Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/1e77a7df-079c-315b-b91c-e95ba269f1eb.roa
File:                     1e77a7df-079c-315b-b91c-e95ba269f1eb.roa (raw, json)
Hash identifier:          eUE5w8fV1WpPh23O2i8kybWJgREKsQLVIdBY/FZRj+o=
Subject key identifier:   43:33:04:10:DA:D0:53:72:CB:20:EA:C1:E5:02:A7:DE:C8:AC:60:E1
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584F498998B807DCDB98ED9E7A80
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/1e77a7df-079c-315b-b91c-e95ba269f1eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63201
IP address blocks:        161.199.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:98:b8:07:dc:db:98:ed:9e:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c14a73c-f2d5-4362-978a-8c65ee1c573e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:1d:c4:40:75:9a:94:65:a0:f4:83:fc:b2:
                    1c:09:92:ec:60:f5:5a:9d:ae:e5:25:4d:f3:d9:a0:
                    e1:17:a8:8a:3c:df:cf:83:e5:eb:23:42:50:2b:f2:
                    59:6f:a4:2a:48:f3:a7:1e:b8:fa:60:14:4b:32:24:
                    7c:4d:72:ad:21:25:99:c3:57:fc:18:05:a1:a3:94:
                    2e:e4:b7:3b:c6:ac:7a:7e:98:e0:60:66:2a:53:7e:
                    5e:7b:f3:43:77:d4:e1:f5:f9:54:85:8a:5e:f3:00:
                    3f:28:f9:c7:c0:db:fc:05:37:c6:fe:d7:d0:93:2f:
                    84:51:6e:78:a7:f9:e7:b6:df:01:f7:98:fe:6e:49:
                    e1:26:c3:00:e7:0d:85:f2:de:ed:74:79:0c:78:a9:
                    b2:0b:a1:3d:72:d4:0d:25:37:f5:70:a9:0d:8d:a0:
                    9b:a4:da:79:fb:d6:2c:60:50:dc:05:a7:46:c3:18:
                    c5:b9:1f:60:4f:ec:80:24:29:53:bc:c8:d8:25:27:
                    8a:6d:b6:af:88:58:9b:27:40:3e:71:e9:8f:99:04:
                    9c:d5:41:1d:a0:5a:8e:fe:f9:b2:df:06:99:3f:8b:
                    b1:a0:dd:ce:13:ed:5a:64:69:8a:b2:cc:3d:5c:bb:
                    5e:fa:7b:b9:5a:13:73:43:75:ae:9a:12:b6:fd:91:
                    4b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:33:04:10:DA:D0:53:72:CB:20:EA:C1:E5:02:A7:DE:C8:AC:60:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/1e77a7df-079c-315b-b91c-e95ba269f1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:de:f7:cb:f6:86:5b:51:1c:ba:b4:73:f5:9e:34:9c:83:1b:
         0c:58:0c:e9:50:31:01:16:57:d7:e1:a9:97:7c:43:ec:26:d2:
         1f:82:1e:e8:d9:ed:c5:e0:c0:52:66:b3:dc:73:02:ad:3f:b5:
         00:6f:50:2d:a6:52:30:a0:58:43:88:1f:d6:73:67:40:f1:91:
         77:ca:b9:a4:29:17:56:20:0c:7d:0a:9d:4a:fa:56:04:30:14:
         ef:5b:f1:2b:e2:58:15:4f:3a:54:61:69:b9:c5:38:b5:13:6d:
         7f:c7:42:ab:78:c4:51:f3:83:c7:e2:f2:89:3f:ad:66:08:10:
         6f:57:96:a1:b2:ea:ce:6e:07:44:62:8e:7e:97:37:8b:59:b2:
         48:db:09:1d:0c:ae:b6:2d:3c:52:69:d6:8d:a7:59:91:6d:1e:
         3f:5a:61:60:d1:02:61:a4:ba:b8:15:74:88:01:59:21:cf:f6:
         d5:c7:e0:a4:a6:39:d6:d4:aa:8a:8d:d0:04:8c:43:b7:88:05:
         3b:74:c2:80:e8:c0:42:92:cd:c4:6f:83:45:d1:3f:01:42:3e:
         43:73:8b:8d:2b:b0:23:10:3b:1d:dd:0e:f9:8e:6f:d7:d7:d8:
         29:55:d1:cb:f1:1d:5c:1a:20:15:42:aa:6f:35:de:06:52:9a:
         8f:ce:ca:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZi4B9zbmO2eeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez
ODYxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGMxNGE3M2MtZjJkNS00MzYyLTk3OGEtOGM2NWVlMWM1NzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIEdxEB1mpRloPSD/LIcCZLsYPVana7lJU3z
2aDhF6iKPN/Pg+XrI0JQK/JZb6QqSPOnHrj6YBRLMiR8TXKtISWZw1f8GAWho5Qu
5Lc7xqx6fpjgYGYqU35ee/NDd9Th9flUhYpe8wA/KPnHwNv8BTfG/tfQky+EUW54
p/nntt8B95j+bknhJsMA5w2F8t7tdHkMeKmyC6E9ctQNJTf1cKkNjaCbpNp5+9Ys
YFDcBadGwxjFuR9gT+yAJClTvMjYJSeKbbaviFibJ0A+cemPmQSc1UEdoFqO/vmy
3waZP4uxoN3OE+1aZGmKssw9XLte+nu5WhNzQ3WumhK2/ZFLBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMzBBDa0FNyyyDqweUCp97IrGDhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw
ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvMWU3N2E3ZGYtMDc5Yy0z
MTViLWI5MWMtZTk1YmEyNjlmMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk
NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh
Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz
YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoccTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXe98v2hltRHLq0c/WeNJyDGwxYDOlQMQEWV9fhqZd8Q+wm0h+CHujZ
7cXgwFJms9xzAq0/tQBvUC2mUjCgWEOIH9ZzZ0DxkXfKuaQpF1YgDH0KnUr6VgQw
FO9b8SviWBVPOlRhabnFOLUTbX/HQqt4xFHzg8fi8ok/rWYIEG9XlqGy6s5uB0Ri
jn6XN4tZskjbCR0MrrYtPFJp1o2nWZFtHj9aYWDRAmGkurgVdIgBWSHP9tXH4KSm
OdbUqoqN0ASMQ7eIBTt0woDowEKSzcRvg0XRPwFCPkNzi40rsCMQOx3dDvmOb9fX
2ClV0cvxHVwaIBVCqm813gZSmo/OyoA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:40:23 2026 by rpki-client