Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5bb03b40-6143-308c-b5b7-399262b0267e.roa
File:                     5bb03b40-6143-308c-b5b7-399262b0267e.roa (raw, json)
Hash identifier:          nrTIkQooYolQVuUU2Owicy2AGvQ+dt2Z2Oka5+4uQtk=
Subject key identifier:   E0:DD:22:9F:BF:A5:1F:4D:E3:35:FA:D4:9C:E6:B5:F4:39:B3:76:7A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF181FB8FAD24CA4C991FA61C
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5bb03b40-6143-308c-b5b7-399262b0267e.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        129.213.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:81:fb:8f:ad:24:ca:4c:99:1f:a6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=3c725988-cf93-4be1-91a2-624a0f7fddcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:30:63:07:04:50:fb:e6:c6:20:77:7d:66:
                    ae:c9:d9:ea:d7:ff:e6:51:5d:7a:29:cc:21:f7:94:
                    02:c5:0f:47:7d:67:24:fc:94:48:e5:da:37:c2:a3:
                    24:47:ea:a7:29:5c:82:fd:90:b6:8e:ab:7d:0b:86:
                    10:46:3a:ab:ea:a1:bd:fe:41:66:54:bf:a3:d9:92:
                    7b:d6:2d:2e:98:95:93:ae:e9:ef:83:0d:8a:b1:62:
                    96:be:df:68:0a:9f:44:ba:dc:e5:d3:3a:66:12:bb:
                    3e:b0:60:07:dd:1a:ab:1c:d4:f8:76:9a:0f:a3:cc:
                    f8:5a:f5:03:fa:a9:1d:f0:68:db:2a:f8:02:08:c3:
                    5a:73:94:d8:21:04:5b:41:c7:a6:30:a8:bb:d6:da:
                    bf:ba:3e:bb:ba:37:76:24:7a:c8:97:c9:9d:8f:51:
                    47:c2:63:09:ce:57:00:3a:19:d1:34:b2:e5:79:7e:
                    d7:45:dd:bb:bc:46:36:fd:b4:78:00:9f:89:6d:b9:
                    f0:fb:87:cc:57:ab:3c:32:de:d2:9b:45:11:10:cc:
                    2b:3a:9f:7d:c1:3d:d0:98:01:fe:52:d9:5e:32:62:
                    f7:fc:d5:0c:c8:62:a7:2f:a3:22:cd:3f:21:66:29:
                    29:81:5b:44:3f:17:66:3d:3c:14:d4:27:02:25:3f:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DD:22:9F:BF:A5:1F:4D:E3:35:FA:D4:9C:E6:B5:F4:39:B3:76:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5bb03b40-6143-308c-b5b7-399262b0267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:6c:64:b3:6b:a2:0b:db:37:68:b9:14:72:6b:31:d4:4d:
         31:34:36:83:1c:5b:33:c5:a3:f3:aa:3c:51:d9:d6:30:6f:a8:
         05:fa:67:7f:2f:6e:b0:f6:15:d8:e7:eb:c2:90:ca:48:09:ba:
         48:ad:b1:a2:6d:53:ea:db:e1:36:6c:58:7e:33:18:d3:28:f9:
         8d:a2:16:26:6e:cf:59:0f:ea:61:78:ae:cc:71:ae:55:70:62:
         e5:27:91:04:36:16:25:bc:33:72:af:dd:07:e9:fa:9b:d0:3b:
         d2:e6:b1:01:43:31:17:d9:ee:f8:a4:d6:95:f9:27:4a:ed:22:
         f3:8f:25:03:ac:e1:3a:7d:e4:d5:36:1a:9c:d8:9e:89:3f:52:
         fd:40:ba:c4:9a:fc:47:98:fc:89:2c:c8:68:e6:79:21:e5:97:
         c2:c1:27:79:3c:d6:33:a9:0f:7d:76:35:b4:18:ba:42:8a:b8:
         94:8f:77:3e:bd:4f:f8:74:f1:94:54:c7:99:cc:3a:8e:7f:99:
         d4:23:dd:4c:6e:93:cf:14:81:23:a6:47:c3:cf:a9:9f:d0:eb:
         0f:61:17:68:83:4f:2f:32:a5:44:87:d1:63:d0:22:cf:04:d2:
         3d:75:4c:4b:1d:b5:63:a6:27:26:19:88:d2:e5:13:85:8b:11:
         81:33:11:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgfuPrSTKTJkfphwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
M2M3MjU5ODgtY2Y5My00YmUxLTkxYTItNjI0YTBmN2ZkZGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7gwYwcEUPvmxiB3fWauydnq1//mUV16Kcwh
95QCxQ9HfWck/JRI5do3wqMkR+qnKVyC/ZC2jqt9C4YQRjqr6qG9/kFmVL+j2ZJ7
1i0umJWTrunvgw2KsWKWvt9oCp9Eutzl0zpmErs+sGAH3RqrHNT4dpoPo8z4WvUD
+qkd8GjbKvgCCMNac5TYIQRbQcemMKi71tq/uj67ujd2JHrIl8mdj1FHwmMJzlcA
OhnRNLLleX7XRd27vEY2/bR4AJ+Jbbnw+4fMV6s8Mt7Sm0UREMwrOp99wT3QmAH+
UtleMmL3/NUMyGKnL6MizT8hZikpgVtEPxdmPTwU1CcCJT8wGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODdIp+/pR9N4zX61JzmtfQ5s3Z6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWJiMDNiNDAtNjE0My0z
MDhjLWI1YjctMzk5MjYyYjAyNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgdVQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9TbGSza6IL2zdouRRyazHUTTE0NoMcWzPFo/OqPFHZ1jBvqAX6Z38v
brD2Fdjn68KQykgJukitsaJtU+rb4TZsWH4zGNMo+Y2iFiZuz1kP6mF4rsxxrlVw
YuUnkQQ2FiW8M3Kv3Qfp+pvQO9LmsQFDMRfZ7vik1pX5J0rtIvOPJQOs4Tp95NU2
GpzYnok/Uv1AusSa/EeY/IksyGjmeSHll8LBJ3k81jOpD312NbQYukKKuJSPdz69
T/h08ZRUx5nMOo5/mdQj3Uxuk88UgSOmR8PPqZ/Q6w9hF2iDTy8ypUSH0WPQIs8E
0j11TEsdtWOmJyYZiNLlE4WLEYEzERs=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:10:21 2026 by rpki-client