Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c702bb81-6d1a-3f56-84b2-432537060a48.roa
File:                     c702bb81-6d1a-3f56-84b2-432537060a48.roa (raw, json)
Hash identifier:          H0qwbyh3wNI/Tq5VGz1Rh0T2Rg716b9HgrjHOINfP5c=
Subject key identifier:   8B:8C:EB:4B:18:2E:0F:29:E1:78:2A:D1:0E:AC:9F:0D:D8:8F:9F:9A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F498C2E772155E295C2CEE400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c702bb81-6d1a-3f56-84b2-432537060a48.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     207266
IP address blocks:        161.232.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:2e:77:21:55:e2:95:c2:ce:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=21e9df85-b16e-4fb4-b273-a0c9bbe68f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:2b:52:c3:3c:e0:6c:12:7d:db:68:22:4f:
                    00:1e:ff:4c:e3:05:02:06:ee:47:6f:88:ed:f0:b9:
                    f1:de:f6:01:54:80:87:26:ef:48:50:f8:93:de:40:
                    a0:6e:db:eb:6e:a1:f9:af:f0:4d:7b:ff:01:6c:8c:
                    ce:b7:af:f7:2d:5d:f7:3d:36:17:cb:ad:97:60:be:
                    2c:1d:a0:5a:8e:98:bf:ec:3e:13:7c:35:34:a6:5a:
                    68:09:2d:50:f3:65:dc:1b:de:9a:06:03:34:7e:13:
                    08:ff:95:a7:87:18:9b:14:73:64:df:02:e8:76:da:
                    52:da:2b:d3:d4:bf:83:76:7d:87:83:f9:d9:ab:02:
                    e7:2f:1a:c3:ef:29:55:bf:1e:bf:4d:7d:ad:e5:5a:
                    f3:e7:e5:32:02:50:5f:ac:79:f4:77:37:54:c9:1b:
                    1c:c0:db:2a:66:38:bc:5c:a4:fe:06:a6:a9:83:2b:
                    eb:ce:e3:aa:e7:75:3d:43:ca:ee:89:1f:4e:25:47:
                    fd:9e:c9:ec:df:ed:fc:c7:2f:1f:6b:a0:4e:fb:e6:
                    1f:98:dc:63:e9:47:d8:d6:99:fa:9e:4a:65:bd:e4:
                    dc:74:8b:52:70:42:45:20:79:75:a0:2d:86:d5:12:
                    a7:65:00:e8:0f:da:fb:36:56:13:29:c0:57:de:95:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:EB:4B:18:2E:0F:29:E1:78:2A:D1:0E:AC:9F:0D:D8:8F:9F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c702bb81-6d1a-3f56-84b2-432537060a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.232.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:68:76:1d:a4:ea:42:e6:82:24:f2:99:ce:2b:fa:dc:39:81:
         46:d2:58:c5:0b:33:5c:98:80:96:51:a5:b6:2f:d7:43:06:0d:
         68:7a:22:d9:06:fb:94:7c:be:81:de:c6:6e:58:61:1d:be:f3:
         d9:f7:76:4f:7b:38:d0:72:61:e0:fa:c2:4a:66:05:1c:06:63:
         12:a5:bf:f1:43:a2:65:e8:4c:28:ff:8f:ae:03:cc:32:de:29:
         5d:c2:e9:ae:3e:09:7a:40:07:47:06:52:7c:73:1b:ad:54:52:
         94:fe:8f:f2:55:c9:30:f8:30:23:01:64:68:31:62:2d:8a:80:
         f7:0a:e2:b6:0c:25:97:d4:cd:e1:ed:c1:fe:99:57:e1:0a:25:
         41:9d:31:3c:60:47:83:8b:8f:05:20:3f:28:0b:39:51:d1:39:
         11:82:96:cb:c1:ee:62:ab:fd:bf:2f:c0:39:30:0e:18:93:6f:
         7a:ad:9d:ff:68:ce:e9:29:12:ab:6b:cd:c5:67:a5:77:d1:0c:
         3f:6c:6d:af:4d:18:23:5f:e6:dd:f6:0f:9a:13:00:40:34:4c:
         35:13:ea:0f:49:05:65:b6:58:a8:bc:41:95:62:d6:16:2f:21:
         0d:bb:fe:72:a7:e8:66:bf:ad:ec:38:14:f7:90:b4:98:f8:68:
         6d:12:d2:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjC53IVXilcLO5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjFlOWRmODUtYjE2ZS00ZmI0LWIyNzMtYTBjOWJiZTY4ZjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5srUsM84GwSfdtoIk8AHv9M4wUCBu5Hb4jt
8Lnx3vYBVICHJu9IUPiT3kCgbtvrbqH5r/BNe/8BbIzOt6/3LV33PTYXy62XYL4s
HaBajpi/7D4TfDU0plpoCS1Q82XcG96aBgM0fhMI/5WnhxibFHNk3wLodtpS2ivT
1L+Ddn2Hg/nZqwLnLxrD7ylVvx6/TX2t5Vrz5+UyAlBfrHn0dzdUyRscwNsqZji8
XKT+BqapgyvrzuOq53U9Q8ruiR9OJUf9nsns3+38xy8fa6BO++YfmNxj6UfY1pn6
nkplveTcdItScEJFIHl1oC2G1RKnZQDoD9r7NlYTKcBX3pXDGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuM60sYLg8p4Xgq0Q6snw3Yj5+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzcwMmJiODEtNmQxYS0z
ZjU2LTg0YjItNDMyNTM3MDYwYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZodh2k6kLmgiTymc4r+tw5gUbSWMULM1yYgJZRpbYv10MGDWh6ItkG
+5R8voHexm5YYR2+89n3dk97ONByYeD6wkpmBRwGYxKlv/FDomXoTCj/j64DzDLe
KV3C6a4+CXpAB0cGUnxzG61UUpT+j/JVyTD4MCMBZGgxYi2KgPcK4rYMJZfUzeHt
wf6ZV+EKJUGdMTxgR4OLjwUgPygLOVHRORGClsvB7mKr/b8vwDkwDhiTb3qtnf9o
zukpEqtrzcVnpXfRDD9sba9NGCNf5t32D5oTAEA0TDUT6g9JBWW2WKi8QZVi1hYv
IQ27/nKn6Ga/rew4FPeQtJj4aG0S0vA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:10:55 2026 by rpki-client