Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/fa21b756-59d3-367f-9196-aacc4d9cfe7b.roa
File:                     fa21b756-59d3-367f-9196-aacc4d9cfe7b.roa (raw, json)
Hash identifier:          SJdtoRDYp7YlW1edrvah7O9B1cI5us3Z6H378IHaf7Q=
Subject key identifier:   E3:19:DC:33:E9:54:03:18:88:8D:A4:45:00:C6:09:4A:1F:12:57:2B
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584EA79625A8B1BD81ADF7A4D8C0
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/fa21b756-59d3-367f-9196-aacc4d9cfe7b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14450
IP address blocks:        162.217.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:25:a8:b1:bd:81:ad:f7:a4:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48669e1d-4da7-4932-abba-9aa4335afefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:41:21:22:55:88:b1:47:e1:6d:56:06:fa:
                    ba:fb:d1:dc:f8:8f:2d:15:9d:e7:d3:9e:d6:0d:e7:
                    83:f2:14:89:80:54:72:14:d6:e2:30:42:b2:2c:8d:
                    55:b5:32:03:34:fa:1e:b4:ab:88:04:77:cc:2f:88:
                    f2:82:2c:e4:e3:2e:bd:22:30:8c:bb:91:3f:6a:25:
                    6b:46:1d:7b:8d:5f:25:c1:02:16:3f:ae:c0:81:c5:
                    6c:b3:d4:82:a9:f3:63:7f:93:d0:b2:ca:da:41:59:
                    e6:dc:0b:71:5d:f3:94:0d:d1:2d:71:aa:05:fe:a2:
                    da:86:8f:08:1f:32:85:fc:c5:63:b6:25:68:ef:7b:
                    62:78:31:76:52:d1:10:fc:b6:92:6e:5d:6a:e3:9b:
                    b3:ae:3e:49:96:4e:11:54:01:95:81:8b:0c:f4:46:
                    63:56:e8:15:6c:36:09:c7:39:c7:14:de:75:72:15:
                    3e:39:d1:21:2f:55:0a:dc:04:6c:41:13:c5:05:d1:
                    77:8f:f5:c0:b6:b9:46:6c:29:7b:fb:8a:2f:32:ff:
                    49:5d:09:cc:02:9d:5b:53:fa:c0:63:a9:e6:04:0a:
                    ff:3c:d9:d5:a5:30:5c:1e:60:c1:00:0c:27:53:14:
                    42:27:ab:22:22:ad:3b:49:28:75:fa:9a:81:e5:d2:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:19:DC:33:E9:54:03:18:88:8D:A4:45:00:C6:09:4A:1F:12:57:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/fa21b756-59d3-367f-9196-aacc4d9cfe7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:fb:0e:62:e6:9f:aa:1c:76:d2:5c:7a:47:6c:e7:f8:cc:
         b6:0e:cf:8f:3e:c3:56:0f:51:94:0c:7c:43:d6:af:fa:0d:87:
         75:38:0e:9c:97:62:ee:fa:e5:25:9d:09:10:5a:34:e3:9f:8c:
         32:00:e7:f8:c5:07:10:e2:2a:8a:c4:82:23:08:1d:b7:d1:7e:
         c4:1c:de:64:0b:ec:34:d3:ae:f5:56:63:55:94:5d:47:33:83:
         dc:86:71:e5:99:92:87:1d:d5:22:61:db:01:cd:db:ea:02:79:
         c3:ac:8b:e7:59:80:7a:12:63:66:f1:73:38:eb:9e:91:4b:1f:
         83:3a:6d:c1:c3:9a:df:90:c9:78:90:96:39:40:c5:9c:1d:4d:
         fe:43:eb:41:70:4e:cc:f2:9d:67:7a:49:79:0f:82:37:63:d8:
         98:fc:3c:18:df:2a:4c:8e:41:70:e7:aa:27:e3:d3:50:7d:46:
         47:7a:68:67:02:a7:d1:c0:c2:ee:14:44:c6:73:be:12:7c:6a:
         24:83:dd:38:1e:d3:52:b8:bc:c6:98:8e:64:b6:57:cb:7f:a6:
         ce:c1:7e:ca:1c:c7:ca:fc:42:d0:ed:9e:6d:1c:de:ca:24:50:
         e2:ca:c3:de:74:5b:6d:1e:af:be:41:71:ad:59:bc:b6:9e:33:
         eb:92:7c:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nliWosb2Brfek2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdlMjEwYTEtN2I4YS00MjU2LWE0ZDItYzAxMjM0MDk1
YzY4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDg2NjllMWQtNGRhNy00OTMyLWFiYmEtOWFhNDMzNWFmZWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXBBISJViLFH4W1WBvq6+9Hc+I8tFZ3n057W
DeeD8hSJgFRyFNbiMEKyLI1VtTIDNPoetKuIBHfML4jygizk4y69IjCMu5E/aiVr
Rh17jV8lwQIWP67AgcVss9SCqfNjf5PQssraQVnm3AtxXfOUDdEtcaoF/qLaho8I
HzKF/MVjtiVo73tieDF2UtEQ/LaSbl1q45uzrj5Jlk4RVAGVgYsM9EZjVugVbDYJ
xznHFN51chU+OdEhL1UK3ARsQRPFBdF3j/XAtrlGbCl7+4ovMv9JXQnMAp1bU/rA
Y6nmBAr/PNnVpTBcHmDBAAwnUxRCJ6siIq07SSh1+pqB5dJ63QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMZ3DPpVAMYiI2kRQDGCUofElcrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Uy
MTBhMS03YjhhLTQyNTYtYTRkMi1jMDEyMzQwOTVjNjgvZmEyMWI3NTYtNTlkMy0z
NjdmLTkxOTYtYWFjYzRkOWNmZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdlMjEwYTEtN2I4YS00MjU2LWE0
ZDItYzAxMjM0MDk1YzY4L2Y3ZTIxMGExLTdiOGEtNDI1Ni1hNGQyLWMwMTIzNDA5
NWM2OC5jcmwwHwYDVR0jBBgwFoAUcGSmUQSRXVwaiHDXb2xULSerY3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2UyMTBhMS03YjhhLTQyNTYtYTRkMi1jMDEy
MzQwOTVjNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotknMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+z+w5i5p+qHHbSXHpHbOf4zLYOz48+w1YPUZQMfEPWr/oNh3U4DpyX
Yu765SWdCRBaNOOfjDIA5/jFBxDiKorEgiMIHbfRfsQc3mQL7DTTrvVWY1WUXUcz
g9yGceWZkocd1SJh2wHN2+oCecOsi+dZgHoSY2bxczjrnpFLH4M6bcHDmt+QyXiQ
ljlAxZwdTf5D60FwTszynWd6SXkPgjdj2Jj8PBjfKkyOQXDnqifj01B9Rkd6aGcC
p9HAwu4URMZzvhJ8aiSD3Tge01K4vMaYjmS2V8t/ps7Bfsocx8r8QtDtnm0c3sok
UOLKw950W20er75Bca1ZvLaeM+uSfDM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:57 2026 by rpki-client