Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa
File:                     6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa (raw, json)
Hash identifier:          KNaWf8dvJywHHFTx1ckfdNWZH+lwQIPVRdxlMXQIr0Y=
Subject key identifier:   9D:95:46:1A:96:4E:40:9D:C0:E5:9E:33:90:E2:55:C7:C0:41:22:72
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584ED002110B45CA299131384800
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     394352
IP address blocks:        161.38.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:11:0b:45:ca:29:91:31:38:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=664f9f65-31b6-4ecf-bff0-ecce9e638e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:87:57:21:90:5a:56:14:93:ba:0a:ed:59:
                    20:50:7a:55:f6:8f:e4:59:2b:2e:c4:12:f8:6d:38:
                    b8:33:b8:0c:aa:c5:97:f7:5e:f6:d9:26:eb:1f:03:
                    ab:cd:be:06:c2:93:26:38:e1:36:ba:ad:ad:36:1f:
                    c7:79:8d:e2:00:f8:2f:cc:d9:a1:cb:97:94:8a:df:
                    31:13:7e:49:90:98:d2:ea:6f:bf:29:d4:6a:32:d2:
                    ef:d5:b0:50:fe:68:2f:ad:c3:f3:78:88:d6:f7:d8:
                    c0:30:41:df:43:7c:99:93:0a:8b:58:b1:90:33:48:
                    6b:cb:0d:8b:c7:b5:3b:40:29:46:e2:65:be:05:bd:
                    8b:7c:08:54:2a:6f:10:a4:5d:17:11:23:aa:e8:45:
                    fc:3b:70:5d:69:c0:21:6e:2d:2a:4d:30:f4:5b:63:
                    92:83:b8:c5:31:08:19:20:ef:37:7c:58:82:f4:f6:
                    12:e4:a7:50:28:c3:ba:a1:87:b0:5e:1e:c4:6b:52:
                    3e:c2:ec:fc:37:e6:22:ec:cc:31:91:35:ae:d2:d6:
                    e1:7a:1e:41:45:c3:3b:01:f7:f5:b9:82:07:6f:8d:
                    ee:1e:3e:40:f1:17:29:b6:0f:30:a4:ce:bb:64:99:
                    97:60:01:56:97:ff:d8:9c:40:07:bd:51:d3:8e:29:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:46:1A:96:4E:40:9D:C0:E5:9E:33:90:E2:55:C7:C0:41:22:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/6b5076df-c34a-3ac8-b8b6-61ee60ffad98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:22:4f:c1:df:0f:96:ef:fe:9b:9d:81:5a:4d:8d:fb:21:e6:
         b4:46:21:e9:78:2c:09:fc:bc:b0:72:c3:a3:cd:31:6f:e0:3f:
         60:7f:23:22:eb:30:0c:d6:42:16:26:c7:80:0b:81:d2:35:93:
         0c:e6:4f:69:b4:9b:c2:69:8f:69:bd:d0:68:b6:27:b3:cb:08:
         a4:a5:a8:4f:89:71:be:ad:50:57:6c:77:43:66:8d:40:c9:01:
         d1:aa:78:95:9a:59:67:c6:78:77:ec:56:a7:1e:3e:22:ef:dd:
         ef:df:e7:80:52:14:2b:03:db:27:fe:54:34:74:d5:f3:22:48:
         d6:20:b2:6a:15:ab:c6:3a:4f:56:21:f3:d4:0d:e4:b3:1d:99:
         b7:67:a5:bf:16:91:37:5f:e2:da:c2:1b:7b:83:7a:f0:a7:2f:
         57:4e:d0:d9:ec:3c:aa:a2:8a:88:7c:e6:51:70:09:f0:c9:df:
         56:69:97:3d:90:8f:c7:ef:6d:17:81:ff:cb:cb:fc:74:eb:e8:
         a5:b2:bb:3b:bf:ca:2a:73:52:b1:cb:d1:3a:4d:23:63:ef:75:
         da:1d:e9:aa:b5:a0:12:7d:97:be:32:76:a5:b7:91:3e:28:47:
         66:15:1e:b2:8b:31:11:27:81:e0:f9:70:fd:f6:d8:04:2d:0b:
         7a:83:fe:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAhELRcopkTE4SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk
YzQ1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NjY0ZjlmNjUtMzFiNi00ZWNmLWJmZjAtZWNjZTllNjM4ZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdiHVyGQWlYUk7oK7VkgUHpV9o/kWSsuxBL4
bTi4M7gMqsWX91722SbrHwOrzb4GwpMmOOE2uq2tNh/HeY3iAPgvzNmhy5eUit8x
E35JkJjS6m+/KdRqMtLv1bBQ/mgvrcPzeIjW99jAMEHfQ3yZkwqLWLGQM0hryw2L
x7U7QClG4mW+Bb2LfAhUKm8QpF0XESOq6EX8O3BdacAhbi0qTTD0W2OSg7jFMQgZ
IO83fFiC9PYS5KdQKMO6oYewXh7Ea1I+wuz8N+Yi7MwxkTWu0tbheh5BRcM7Aff1
uYIHb43uHj5A8Rcptg8wpM67ZJmXYAFWl//YnEAHvVHTjimhKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2VRhqWTkCdwOWeM5DiVcfAQSJyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh
NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvNmI1MDc2ZGYtYzM0YS0z
YWM4LWI4YjYtNjFlZTYwZmZhZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1
MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl
ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm
ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMiT8HfD5bv/pudgVpNjfsh5rRGIel4LAn8vLByw6PNMW/gP2B/IyLr
MAzWQhYmx4ALgdI1kwzmT2m0m8Jpj2m90Gi2J7PLCKSlqE+Jcb6tUFdsd0NmjUDJ
AdGqeJWaWWfGeHfsVqcePiLv3e/f54BSFCsD2yf+VDR01fMiSNYgsmoVq8Y6T1Yh
89QN5LMdmbdnpb8WkTdf4trCG3uDevCnL1dO0NnsPKqiioh85lFwCfDJ31Zplz2Q
j8fvbReB/8vL/HTr6KWyuzu/yipzUrHL0TpNI2Pvddod6aq1oBJ9l74ydqW3kT4o
R2YVHrKLMREngeD5cP322AQtC3qD/rM=
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:50 2026 by rpki-client