Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea847ec-b9a8-3ac2-8da2-cbb6d9421872.roa
File:                     4ea847ec-b9a8-3ac2-8da2-cbb6d9421872.roa (raw, json)
Hash identifier:          nSWNSJbVD1U35AmHdlW9q1sbM04Q7T8nTXEzebGd6YM=
Subject key identifier:   7B:93:37:71:93:48:BC:D9:62:8A:A5:C2:47:B8:AB:0D:1E:F2:A2:7E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EED5211DD06C2E36F43920D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea847ec-b9a8-3ac2-8da2-cbb6d9421872.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        159.13.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:11:dd:06:c2:e3:6f:43:92:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=fafa1483-cf47-4ce9-b28e-8694bf793992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:c9:c3:d4:f4:26:6b:73:61:4c:9b:63:8a:
                    30:ba:52:cd:f3:05:7c:01:6f:97:08:d1:ce:e9:50:
                    f4:79:f7:a0:c4:21:f6:e3:f8:53:cb:3b:06:6b:76:
                    5d:8d:67:16:03:53:c0:f8:67:85:ea:8c:e7:1e:26:
                    b5:66:e4:a7:d5:15:53:d4:56:01:3e:8f:31:60:49:
                    32:70:a6:d5:f2:ff:55:05:1f:c8:94:50:ae:ed:bd:
                    fb:26:38:5a:73:db:8c:23:2a:5f:e1:8f:5b:87:99:
                    66:d4:1f:9e:94:60:07:01:3d:4e:f6:9f:cb:e3:ed:
                    da:56:9c:26:83:5c:00:f4:ff:fe:7e:70:6b:df:09:
                    99:e4:21:00:d9:99:ff:83:b0:2d:1d:de:69:04:eb:
                    69:28:76:d8:30:ab:20:a7:12:4e:12:1c:f8:4d:ab:
                    7d:78:52:41:02:e4:1c:5d:a1:14:79:a2:1b:1a:4f:
                    36:e9:ae:a4:90:bf:d2:1b:e7:29:0f:41:a2:dc:e8:
                    70:12:1f:6f:d8:ef:82:53:8c:63:28:99:e2:ed:c3:
                    f4:3f:3b:df:62:df:89:b3:a5:76:78:7c:14:5d:04:
                    d3:d6:c5:87:e5:99:ad:b3:26:c1:a3:3c:a6:08:e2:
                    a2:22:e6:fe:0e:74:b2:2d:d4:2a:a6:53:be:7b:21:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:93:37:71:93:48:BC:D9:62:8A:A5:C2:47:B8:AB:0D:1E:F2:A2:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea847ec-b9a8-3ac2-8da2-cbb6d9421872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.13.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:60:43:bf:6c:48:99:40:ca:71:76:08:03:6d:bd:e5:7c:
         35:fe:41:a3:20:c7:63:62:f2:e2:83:93:fd:30:17:f5:9d:27:
         68:64:5d:9b:24:4e:9d:1e:7d:56:90:1b:b6:ae:57:22:94:1b:
         3f:91:cd:70:a7:9a:bf:05:a5:64:36:02:16:6b:73:f2:e0:02:
         bc:f7:b6:1d:06:0f:d6:01:b2:f9:3a:d3:d9:ed:2c:b5:40:78:
         74:05:f9:6b:fa:e5:6d:7a:c0:65:19:a1:35:3c:cc:77:22:72:
         2a:eb:d6:9d:2c:b6:7e:68:98:e4:8c:6e:13:85:44:37:cd:0e:
         06:2a:62:a4:61:98:67:31:d4:4a:d0:f4:10:99:f0:f3:f8:32:
         de:d7:ee:a3:cd:c7:ed:1b:25:38:9e:f8:46:f2:04:ac:fa:e0:
         d0:a3:31:6e:3e:cd:05:eb:b6:2e:66:c5:1b:05:ec:df:01:73:
         0e:38:dd:9c:bb:23:e5:9e:c6:68:d5:da:9e:1d:fd:c0:6a:e2:
         2c:20:cb:9c:76:4d:55:8c:97:b1:07:00:c5:08:7e:60:18:73:
         0b:9c:00:7e:f4:28:4f:fd:e8:36:7a:47:17:7d:f5:6c:1d:81:
         5b:68:3e:c8:27:a8:aa:f1:fe:d6:50:7f:fe:ce:84:cc:8d:0d:
         95:e4:ed:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhHdBsLjb0OSDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZmFmYTE0ODMtY2Y0Ny00Y2U5LWIyOGUtODY5NGJmNzkzOTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmTJw9T0JmtzYUybY4owulLN8wV8AW+XCNHO
6VD0efegxCH24/hTyzsGa3ZdjWcWA1PA+GeF6oznHia1ZuSn1RVT1FYBPo8xYEky
cKbV8v9VBR/IlFCu7b37Jjhac9uMIypf4Y9bh5lm1B+elGAHAT1O9p/L4+3aVpwm
g1wA9P/+fnBr3wmZ5CEA2Zn/g7AtHd5pBOtpKHbYMKsgpxJOEhz4Tat9eFJBAuQc
XaEUeaIbGk826a6kkL/SG+cpD0Gi3OhwEh9v2O+CU4xjKJni7cP0PzvfYt+Js6V2
eHwUXQTT1sWH5ZmtsybBozymCOKiIub+DnSyLdQqplO+eyH0CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuTN3GTSLzZYoqlwke4qw0e8qJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVhODQ3ZWMtYjlhOC0z
YWMyLThkYTItY2JiNmQ5NDIxODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnw0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC73YEO/bEiZQMpxdggDbb3lfDX+QaMgx2Ni8uKDk/0wF/WdJ2hkXZsk
Tp0efVaQG7auVyKUGz+RzXCnmr8FpWQ2AhZrc/LgArz3th0GD9YBsvk609ntLLVA
eHQF+Wv65W16wGUZoTU8zHcicirr1p0stn5omOSMbhOFRDfNDgYqYqRhmGcx1ErQ
9BCZ8PP4Mt7X7qPNx+0bJTie+EbyBKz64NCjMW4+zQXrti5mxRsF7N8Bcw443Zy7
I+WexmjV2p4d/cBq4iwgy5x2TVWMl7EHAMUIfmAYcwucAH70KE/96DZ6Rxd99Wwd
gVtoPsgnqKrx/tZQf/7OhMyNDZXk7SU=
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:18:16 2026 by rpki-client