Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f5705053-27fe-3239-a649-8bcaf76df727.roa
File:                     f5705053-27fe-3239-a649-8bcaf76df727.roa (raw, json)
Hash identifier:          mP9NLD0v8qbSC67CGwf6UT+SMyou7rRdR37DqzXCcM4=
Subject key identifier:   D3:70:1C:84:B2:47:58:05:A1:F0:5E:95:FD:8D:D7:7E:9F:20:1C:D5
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F11A141F8D42CCA527B97C9E0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f5705053-27fe-3239-a649-8bcaf76df727.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        138.1.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:41:f8:d4:2c:ca:52:7b:97:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e2c0c8b2-2060-4f04-a0f6-50af3d6faba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:f6:5c:54:8b:4a:cd:75:7b:70:95:0a:ab:
                    cf:26:21:0a:bc:3a:51:48:8a:a7:92:1a:2c:be:07:
                    8b:88:c3:6e:c3:27:8c:c0:e5:10:82:e8:76:de:3f:
                    f0:f4:de:ab:e4:02:e0:74:54:ff:c4:fc:99:ec:c5:
                    d0:b8:ee:6f:63:da:93:27:ab:d8:7e:1c:09:fd:c0:
                    86:d3:82:17:d2:32:5f:01:38:80:eb:47:a5:32:0a:
                    ab:7f:05:f3:8d:9b:07:69:7e:82:c5:d6:af:61:9f:
                    f6:9a:32:8a:3b:af:1f:3c:a8:de:98:39:f8:09:69:
                    dc:49:00:32:69:b9:a2:95:40:2a:c2:90:7c:3e:a3:
                    b1:6f:e4:ab:92:9e:f1:eb:29:07:e2:17:f1:ad:7b:
                    9f:75:ca:09:8f:ab:69:51:bc:27:68:16:aa:20:c2:
                    ad:97:ab:e5:83:4a:92:2d:e8:a5:ff:8e:c2:37:73:
                    9d:ec:65:94:90:af:08:29:e0:ad:16:ed:a4:c4:a5:
                    6d:02:41:df:5f:75:c4:27:7c:83:ae:8c:15:d1:8a:
                    c7:36:7b:80:ec:b9:61:d1:ef:e5:67:f7:0c:ea:bc:
                    c2:27:9c:78:84:16:12:ee:40:5a:a6:0c:f8:3f:55:
                    38:cc:4c:c8:b3:2c:d6:f4:5c:09:e3:98:b0:da:81:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:70:1C:84:B2:47:58:05:A1:F0:5E:95:FD:8D:D7:7E:9F:20:1C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f5705053-27fe-3239-a649-8bcaf76df727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.1.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:59:d9:03:b3:04:bd:1e:c8:6c:e3:e2:86:8c:87:fa:38:54:
         5d:10:b6:f0:34:5b:a5:ab:d8:a3:7e:7f:3a:6c:57:95:ca:5e:
         19:af:30:86:26:1c:cc:61:37:a1:bf:7c:7a:4c:17:73:c0:90:
         46:87:9f:f4:39:f9:50:c3:72:ba:f0:8c:b6:26:06:2a:89:27:
         7d:ef:c1:83:66:06:60:a6:16:8b:15:7f:c0:a6:b7:36:ee:f6:
         2e:31:f0:b5:60:ad:d5:38:fb:cd:6f:28:44:c0:2e:39:52:2c:
         01:a6:c7:73:ad:93:31:56:be:df:37:94:dd:77:dc:38:e1:77:
         f1:c8:c0:20:75:18:ae:3e:bf:79:46:ce:35:b2:58:64:bb:b2:
         d4:74:55:a6:82:aa:cf:54:43:58:21:b9:a4:1a:ff:62:96:f9:
         ef:08:ec:6b:d9:0e:26:d4:55:35:75:f3:d4:6b:72:b0:e9:7c:
         a0:ac:cb:99:69:d8:c6:44:af:19:b6:b0:bb:08:96:d7:be:27:
         96:b6:27:d8:06:28:cf:bd:15:03:e8:c9:5e:7d:6c:99:d0:64:
         9a:bf:d5:ab:e2:6a:4e:41:c2:56:23:4d:80:1e:42:7e:68:96:
         29:39:b3:18:c7:3a:dc:04:4b:37:6c:6a:2c:91:a4:02:e3:7a:
         70:f9:f3:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUH41CzKUnuXyeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTJjMGM4YjItMjA2MC00ZjA0LWEwZjYtNTBhZjNkNmZhYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ln2XFSLSs11e3CVCqvPJiEKvDpRSIqnkhos
vgeLiMNuwyeMwOUQguh23j/w9N6r5ALgdFT/xPyZ7MXQuO5vY9qTJ6vYfhwJ/cCG
04IX0jJfATiA60elMgqrfwXzjZsHaX6CxdavYZ/2mjKKO68fPKjemDn4CWncSQAy
abmilUAqwpB8PqOxb+Srkp7x6ykH4hfxrXufdcoJj6tpUbwnaBaqIMKtl6vlg0qS
Leil/47CN3Od7GWUkK8IKeCtFu2kxKVtAkHfX3XEJ3yDrowV0YrHNnuA7Llh0e/l
Z/cM6rzCJ5x4hBYS7kBapgz4P1U4zEzIsyzW9FwJ45iw2oFlRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNwHISyR1gFofBelf2N136fIBzVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjU3MDUwNTMtMjdmZS0z
MjM5LWE2NDktOGJjYWY3NmRmNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEigGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFZ2QOzBL0eyGzj4oaMh/o4VF0QtvA0W6Wr2KN+fzpsV5XKXhmvMIYm
HMxhN6G/fHpMF3PAkEaHn/Q5+VDDcrrwjLYmBiqJJ33vwYNmBmCmFosVf8Cmtzbu
9i4x8LVgrdU4+81vKETALjlSLAGmx3OtkzFWvt83lN133Djhd/HIwCB1GK4+v3lG
zjWyWGS7stR0VaaCqs9UQ1ghuaQa/2KW+e8I7GvZDibUVTV189RrcrDpfKCsy5lp
2MZErxm2sLsIlte+J5a2J9gGKM+9FQPoyV59bJnQZJq/1aviak5BwlYjTYAeQn5o
lik5sxjHOtwESzdsaiyRpALjenD58yQ=
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:17:09 2026 by rpki-client