Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa
File:                     a1938fc5-2350-385d-a647-f833e035e7be.roa (raw, json)
Hash identifier:          nfasYB+UABL89xrWnzT7f1VPZYgKTqHzS0FYBRecvfk=
Subject key identifier:   92:1A:E8:AA:39:AE:BE:E2:40:F5:0A:98:99:CD:D6:01:D1:5D:57:F4
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F4328584EA79420AFF4440C21497A3E00
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40102
IP address blocks:        160.253.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:20:af:f4:44:0c:21:49:7a:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99c2fa19-903a-4fb3-a113-85da183640cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:5a:cc:b1:e4:09:28:e7:da:9f:e6:63:bd:
                    f6:a2:37:b8:42:23:d6:c2:6a:82:f3:eb:8e:c6:a7:
                    c1:6f:6d:5f:19:e6:e5:12:0a:41:4f:d4:0d:85:30:
                    85:cb:4b:d5:5c:3e:39:59:3f:ba:a0:40:41:59:6f:
                    2e:6d:5b:ba:30:60:b1:50:bc:14:5a:97:f3:f1:b5:
                    13:aa:97:ae:1a:91:b6:8a:6a:74:02:89:8d:56:22:
                    b1:27:6d:8a:41:0d:7d:bc:88:e8:ef:c8:e8:f1:46:
                    53:ec:15:9e:2e:97:bc:1e:c1:e9:b7:f9:3f:65:4b:
                    85:8c:f5:19:06:f1:7c:0d:d2:67:18:28:37:5c:84:
                    d5:85:83:72:f0:16:6b:2b:db:cf:ac:ca:7f:84:d8:
                    2a:20:87:13:be:96:35:fd:88:71:c4:82:3e:d9:57:
                    79:40:f5:8f:59:ec:7f:4c:4f:34:86:8f:66:06:14:
                    ec:64:b9:c4:95:78:ec:0b:44:b5:fc:58:13:d5:ac:
                    31:16:c0:2c:6e:25:5e:db:cb:fd:93:c0:78:4a:5c:
                    cc:d4:b3:12:23:24:68:71:68:b4:4c:a6:f9:77:cd:
                    30:36:7d:7a:f8:cb:f5:81:c0:f5:47:28:ba:64:6d:
                    f1:8d:c5:b3:e5:48:e1:64:14:3a:6c:21:3f:a0:eb:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:E8:AA:39:AE:BE:E2:40:F5:0A:98:99:CD:D6:01:D1:5D:57:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:34:de:95:30:be:92:3b:74:57:99:e8:e2:ab:9c:e1:d4:
         d5:cf:c0:f2:47:3b:15:20:a6:d0:07:eb:d0:a4:8b:37:87:e7:
         73:9f:c1:ef:91:65:9f:06:2c:94:e4:08:80:8b:62:a8:e7:32:
         ac:fa:c6:46:61:4b:fe:da:03:36:4d:d4:a5:b0:60:87:47:d3:
         ec:86:bf:4d:e4:c6:e6:5b:9d:f5:be:3e:23:e0:3f:51:33:dc:
         bb:f9:ec:9e:45:79:da:fc:17:dc:e2:6b:41:b9:64:20:30:27:
         70:5c:70:58:79:00:d2:c7:ff:72:0d:12:cc:5c:0a:8d:0b:95:
         2b:03:ac:8c:81:29:f4:b2:f4:1f:2c:32:fc:b2:d5:c2:d6:26:
         f9:13:74:97:9f:08:2b:f0:48:f5:6f:9f:b0:57:70:87:03:de:
         e9:db:f6:00:e5:13:6f:7b:38:d1:90:6b:84:9d:e4:54:6c:9a:
         f6:bd:ee:29:1d:64:58:77:a9:3c:ad:44:41:46:91:e2:c8:91:
         a7:34:0d:17:21:c6:20:67:e5:20:e7:c4:0a:c2:63:96:e3:e1:
         09:39:37:bf:6a:c1:13:e7:73:26:e6:a9:f4:73:b8:da:46:e4:
         04:5b:9b:fa:dd:d4:13:23:49:e7:1b:f4:4c:22:eb:e4:b5:37:
         79:a7:cc:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCCv9EQMIUl6PgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliYzkwNGUtYzMxNi00ZTg0LTkyZmItMjMzOTQ1NzM2
MWIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTljMmZhMTktOTAzYS00ZmIzLWExMTMtODVkYTE4MzY0MGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+lazLHkCSjn2p/mY732oje4QiPWwmqC8+uO
xqfBb21fGeblEgpBT9QNhTCFy0vVXD45WT+6oEBBWW8ubVu6MGCxULwUWpfz8bUT
qpeuGpG2imp0AomNViKxJ22KQQ19vIjo78jo8UZT7BWeLpe8HsHpt/k/ZUuFjPUZ
BvF8DdJnGCg3XITVhYNy8BZrK9vPrMp/hNgqIIcTvpY1/YhxxII+2Vd5QPWPWex/
TE80ho9mBhTsZLnElXjsC0S1/FgT1awxFsAsbiVe28v9k8B4SlzM1LMSIyRocWi0
TKb5d80wNn16+Mv1gcD1Ryi6ZG3xjcWz5UjhZBQ6bCE/oOsOJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIa6Ko5rr7iQPUKmJnN1gHRXVf0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJj
OTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5NDU3MzYxYjIvYTE5MzhmYzUtMjM1MC0z
ODVkLWE2NDctZjgzM2UwMzVlN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzliYzkwNGUtYzMxNi00ZTg0LTky
ZmItMjMzOTQ1NzM2MWIyLzM5YmM5MDRlLWMzMTYtNGU4NC05MmZiLTIzMzk0NTcz
NjFiMi5jcmwwHwYDVR0jBBgwFoAUbfN0ZIQ+Wp5nQIOp6FOkMjiucYMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJjOTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5
NDU3MzYxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoP0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7JNN6VML6SO3RXmejiq5zh1NXPwPJHOxUgptAH69CkizeH53Ofwe+R
ZZ8GLJTkCICLYqjnMqz6xkZhS/7aAzZN1KWwYIdH0+yGv03kxuZbnfW+PiPgP1Ez
3Lv57J5Fedr8F9zia0G5ZCAwJ3BccFh5ANLH/3INEsxcCo0LlSsDrIyBKfSy9B8s
Mvyy1cLWJvkTdJefCCvwSPVvn7BXcIcD3unb9gDlE297ONGQa4Sd5FRsmva97ikd
ZFh3qTytREFGkeLIkac0DRchxiBn5SDnxArCY5bj4Qk5N79qwRPncybmqfRzuNpG
5ARbm/rd1BMjSecb9Ewi6+S1N3mnzNg=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:35:01 2026 by rpki-client