Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa
File:                     3ac99882-5f66-3e45-b087-556a6be061d9.roa (raw, json)
Hash identifier:          We6V1DZkC/fEu+v9chTbQWC9EN29kgcAs9/1RCuM2n4=
Subject key identifier:   77:F8:D6:DD:B9:9B:9D:71:93:A6:7C:5E:64:AE:5C:A5:03:63:63:32
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E4AEF6FDCBE66CB255479D640
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        129.146.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6f:dc:be:66:cb:25:54:79:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=8f47da91-52d7-459b-94da-3f30232c381a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:0c:cd:ec:87:74:8d:f5:db:9b:a6:0c:5f:
                    87:28:35:fb:a7:3b:95:55:98:66:d8:ff:3f:86:e3:
                    cf:e4:3f:5d:72:b6:c4:e9:66:71:39:c7:39:27:45:
                    33:cd:19:c2:d1:0c:ec:64:e6:36:a6:a7:81:54:4f:
                    f9:91:de:08:80:c8:c5:a6:e3:92:f2:5b:cb:80:b7:
                    de:ec:93:58:4a:87:37:40:6e:bc:c0:25:af:96:46:
                    79:17:c0:34:18:cb:cf:d6:33:dd:6b:15:8b:0a:91:
                    8d:d7:f6:c5:7c:2a:e4:2b:19:08:57:a1:59:17:2a:
                    6b:34:09:df:8e:c4:c7:21:b2:be:05:a3:aa:cd:be:
                    c4:fe:16:da:de:89:a8:58:d6:ed:d3:33:ef:01:d3:
                    01:51:f6:79:e1:28:e1:af:7e:3b:3d:2e:cb:df:31:
                    b3:d1:e8:13:26:e7:66:d7:b9:2e:72:77:6b:81:23:
                    0c:bb:3a:fa:69:97:a2:87:b7:b0:23:94:26:13:dd:
                    d4:99:0e:13:b1:83:ef:4c:04:ea:40:77:d4:b5:8b:
                    e6:cc:97:e2:60:91:e3:09:8a:8f:34:4e:c0:ed:d7:
                    bc:b8:79:49:16:34:dc:34:a8:5c:be:44:a4:6e:44:
                    46:3e:4c:85:32:5a:92:51:5b:69:86:cd:09:ae:cb:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:D6:DD:B9:9B:9D:71:93:A6:7C:5E:64:AE:5C:A5:03:63:63:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.146.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0e:bd:38:87:ef:4d:a5:ea:f0:ba:25:82:75:3c:ea:9c:ea:
         33:7b:22:29:d2:11:cb:e0:2f:37:8b:ec:a0:fb:94:19:1a:42:
         4a:4e:66:aa:39:6d:e1:b9:2c:30:af:67:fe:3b:88:73:f8:17:
         49:97:9e:f8:9a:e5:51:16:bd:a6:37:b8:6b:f0:b0:b8:7e:09:
         d6:50:94:4c:19:d9:eb:16:01:89:70:d3:c4:28:cf:51:5e:46:
         8d:54:bd:5a:06:25:2b:9d:40:4b:7f:0c:4f:5a:28:b3:25:d6:
         ba:cb:35:fd:25:f5:93:6c:b6:00:52:06:f1:23:6e:07:d4:55:
         be:ab:07:01:bf:f3:e0:a6:48:1f:df:11:6b:b1:83:0b:2d:41:
         8d:bf:72:42:76:28:1f:03:97:2b:cf:4f:21:81:ec:77:a7:ee:
         c4:12:b5:3b:bd:b3:bb:69:3f:51:7e:f8:5f:eb:12:74:d2:4d:
         83:a1:dd:f0:f1:37:68:5f:cb:0f:0f:16:f5:d3:1d:88:f4:b7:
         95:ec:e1:7b:07:9d:31:a3:c8:dd:ac:71:8c:a5:dc:27:39:10:
         49:5e:1d:f8:ba:ae:88:d1:53:9c:95:f4:03:d5:1f:93:9b:dd:
         52:a8:1e:74:ad:2f:35:8c:f6:17:bb:28:3e:f7:0a:93:72:24:
         78:35:14:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72/cvmbLJVR51kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
OGY0N2RhOTEtNTJkNy00NTliLTk0ZGEtM2YzMDIzMmMzODFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhoMzeyHdI3125umDF+HKDX7pzuVVZhm2P8/
huPP5D9dcrbE6WZxOcc5J0UzzRnC0QzsZOY2pqeBVE/5kd4IgMjFpuOS8lvLgLfe
7JNYSoc3QG68wCWvlkZ5F8A0GMvP1jPdaxWLCpGN1/bFfCrkKxkIV6FZFyprNAnf
jsTHIbK+BaOqzb7E/hba3omoWNbt0zPvAdMBUfZ54Sjhr347PS7L3zGz0egTJudm
17kucndrgSMMuzr6aZeih7ewI5QmE93UmQ4TsYPvTATqQHfUtYvmzJfiYJHjCYqP
NE7A7de8uHlJFjTcNKhcvkSkbkRGPkyFMlqSUVtphs0JrsvV1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHf41t25m51xk6Z8XmSuXKUDY2MyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2FjOTk4ODItNWY2Ni0z
ZTQ1LWIwODctNTU2YTZiZTA2MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkOvTiH702l6vC6JYJ1POqc6jN7IinSEcvgLzeL7KD7lBkaQkpOZqo5
beG5LDCvZ/47iHP4F0mXnvia5VEWvaY3uGvwsLh+CdZQlEwZ2esWAYlw08Qoz1Fe
Ro1UvVoGJSudQEt/DE9aKLMl1rrLNf0l9ZNstgBSBvEjbgfUVb6rBwG/8+CmSB/f
EWuxgwstQY2/ckJ2KB8DlyvPTyGB7Hen7sQStTu9s7tpP1F++F/rEnTSTYOh3fDx
N2hfyw8PFvXTHYj0t5Xs4XsHnTGjyN2scYyl3Cc5EEleHfi6rojRU5yV9APVH5Ob
3VKoHnStLzWM9he7KD73CpNyJHg1FBQ=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:54:41 2026 by rpki-client