Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
File:                     7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa (raw, json)
Hash identifier:          LPwHacN2E1Rk87jnv39UqnfHyRCZ8cqbH15qKouk8Bs=
Subject key identifier:   C9:C9:C3:AF:5D:27:C5:A9:98:4A:B6:03:1C:32:FA:48:4D:06:00:2A
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584CBF1730831457E4F4C0113D00
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     399629
IP address blocks:        149.248.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:30:83:14:57:e4:f4:c0:11:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=cdf16f1f-aafa-49d9-a457-3693189670f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d1:21:90:ff:96:7f:69:c2:1c:46:8d:66:6a:
                    d9:df:17:69:3b:29:6e:f4:cd:7b:07:03:f0:fa:1f:
                    d4:b2:ed:03:19:37:8e:89:46:3a:d0:97:46:e8:ad:
                    ff:d3:89:73:0b:64:59:25:b0:9c:e5:87:14:50:e0:
                    a7:3c:cf:df:21:bb:3f:71:71:1b:89:c9:c3:8d:18:
                    52:a1:a8:30:b5:42:cb:bc:8d:f6:d1:d9:2b:b3:b5:
                    32:67:16:bf:c3:68:45:4d:e8:0b:3f:f6:99:4a:8d:
                    12:1d:2f:44:1f:7c:f8:b8:e5:11:ee:87:14:f8:dc:
                    c7:73:99:ca:72:66:04:53:80:b6:ef:28:2b:89:f0:
                    64:5c:62:18:10:9d:c3:5a:95:12:5a:91:d5:76:58:
                    27:f0:13:14:f8:b3:a8:7b:4c:3f:b2:eb:04:74:cf:
                    a5:d6:43:8c:9f:e6:b3:ea:79:65:af:07:7a:7b:b4:
                    2f:e7:69:30:f8:50:5c:7c:d6:3a:e8:aa:ab:fb:f0:
                    47:be:16:85:d7:1e:f6:b0:34:6b:33:13:ec:6b:45:
                    a9:7b:be:83:76:d7:a5:af:9b:da:03:df:79:7e:70:
                    1c:05:30:0d:57:ad:10:a7:a7:b7:ab:6f:08:32:2f:
                    ad:ff:a5:de:d9:8d:5e:b3:83:e2:bc:a4:d1:45:3d:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C9:C3:AF:5D:27:C5:A9:98:4A:B6:03:1C:32:FA:48:4D:06:00:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:57:5d:2b:6b:a1:9f:7c:e6:35:81:00:d9:d3:86:48:b3:17:
         78:45:c9:ce:00:08:c3:0b:ea:73:8d:ac:6d:87:74:05:7c:c8:
         45:05:02:25:69:58:ba:65:ee:c1:8e:ff:29:a2:9d:ad:cc:2d:
         b2:07:28:9a:31:ff:17:b5:5d:32:18:74:e0:b9:45:a2:1d:03:
         ed:69:2d:27:04:c5:c5:a2:2f:ed:f7:37:cf:54:c9:20:c2:4e:
         30:3e:2e:cc:4e:72:e4:cd:9f:9d:70:0a:d3:ff:a4:ac:7a:92:
         a8:a0:cb:fc:a5:5e:5f:cc:d9:8e:5e:dc:d2:3c:a6:5d:2d:5f:
         8c:93:49:a7:7c:b8:79:13:ec:20:ed:9c:f5:ac:69:92:3a:71:
         b0:05:42:36:cb:ff:81:9b:09:26:ed:ab:d7:8b:71:51:5d:7f:
         7d:56:a0:78:2a:90:c8:b7:d8:0e:8b:ed:be:45:12:4c:a6:73:
         b9:5d:3e:0f:fe:7e:59:e4:ad:ee:89:ad:7b:47:5e:28:54:9c:
         ea:fb:d1:df:54:83:d2:a4:92:cc:12:69:9b:c8:38:f7:6e:b4:
         db:a9:42:5d:e1:7b:a3:c9:80:81:e2:ea:51:26:2b:40:35:72:
         35:26:f4:9c:53:9e:cf:db:bc:b1:f6:64:f8:d2:f5:a4:cd:06:
         c4:85:e3:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/FzCDFFfk9MARPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
Y2RmMTZmMWYtYWFmYS00OWQ5LWE0NTctMzY5MzE4OTY3MGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NEhkP+Wf2nCHEaNZmrZ3xdpOylu9M17BwPw
+h/Usu0DGTeOiUY60JdG6K3/04lzC2RZJbCc5YcUUOCnPM/fIbs/cXEbicnDjRhS
oagwtULLvI320dkrs7UyZxa/w2hFTegLP/aZSo0SHS9EH3z4uOUR7ocU+NzHc5nK
cmYEU4C27ygrifBkXGIYEJ3DWpUSWpHVdlgn8BMU+LOoe0w/susEdM+l1kOMn+az
6nllrwd6e7Qv52kw+FBcfNY66Kqr+/BHvhaF1x72sDRrMxPsa0Wpe76Ddtelr5va
A995fnAcBTANV60Qp6e3q28IMi+t/6Xe2Y1es4PivKTRRT1A0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnJw69dJ8WpmEq2Axwy+khNBgAqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvN2RmYjU5ZjgtYWI0NS0z
MDk0LTg5MzgtYTU0MzNiY2RjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVXXStroZ985jWBANnThkizF3hFyc4ACMML6nONrG2HdAV8yEUFAiVp
WLpl7sGO/ymina3MLbIHKJox/xe1XTIYdOC5RaIdA+1pLScExcWiL+33N89UySDC
TjA+LsxOcuTNn51wCtP/pKx6kqigy/ylXl/M2Y5e3NI8pl0tX4yTSad8uHkT7CDt
nPWsaZI6cbAFQjbL/4GbCSbtq9eLcVFdf31WoHgqkMi32A6L7b5FEkymc7ldPg/+
flnkre6JrXtHXihUnOr70d9Ug9KkkswSaZvIOPdutNupQl3he6PJgIHi6lEmK0A1
cjUm9JxTns/bvLH2ZPjS9aTNBsSF43o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:15 2026 by rpki-client