Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa
File:                     e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa (raw, json)
Hash identifier:          qqM04uL0gXNlbBojueABAaadLdf8uF+osd2pAOgmT9o=
Subject key identifier:   76:97:75:AF:77:58:2F:81:E9:DD:E2:6F:50:BD:7E:1F:BD:0F:8C:02
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F498AEE9F1419FFCFC2C386B0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        199.7.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:ee:9f:14:19:ff:cf:c2:c3:86:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=69bdf5c1-473e-49da-a113-76280a93541c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:f0:db:5d:1a:2f:45:7a:77:15:fb:6c:ab:
                    da:ff:93:ef:b3:d2:84:b1:e3:c9:4b:05:9e:ea:cf:
                    90:ee:5b:81:1a:46:87:c0:a2:7e:67:89:c7:f2:bf:
                    33:54:91:c9:18:c1:5d:40:28:4c:ac:e4:32:5b:78:
                    56:94:21:82:66:bd:a8:9e:30:ef:c4:91:e3:e0:b0:
                    fd:b1:15:f8:34:f8:82:93:69:dc:b9:48:fa:49:d6:
                    c0:51:70:c3:63:f7:81:f5:a3:88:c6:39:d8:08:46:
                    2e:25:79:19:9d:9b:d6:06:f2:a3:dc:91:c8:fb:5a:
                    47:bc:07:dd:b4:ea:93:ba:21:23:06:9f:26:ec:1c:
                    50:4c:9d:38:c7:8a:01:30:29:9b:b3:cb:aa:fb:a4:
                    a9:5c:bb:0d:22:49:6f:00:f1:3b:d3:b4:7a:b3:9a:
                    86:3a:e8:01:71:e9:c1:ec:db:d2:36:26:7d:d6:39:
                    94:ec:2f:28:9b:a4:0d:2c:44:15:5b:cb:71:56:24:
                    70:df:44:28:bb:07:be:8e:5e:a0:39:b9:59:d0:56:
                    45:21:11:d6:ae:e4:e6:dc:19:e4:e5:3c:5b:6b:ad:
                    62:d1:7f:bb:be:ef:d6:e2:48:ae:da:db:63:a4:f3:
                    88:1b:0d:7b:13:83:eb:a6:7d:0c:bf:6b:f9:68:f8:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:75:AF:77:58:2F:81:E9:DD:E2:6F:50:BD:7E:1F:BD:0F:8C:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:9d:8a:b3:61:2a:00:be:f5:64:e4:50:77:1a:d5:fa:32:
         bd:68:eb:a0:1f:3a:28:73:eb:2b:1e:82:8e:89:11:d3:8b:af:
         38:f5:63:ca:35:34:92:37:f7:8d:96:a7:cd:9b:e1:cc:4c:4f:
         ae:36:b3:3a:c5:30:d0:7a:94:92:0c:70:5d:a4:c8:9f:51:04:
         fd:38:80:01:a0:90:e7:13:28:14:6c:8c:f5:d1:89:3b:8f:68:
         eb:81:11:55:83:2e:b7:46:e4:58:84:a0:2f:e1:4b:27:ea:51:
         f9:03:ff:31:24:ab:7d:3f:7f:32:60:1b:9e:36:99:27:55:c0:
         53:17:2e:b1:5b:d8:55:7b:43:04:0f:8c:e5:ce:04:86:06:cf:
         48:01:27:38:7a:28:92:aa:bb:45:d0:62:21:f9:3a:06:60:ae:
         7e:53:ee:9c:79:15:02:df:ca:57:13:46:a0:c3:1b:4c:2b:9c:
         86:8c:72:0a:38:bc:b2:85:a4:fb:6f:83:45:92:8f:64:a1:75:
         c8:c3:19:12:44:4e:56:7e:2f:c7:e2:04:fa:36:b6:eb:a3:aa:
         b1:21:9a:42:4c:7c:0e:a3:8e:26:07:76:4a:6f:32:32:2e:9f:
         3f:ea:cd:1c:7a:af:8e:8e:a5:a6:3c:5f:77:51:f5:47:28:90:
         1b:b2:be:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiu6fFBn/z8LDhrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjliZGY1YzEtNDczZS00OWRhLWExMTMtNzYyODBhOTM1NDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr3w210aL0V6dxX7bKva/5Pvs9KEsePJSwWe
6s+Q7luBGkaHwKJ+Z4nH8r8zVJHJGMFdQChMrOQyW3hWlCGCZr2onjDvxJHj4LD9
sRX4NPiCk2ncuUj6SdbAUXDDY/eB9aOIxjnYCEYuJXkZnZvWBvKj3JHI+1pHvAfd
tOqTuiEjBp8m7BxQTJ04x4oBMCmbs8uq+6SpXLsNIklvAPE707R6s5qGOugBcenB
7NvSNiZ91jmU7C8om6QNLEQVW8txViRw30Qouwe+jl6gOblZ0FZFIRHWruTm3Bnk
5Txba61i0X+7vu/W4kiu2ttjpPOIGw17E4Prpn0Mv2v5aPjNuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaXda93WC+B6d3ib1C9fh+9D4wCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTc3NTY0ZGUtZDRkMS0z
MWI1LWJhYWEtZmM2NDVjMWM2YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqenYqzYSoAvvVk5FB3GtX6Mr1o66AfOihz6ysego6JEdOLrzj1Y8o1
NJI3942Wp82b4cxMT642szrFMNB6lJIMcF2kyJ9RBP04gAGgkOcTKBRsjPXRiTuP
aOuBEVWDLrdG5FiEoC/hSyfqUfkD/zEkq30/fzJgG542mSdVwFMXLrFb2FV7QwQP
jOXOBIYGz0gBJzh6KJKqu0XQYiH5OgZgrn5T7px5FQLfylcTRqDDG0wrnIaMcgo4
vLKFpPtvg0WSj2ShdcjDGRJETlZ+L8fiBPo2tuujqrEhmkJMfA6jjiYHdkpvMjIu
nz/qzRx6r46OpaY8X3dR9UcokBuyvhw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:48:50 2026 by rpki-client