Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8e2c8409-9f87-37db-8718-d441a0901226.roa
File:                     8e2c8409-9f87-37db-8718-d441a0901226.roa (raw, json)
Hash identifier:          6OHuwazfP58HjU+ut7qZOm/b40HmqicWUh8S6ze9Gnw=
Subject key identifier:   00:2F:A5:55:2B:AA:AB:D5:8D:83:AB:B4:DA:71:57:AF:EA:BC:85:43
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584EA7879897A16502677DC03A80
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8e2c8409-9f87-37db-8718-d441a0901226.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        161.115.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:98:97:a1:65:02:67:7d:c0:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4711b480-2f39-400b-a91e-db9b74173b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:9e:c3:66:4a:c6:cb:a6:5f:52:ff:b6:05:
                    9c:4a:d2:00:63:61:85:1e:33:d2:9b:46:d0:0a:13:
                    12:25:98:92:86:10:1d:f7:a5:a6:6a:06:58:76:b3:
                    eb:7d:8f:40:5f:2a:42:f4:bf:bf:be:69:51:11:11:
                    98:18:ab:15:d0:11:ea:0d:9c:34:40:49:37:2c:de:
                    c6:d0:db:bc:91:05:5e:8d:6f:a7:92:8f:76:33:90:
                    fd:95:0c:86:62:fe:29:f7:3c:6c:9e:26:e9:7b:3a:
                    8e:94:45:21:fa:7e:1a:e9:f1:39:c8:85:41:a1:fd:
                    55:cf:39:2c:27:d0:0d:63:92:1c:96:a1:cd:6f:b9:
                    88:51:24:95:03:85:ea:bd:6f:be:a6:3b:eb:c7:51:
                    08:00:ca:62:de:60:7f:21:76:99:3f:18:34:1c:63:
                    2a:02:dc:85:1d:02:f3:87:c8:e6:42:98:9b:d5:23:
                    9a:9e:08:1f:f6:1e:b5:88:72:40:17:c1:de:59:6d:
                    b6:80:d1:d0:47:22:09:71:27:ae:77:f8:15:dc:32:
                    8d:56:7d:c5:bb:84:b6:7d:6a:44:68:88:14:30:66:
                    ba:bc:f1:b3:ad:8f:73:3e:09:8c:50:16:45:dd:dd:
                    da:f0:2c:5b:4a:ac:16:e0:32:47:53:5a:89:6b:0c:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2F:A5:55:2B:AA:AB:D5:8D:83:AB:B4:DA:71:57:AF:EA:BC:85:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/8e2c8409-9f87-37db-8718-d441a0901226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:72:09:c8:c9:bd:e7:5f:f3:31:0a:8f:44:ff:db:27:76:
         fd:a1:c8:63:7c:29:28:3e:09:df:b1:50:91:ed:ae:75:ec:9e:
         26:83:db:12:8d:3a:5b:c7:4c:f4:30:01:c3:30:5a:2a:dd:e2:
         db:7a:7e:7d:6d:85:f0:de:ee:32:72:ea:78:31:77:0b:ee:49:
         ce:87:01:49:c4:57:2b:8a:3d:19:fc:ce:1e:db:4a:38:e2:46:
         d8:e9:4b:fb:90:4a:69:2c:84:20:86:47:3a:02:5c:a9:07:0f:
         95:06:52:5a:40:a2:ef:4e:34:05:16:75:63:5a:6b:44:19:e1:
         db:d3:42:17:0c:45:2d:9b:30:51:7a:6e:c9:58:5e:5d:fb:0a:
         09:be:45:2f:fe:7a:87:aa:95:15:e4:32:bf:8b:50:dc:47:93:
         4c:44:5a:16:7d:66:cf:61:14:ac:77:18:0b:00:b6:73:47:e2:
         e6:e2:67:2c:60:46:bb:ad:4a:f2:27:02:be:1a:80:eb:e1:ca:
         40:97:85:9e:b0:3d:dc:ed:da:f1:0e:d9:12:a1:8a:0b:18:06:
         3c:2c:7d:e0:90:e0:cc:c9:5e:e9:00:ed:af:e1:e3:af:d0:2d:
         61:85:a8:6c:f1:0c:32:45:b4:d2:a2:28:56:03:cb:8d:b8:03:
         48:f0:00:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5iXoWUCZ33AOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1
M2ZiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDcxMWI0ODAtMmYzOS00MDBiLWE5MWUtZGI5Yjc0MTczYjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsuew2ZKxsumX1L/tgWcStIAY2GFHjPSm0bQ
ChMSJZiShhAd96WmagZYdrPrfY9AXypC9L+/vmlRERGYGKsV0BHqDZw0QEk3LN7G
0Nu8kQVejW+nko92M5D9lQyGYv4p9zxsnibpezqOlEUh+n4a6fE5yIVBof1Vzzks
J9ANY5IclqHNb7mIUSSVA4XqvW++pjvrx1EIAMpi3mB/IXaZPxg0HGMqAtyFHQLz
h8jmQpib1SOanggf9h61iHJAF8HeWW22gNHQRyIJcSeud/gV3DKNVn3Fu4S2fWpE
aIgUMGa6vPGzrY9zPgmMUBZF3d3a8CxbSqwW4DJHU1qJawxskQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAvpVUrqqvVjYOrtNpxV6/qvIVDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1
OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvOGUyYzg0MDktOWY4Ny0z
N2RiLTg3MTgtZDQ0MWEwOTAxMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjc5NTkxZWItZjhmZi00OGY1LTlh
YzYtZTFhZmEyM2U1M2ZiL2Y3OTU5MWViLWY4ZmYtNDhmNS05YWM2LWUxYWZhMjNl
NTNmYi5jcmwwHwYDVR0jBBgwFoAUC3rnSZ44dN+bLPVV81syl2w4I3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFm
YTIzZTUzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoXOrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEb4cgnIyb3nX/MxCo9E/9sndv2hyGN8KSg+Cd+xUJHtrnXsniaD2xKN
OlvHTPQwAcMwWird4tt6fn1thfDe7jJy6ngxdwvuSc6HAUnEVyuKPRn8zh7bSjji
RtjpS/uQSmkshCCGRzoCXKkHD5UGUlpAou9ONAUWdWNaa0QZ4dvTQhcMRS2bMFF6
bslYXl37Cgm+RS/+eoeqlRXkMr+LUNxHk0xEWhZ9Zs9hFKx3GAsAtnNH4ubiZyxg
RrutSvInAr4agOvhykCXhZ6wPdzt2vEO2RKhigsYBjwsfeCQ4MzJXukA7a/h46/Q
LWGFqGzxDDJFtNKiKFYDy424A0jwAPM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:56:41 2026 by rpki-client