
GbRnyHoVsqbiji6uGT0qX48hHHr39ZTYyJW1s8myfEB9pDb0IqtrwzbEdVofVyr1
9RdWI8pcdRAn2PTC27lezjU3XO0ZJtY=
-----END CERTIFICATE-----
Generated at Sat Oct 24 08:48:36 2026 by rpki-client