Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa
File:                     3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa (raw, json)
Hash identifier:          tYuuePsphBTH0k+pUdUAXAEIcnu04ThIW6yOIJHeHvo=
Subject key identifier:   B1:E3:B9:7F:F7:59:24:8F:C1:A1:BE:92:9D:B2:6C:7C:A2:2E:E1:9D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E683F662FDAFD7CAA33F9E1A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        149.130.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:66:2f:da:fd:7c:aa:33:f9:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=a9162dc8-93cf-483b-870e-474322cde1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:7f:22:33:6e:08:b7:10:43:cb:47:55:b5:
                    fd:f6:2c:86:b6:40:c1:48:22:82:6f:0a:27:2e:5a:
                    33:4d:1e:f8:00:62:fc:71:79:27:12:65:bd:ba:8c:
                    71:8b:e9:61:6f:e9:73:1a:1b:33:e6:5f:99:ac:53:
                    88:90:86:ca:d3:6c:ac:85:50:98:8d:32:1a:0a:4b:
                    b2:a0:4c:51:f1:ab:b0:99:76:a2:76:01:8d:2e:16:
                    24:8f:09:0c:d7:6a:ac:c9:91:47:02:31:96:0c:08:
                    05:cd:24:c3:2f:e3:ae:56:d0:9c:0a:02:3f:63:df:
                    04:23:f9:87:1d:4d:b0:55:d9:e6:e7:46:30:45:0d:
                    79:67:f6:89:1c:9c:79:59:63:62:d7:42:e3:1f:4d:
                    0f:42:d4:36:21:27:99:8d:ae:ce:71:91:85:a5:b7:
                    18:e7:22:6f:ca:96:43:f1:00:d8:ec:d5:2e:fb:54:
                    d6:7a:74:09:16:1f:0a:96:4b:90:37:2b:e9:5d:fd:
                    a0:73:4f:1f:08:79:c3:3c:a4:d0:62:7f:1e:ef:66:
                    ef:29:cf:00:24:8c:a9:36:2b:27:f5:60:78:8f:db:
                    ff:d1:6f:15:bb:b4:af:cc:61:bc:fc:d6:7d:0b:45:
                    76:10:3e:5d:b1:fc:94:77:9e:b6:3e:43:c5:62:8c:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:B9:7F:F7:59:24:8F:C1:A1:BE:92:9D:B2:6C:7C:A2:2E:E1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.130.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:0a:e4:5f:54:cc:a9:34:e0:0d:af:00:3b:dd:ce:02:44:91:
         51:31:02:97:0b:3e:5d:09:cf:6b:dc:cc:90:b7:37:98:79:15:
         c6:44:89:81:4a:23:68:98:4d:f4:ce:b0:b2:a2:36:76:35:1b:
         73:43:eb:a2:b9:80:dc:ea:c3:b3:41:1a:fb:63:71:33:86:9f:
         33:8a:66:ff:47:ea:40:17:9c:e0:e9:2d:b8:ea:eb:7b:6a:59:
         8e:5f:b4:05:a9:bd:cd:01:d1:14:ff:fc:65:ee:df:6e:cc:f3:
         fe:f2:78:4f:bb:04:a7:51:7b:28:f7:b4:0c:2f:98:d4:4b:58:
         5f:44:fa:ef:b2:dd:ad:92:79:e0:14:1d:ee:d5:9c:44:d8:c3:
         a5:26:33:69:70:10:51:97:9d:cf:c7:1c:e5:5b:85:c9:e6:f6:
         db:32:6a:15:a8:1b:bc:b6:7b:9b:3d:f7:34:76:66:57:2b:27:
         57:7a:67:66:9f:06:4a:0b:da:e7:60:83:50:63:77:0f:ce:a3:
         7a:f9:12:57:bf:05:0e:16:fe:6e:53:af:ac:8d:d8:5d:6a:10:
         1b:bf:f6:34:44:f9:e5:fd:a6:5b:fc:ca:74:cb:d2:51:98:1f:
         3d:c1:dc:04:1b:33:0a:4d:27:da:73:72:6b:b1:28:1f:26:35:
         fe:a3:d2:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP2Yv2v18qjP54aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk
YTkxNjJkYzgtOTNjZi00ODNiLTg3MGUtNDc0MzIyY2RlMWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+N/IjNuCLcQQ8tHVbX99iyGtkDBSCKCbwon
LlozTR74AGL8cXknEmW9uoxxi+lhb+lzGhsz5l+ZrFOIkIbK02yshVCYjTIaCkuy
oExR8auwmXaidgGNLhYkjwkM12qsyZFHAjGWDAgFzSTDL+OuVtCcCgI/Y98EI/mH
HU2wVdnm50YwRQ15Z/aJHJx5WWNi10LjH00PQtQ2ISeZja7OcZGFpbcY5yJvypZD
8QDY7NUu+1TWenQJFh8KlkuQNyvpXf2gc08fCHnDPKTQYn8e72bvKc8AJIypNisn
9WB4j9v/0W8Vu7SvzGG8/NZ9C0V2ED5dsfyUd562PkPFYowCMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHjuX/3WSSPwaG+kp2ybHyiLuGdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JiOGJlNWItZmJiZC0z
MjkwLWI2YWQtMTI2NWMyZTRiMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlYKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsK5F9UzKk04A2vADvdzgJEkVExApcLPl0Jz2vczJC3N5h5FcZEiYFK
I2iYTfTOsLKiNnY1G3ND66K5gNzqw7NBGvtjcTOGnzOKZv9H6kAXnODpLbjq63tq
WY5ftAWpvc0B0RT//GXu327M8/7yeE+7BKdReyj3tAwvmNRLWF9E+u+y3a2SeeAU
He7VnETYw6UmM2lwEFGXnc/HHOVbhcnm9tsyahWoG7y2e5s99zR2ZlcrJ1d6Z2af
BkoL2udgg1Bjdw/Oo3r5Ele/BQ4W/m5Tr6yN2F1qEBu/9jRE+eX9plv8ynTL0lGY
Hz3B3AQbMwpNJ9pzcmuxKB8mNf6j0kM=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:10 2026 by rpki-client