Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fba1d9a3-6280-3112-a073-052ae676ccbd.roa
File:                     fba1d9a3-6280-3112-a073-052ae676ccbd.roa (raw, json)
Hash identifier:          1FZUbSqmxhkIgsQMKkRzcWaht95qc7GhL5mfoMNCTS4=
Subject key identifier:   E0:BF:20:20:98:B5:FB:E7:B5:9F:69:2B:35:2D:DD:5D:C9:AA:91:E2
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584EA78F377E48CB8DD4FB5F85A0
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fba1d9a3-6280-3112-a073-052ae676ccbd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33164
IP address blocks:        199.47.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:37:7e:48:cb:8d:d4:fb:5f:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a24200f7-3f82-4993-9375-955a6d29a95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:57:9c:eb:9f:c9:a4:f9:b0:64:7b:a7:1b:
                    d4:c5:62:9d:e9:09:cb:9a:54:4a:66:b0:d1:6a:c2:
                    0a:e1:52:92:60:16:40:6f:5a:19:0d:e6:29:95:0d:
                    d6:28:d7:13:d0:bf:23:32:9a:dc:e8:a5:49:56:65:
                    d6:04:7a:f4:36:26:96:10:1e:a4:3c:aa:0e:92:d1:
                    a2:ec:b0:ec:05:1d:23:3d:88:b2:ab:65:f4:3d:3f:
                    2e:5e:62:a1:5f:f0:12:54:f1:46:f5:2d:64:42:4a:
                    fc:33:bb:bb:a7:60:46:ad:7c:66:4d:32:95:9c:ae:
                    c3:62:e5:38:8c:4f:f9:6c:b4:c4:c5:cb:d5:44:d7:
                    8a:3b:7d:41:6a:ed:cf:b1:9d:28:f9:5d:52:29:0c:
                    e9:34:90:98:b6:5f:11:5b:dd:d2:81:62:83:09:c8:
                    38:ed:c4:d9:91:82:82:46:cd:03:7e:d7:1a:88:62:
                    b0:48:81:9c:2e:c8:cf:0b:5f:7b:60:99:f9:62:13:
                    82:e8:de:1a:1f:68:19:12:35:57:f5:61:f8:a6:65:
                    af:bb:bc:46:a0:dc:91:b3:5c:c9:14:df:0f:0b:fe:
                    d6:c0:a6:1f:87:eb:44:b3:4a:8d:3b:ce:0e:b6:00:
                    f1:16:c9:8c:bc:b0:0b:97:5d:32:44:51:1b:b8:c9:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:20:20:98:B5:FB:E7:B5:9F:69:2B:35:2D:DD:5D:C9:AA:91:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fba1d9a3-6280-3112-a073-052ae676ccbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:73:c6:47:c2:a9:c6:fe:35:95:52:4c:df:50:cc:98:91:f3:
         a2:1d:63:2a:36:47:54:b1:7e:a3:45:77:af:11:36:48:80:70:
         e7:fc:10:54:1a:7e:f7:06:b2:d7:a4:de:a0:cb:53:20:49:bb:
         8a:6b:df:0b:fe:c0:df:78:96:4b:34:93:5f:a1:43:9a:2f:6b:
         16:fc:38:d0:29:e0:67:e4:43:12:0b:d1:42:d7:fc:3f:0c:f5:
         3f:48:e1:75:67:2e:20:39:0c:92:e5:61:14:ce:23:92:f7:ba:
         2d:2d:dd:d2:42:cc:04:ed:ba:4d:71:0c:f9:59:20:59:16:9b:
         dd:0f:84:03:63:b9:f5:b1:aa:c1:dc:55:a9:9f:43:a2:1f:60:
         06:5b:32:99:34:7c:2c:9b:54:e4:f4:63:a4:da:ff:3f:28:ed:
         dc:3b:7c:b8:0e:a2:80:f7:f2:d3:19:38:a3:92:86:e6:aa:32:
         42:07:65:bf:d7:49:72:3f:27:66:ea:2d:a1:16:f4:a1:68:03:
         9b:b4:d9:5f:63:0c:ed:05:46:87:42:7a:60:e6:0f:b4:d7:b0:
         88:5c:55:4f:12:a5:87:3a:24:ac:f5:a2:17:9a:c1:a7:fb:9d:
         58:85:54:3f:85:4e:d1:b5:50:10:73:c4:04:a0:89:3c:25:84:
         6f:b2:97:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njzd+SMuN1PtfhaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0
ZDUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTI0MjAwZjctM2Y4Mi00OTkzLTkzNzUtOTU1YTZkMjlhOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyBXnOufyaT5sGR7pxvUxWKd6QnLmlRKZrDR
asIK4VKSYBZAb1oZDeYplQ3WKNcT0L8jMprc6KVJVmXWBHr0NiaWEB6kPKoOktGi
7LDsBR0jPYiyq2X0PT8uXmKhX/ASVPFG9S1kQkr8M7u7p2BGrXxmTTKVnK7DYuU4
jE/5bLTExcvVRNeKO31Bau3PsZ0o+V1SKQzpNJCYtl8RW93SgWKDCcg47cTZkYKC
Rs0DftcaiGKwSIGcLsjPC197YJn5YhOC6N4aH2gZEjVX9WH4pmWvu7xGoNyRs1zJ
FN8PC/7WwKYfh+tEs0qNO84OtgDxFsmMvLALl10yRFEbuMnZNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOC/ICCYtfvntZ9pKzUt3V3JqpHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl
Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvZmJhMWQ5YTMtNjI4MC0z
MTEyLWEwNzMtMDUyYWU2NzZjY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1
MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh
NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi
OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlzxkfCqcb+NZVSTN9QzJiR86IdYyo2R1SxfqNFd68RNkiAcOf8EFQa
fvcGstek3qDLUyBJu4pr3wv+wN94lks0k1+hQ5ovaxb8ONAp4GfkQxIL0ULX/D8M
9T9I4XVnLiA5DJLlYRTOI5L3ui0t3dJCzATtuk1xDPlZIFkWm90PhANjufWxqsHc
VamfQ6IfYAZbMpk0fCybVOT0Y6Ta/z8o7dw7fLgOooD38tMZOKOShuaqMkIHZb/X
SXI/J2bqLaEW9KFoA5u02V9jDO0FRodCemDmD7TXsIhcVU8SpYc6JKz1oheawaf7
nViFVD+FTtG1UBBzxASgiTwlhG+yl9c=
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:30:46 2026 by rpki-client