Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/805fd842-3e11-3ade-80b4-0847c7bd7ab5.roa
File:                     805fd842-3e11-3ade-80b4-0847c7bd7ab5.roa (raw, json)
Hash identifier:          MoICkOg9eGG4n/AzoG87Tp64BVX1k0V74LNX5Chm0ic=
Subject key identifier:   6F:7F:45:B1:81:4C:07:D4:65:4C:98:36:26:F8:E4:88:F5:31:7E:22
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F093D0F23C1ED53D018359D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/805fd842-3e11-3ade-80b4-0847c7bd7ab5.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        131.186.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0f:23:c1:ed:53:d0:18:35:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=04f679ae-a4f4-4c6b-b905-d21d29675b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:96:86:86:3d:88:bc:f3:f1:6f:38:d7:89:
                    7a:6a:82:50:7c:02:7b:81:53:f8:08:56:e2:33:f4:
                    ff:2e:89:8c:54:49:a8:b5:f5:b1:eb:82:77:45:b6:
                    fe:91:30:4a:78:dc:9c:df:e6:42:95:ac:d1:7a:a5:
                    f6:ad:3c:25:a1:a7:4c:ff:1e:7e:57:01:83:f6:d4:
                    2b:6e:6b:05:db:8a:cc:ce:ff:91:a4:60:71:90:8b:
                    d8:91:ef:33:52:82:8e:1b:8b:f1:51:e3:31:47:45:
                    99:39:19:38:5a:94:c4:35:ba:60:1f:9c:34:ce:d0:
                    af:71:39:ab:24:cf:0f:0c:3b:a7:fb:18:24:ff:4f:
                    63:d0:13:4c:4e:db:3e:28:dc:86:d3:77:e3:06:5a:
                    17:5a:37:22:c6:e4:48:b3:7a:bf:eb:f7:e3:b4:d4:
                    cc:b6:56:e0:48:e6:5f:b6:d3:ce:ce:8a:21:82:ca:
                    8d:b4:b5:03:be:12:67:ee:07:57:31:a4:a9:23:bc:
                    db:c2:dd:22:c2:9f:a2:c7:95:14:88:00:bc:cb:59:
                    14:39:ac:56:d6:84:94:c8:bc:f2:d0:d5:dd:e4:d8:
                    c1:46:f6:ec:7e:93:9f:b7:d5:17:34:2e:0f:15:26:
                    5f:15:3c:42:a8:f7:66:b4:0b:49:d0:81:c0:97:50:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:45:B1:81:4C:07:D4:65:4C:98:36:26:F8:E4:88:F5:31:7E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/805fd842-3e11-3ade-80b4-0847c7bd7ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.186.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:7f:58:59:f9:3b:0b:0f:3f:11:46:96:b9:06:95:23:1f:
         c5:4e:af:9c:2e:8a:ea:a7:4d:3a:c8:fc:53:22:d9:58:b6:19:
         40:b9:af:b6:36:e9:0c:57:8a:39:be:cb:43:f0:44:98:b9:d7:
         3c:fc:8f:26:b8:26:f3:09:cc:7d:02:ea:33:d8:87:02:0a:f2:
         bc:89:f8:47:19:da:07:1d:49:a2:98:83:de:57:13:be:e5:71:
         54:f6:90:32:38:a0:ee:83:0b:2c:48:34:c0:0a:37:6f:21:61:
         97:bc:27:c0:af:54:62:7e:73:97:45:73:f2:22:f7:47:36:e6:
         47:e9:65:f6:b8:e4:cd:51:03:5a:3c:35:9d:25:38:95:aa:c5:
         cf:a3:cb:00:95:55:1b:b6:e9:5f:fb:df:76:64:42:df:8b:3a:
         6a:ea:83:4e:2c:46:75:cc:cb:9e:4e:c0:5d:72:e8:6e:10:fd:
         1a:5a:79:bb:b6:fe:e3:a4:74:b5:d6:8a:bf:00:53:1a:a4:e7:
         4d:d1:b0:bb:9f:b4:67:ab:50:7b:de:e3:ea:c0:2a:20:fb:a7:
         11:9d:04:c4:33:74:94:ad:4e:69:55:95:aa:84:53:6d:f4:77:
         8a:61:af:f1:9e:8a:19:99:71:83:e8:8d:d5:48:ed:b9:a6:27:
         1c:16:68:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQ8jwe1T0Bg1nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
MDRmNjc5YWUtYTRmNC00YzZiLWI5MDUtZDIxZDI5Njc1YjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxiWhoY9iLzz8W8414l6aoJQfAJ7gVP4CFbi
M/T/LomMVEmotfWx64J3Rbb+kTBKeNyc3+ZClazReqX2rTwloadM/x5+VwGD9tQr
bmsF24rMzv+RpGBxkIvYke8zUoKOG4vxUeMxR0WZORk4WpTENbpgH5w0ztCvcTmr
JM8PDDun+xgk/09j0BNMTts+KNyG03fjBloXWjcixuRIs3q/6/fjtNTMtlbgSOZf
ttPOzoohgsqNtLUDvhJn7gdXMaSpI7zbwt0iwp+ix5UUiAC8y1kUOaxW1oSUyLzy
0NXd5NjBRvbsfpOft9UXNC4PFSZfFTxCqPdmtAtJ0IHAl1C7KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9/RbGBTAfUZUyYNib45Ij1MX4iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODA1ZmQ4NDItM2UxMS0z
YWRlLTgwYjQtMDg0N2M3YmQ3YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg7ogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC27f1hZ+TsLDz8RRpa5BpUjH8VOr5wuiuqnTTrI/FMi2Vi2GUC5r7Y2
6QxXijm+y0PwRJi51zz8jya4JvMJzH0C6jPYhwIK8ryJ+EcZ2gcdSaKYg95XE77l
cVT2kDI4oO6DCyxINMAKN28hYZe8J8CvVGJ+c5dFc/Ii90c25kfpZfa45M1RA1o8
NZ0lOJWqxc+jywCVVRu26V/733ZkQt+LOmrqg04sRnXMy55OwF1y6G4Q/Rpaebu2
/uOkdLXWir8AUxqk503RsLuftGerUHve4+rAKiD7pxGdBMQzdJStTmlVlaqEU230
d4phr/GeihmZcYPojdVI7bmmJxwWaBI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:21:02 2026 by rpki-client