Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
File:                     383db263-dfa3-378b-9465-6691c04a9ccd.roa (raw, json)
Hash identifier:          hYd2my6MVPaFYfcKt4w0DHzMuX89tjF9ZDZvxOmAr+k=
Subject key identifier:   BA:98:76:72:FB:89:60:23:27:5F:A0:AE:CF:67:84:A0:6F:AB:DD:4E
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584F19FCF64F60789AD7F355AB00
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        159.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f6:4f:60:78:9a:d7:f3:55:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=4b8d2b6a-15d9-4269-b952-57fc78d3c140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fb:6f:02:11:d8:e5:41:06:a3:99:f9:d2:e3:
                    a7:9b:14:32:da:b1:f6:a2:5d:12:a8:8b:53:f3:8f:
                    59:38:36:df:ea:ef:05:8e:19:9d:c8:fe:f4:d2:f0:
                    1b:f8:42:88:8d:ba:c5:0e:e7:48:83:d8:d1:be:a7:
                    de:b7:82:40:8f:a1:e1:8c:03:b1:9e:c2:5d:c0:a8:
                    af:9d:a9:d7:40:bd:39:50:58:97:e5:63:ef:76:3a:
                    a5:47:66:6a:c7:d8:04:f4:0f:2f:09:08:08:17:49:
                    1b:49:9e:35:a9:5c:6c:4c:db:fa:47:76:62:f9:75:
                    46:9f:95:47:b1:b6:cf:e6:bf:4d:75:1e:8c:33:b2:
                    b4:fd:ad:ca:f3:b6:fb:37:3d:e8:53:7e:03:7e:a8:
                    ba:e0:e6:20:c0:bc:25:e0:3f:1f:4e:31:43:73:6f:
                    4e:cd:d3:5a:ed:8c:4b:43:a0:b7:03:0a:b5:21:cd:
                    d7:67:0b:e7:6f:02:80:2e:20:8c:8b:19:b1:c0:48:
                    a8:0b:e0:5e:cc:d7:f3:23:c3:e1:c4:86:12:a5:ed:
                    53:b9:90:34:42:25:5c:aa:1b:7a:e9:ae:c5:54:58:
                    55:dd:d9:4d:b4:fc:1e:f5:be:f0:cf:9f:3d:37:4e:
                    e2:7c:36:1f:7f:24:6c:97:46:77:97:ef:d5:78:ee:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:98:76:72:FB:89:60:23:27:5F:A0:AE:CF:67:84:A0:6F:AB:DD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:88:52:2e:e8:7b:90:52:d4:f2:93:bc:98:b1:ed:c1:f5:04:
         c3:20:d9:81:f2:d6:df:78:8f:7c:56:7f:e4:a1:56:b3:d1:1f:
         41:2f:92:73:22:1d:b9:4a:f0:f7:ca:08:b7:c8:5d:1e:9b:fa:
         64:c8:41:5c:d1:44:f0:2e:a0:11:ca:99:cb:5d:6c:2f:1c:7a:
         38:54:df:92:33:50:56:49:04:d2:d9:f6:7c:6e:ae:f3:39:c2:
         c2:3e:18:ac:44:a6:16:bc:f2:75:fc:e5:af:53:f8:7c:98:09:
         84:ad:b3:77:ec:f9:12:ad:19:e5:c3:3c:e6:5c:27:95:d7:44:
         76:68:10:c2:24:ea:f1:1b:92:d1:6b:73:8c:dd:6f:8f:c3:24:
         c8:39:87:2a:0b:72:e0:f5:d3:3f:e2:15:9d:03:c5:ee:47:45:
         f2:e5:0f:e5:af:55:57:91:8c:e0:90:8b:75:b9:41:2a:aa:a4:
         a5:af:30:08:41:71:62:5e:0b:f2:ff:9f:d2:90:21:cd:16:01:
         3b:ce:13:21:8d:b4:0f:52:61:00:9c:e6:0b:02:7e:4e:14:3a:
         34:cc:26:aa:2b:4c:47:30:5a:fb:4d:31:f3:f6:29:b8:b4:24:
         a2:30:b8:5f:8e:6a:c1:4e:f9:58:58:49:78:a4:90:ec:9e:fa:
         a2:b1:49:0c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8Z/PZPYHia1/NVqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
NGI4ZDJiNmEtMTVkOS00MjY5LWI5NTItNTdmYzc4ZDNjMTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPtvAhHY5UEGo5n50uOnmxQy2rH2ol0SqItT
849ZODbf6u8FjhmdyP700vAb+EKIjbrFDudIg9jRvqfet4JAj6HhjAOxnsJdwKiv
nanXQL05UFiX5WPvdjqlR2Zqx9gE9A8vCQgIF0kbSZ41qVxsTNv6R3Zi+XVGn5VH
sbbP5r9NdR6MM7K0/a3K87b7Nz3oU34Dfqi64OYgwLwl4D8fTjFDc29OzdNa7YxL
Q6C3Awq1Ic3XZwvnbwKALiCMixmxwEioC+BezNfzI8PhxIYSpe1TuZA0QiVcqht6
6a7FVFhV3dlNtPwe9b7wz589N07ifDYffyRsl0Z3l+/VeO44ZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLqYdnL7iWAjJ1+grs9nhKBvq91OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMzgzZGIyNjMtZGZhMy0z
NzhiLTk0NjUtNjY5MWMwNGE5Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnykwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEohSLuh7kFLU8pO8mLHtwfUEwyDZgfLW33iPfFZ/5KFWs9EfQS+ScyId
uUrw98oIt8hdHpv6ZMhBXNFE8C6gEcqZy11sLxx6OFTfkjNQVkkE0tn2fG6u8znC
wj4YrESmFrzydfzlr1P4fJgJhK2zd+z5Eq0Z5cM85lwnlddEdmgQwiTq8RuS0Wtz
jN1vj8MkyDmHKgty4PXTP+IVnQPF7kdF8uUP5a9VV5GM4JCLdblBKqqkpa8wCEFx
Yl4L8v+f0pAhzRYBO84TIY20D1JhAJzmCwJ+ThQ6NMwmqitMRzBa+00x8/YpuLQk
ojC4X45qwU75WFhJeKSQ7J76orFJDA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:34 2026 by rpki-client