Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
File:                     59c44230-ec55-3638-8a91-87a24d084422.roa (raw, json)
Hash identifier:          Fzyu7iiOsQyjXo6ALZzQHrzwa9QnNOEHMA6s/VHZTTg=
Subject key identifier:   93:F0:85:84:51:F7:69:12:82:02:26:FC:C2:28:EE:80:FB:10:35:5B
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584CA5F71740F99D103C582B1EC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        20.137.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:17:40:f9:9d:10:3c:58:2b:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=06eb3270-b34d-4e6a-88f1-782cd58d5c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:ce:9e:b8:ec:fe:a6:ce:f9:b2:79:49:10:
                    45:51:8f:c7:fb:d3:17:ad:b8:5b:96:c4:5e:e7:ca:
                    a7:3e:6e:5b:49:d5:b9:c9:46:49:6f:62:cd:23:78:
                    b0:0f:8f:93:07:cc:b6:30:ca:ff:d9:ab:02:9c:be:
                    26:49:7a:b0:fa:17:7a:53:f3:eb:a9:a1:52:40:26:
                    f7:f8:be:e0:50:8a:de:bb:de:ba:aa:77:d7:71:9a:
                    e1:db:06:eb:f7:ab:a8:21:36:4c:67:a5:1a:7a:72:
                    ba:0d:10:6f:90:7b:d2:54:16:53:fb:8c:15:ee:84:
                    d4:96:e9:4d:47:da:5f:9e:ab:6d:8a:60:6e:b9:74:
                    2c:c6:d2:df:27:18:dc:d6:1c:51:a8:bf:d1:56:a1:
                    c9:55:97:14:92:30:ec:38:8f:6f:75:d5:2d:cd:a3:
                    b7:03:5c:c6:86:ad:fc:c4:c0:43:56:45:60:d4:50:
                    26:46:ba:57:68:2b:47:f6:00:68:92:3c:04:73:19:
                    ee:ec:4a:f9:f1:86:e4:1d:29:76:c0:5e:a8:e5:1a:
                    df:be:08:bd:9d:46:0f:50:76:05:91:b4:bc:d7:72:
                    57:f4:20:e0:99:f2:7a:93:99:9e:e6:6a:9e:0e:2b:
                    59:64:9e:f0:ce:fa:43:85:15:19:0a:2d:22:21:96:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F0:85:84:51:F7:69:12:82:02:26:FC:C2:28:EE:80:FB:10:35:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:68:63:12:92:76:fc:45:aa:01:90:24:27:d0:79:3d:a7:
         ed:f2:21:73:a0:48:92:70:c2:02:db:33:0d:83:58:e6:4d:c7:
         bc:0a:09:f1:cc:84:91:c0:f0:c9:9f:dd:de:e4:ee:d0:eb:2e:
         01:67:6b:1e:46:50:91:4f:75:a5:94:eb:19:33:93:f0:0f:da:
         93:66:93:69:d2:33:34:2e:fa:6b:7d:17:19:70:15:2d:50:58:
         e3:2f:d3:95:dd:9c:c2:26:b6:b7:78:21:04:bb:96:ce:40:10:
         86:4d:1f:8a:e1:c6:f8:7b:28:25:e1:52:eb:03:2b:33:dc:d3:
         34:96:68:e7:4b:6a:b0:1b:ca:a8:cd:2e:7e:e6:ca:2d:d5:67:
         2e:d4:17:cb:23:40:fd:2e:07:3d:90:cf:e1:7e:52:9f:ed:a9:
         ef:c0:a2:46:ae:6f:a0:e3:ae:c7:e8:4c:be:c1:16:e1:34:d0:
         73:92:5b:10:b3:1c:73:45:c4:f9:4e:c2:83:a3:dd:4b:bb:5b:
         7e:93:4a:eb:c8:54:cc:87:bf:db:25:a2:55:c0:0f:38:dc:65:
         74:45:4f:f1:92:e9:2d:bf:41:62:65:9c:de:cd:22:d4:45:89:
         b3:00:88:e5:66:4e:96:14:97:d8:03:01:8d:25:59:e5:73:92:
         04:1e:05:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xdA+Z0QPFgrHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
MDZlYjMyNzAtYjM0ZC00ZTZhLTg4ZjEtNzgyY2Q1OGQ1YzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6jOnrjs/qbO+bJ5SRBFUY/H+9MXrbhblsRe
58qnPm5bSdW5yUZJb2LNI3iwD4+TB8y2MMr/2asCnL4mSXqw+hd6U/PrqaFSQCb3
+L7gUIreu966qnfXcZrh2wbr96uoITZMZ6UaenK6DRBvkHvSVBZT+4wV7oTUlulN
R9pfnqttimBuuXQsxtLfJxjc1hxRqL/RVqHJVZcUkjDsOI9vddUtzaO3A1zGhq38
xMBDVkVg1FAmRrpXaCtH9gBokjwEcxnu7Er58YbkHSl2wF6o5Rrfvgi9nUYPUHYF
kbS813JX9CDgmfJ6k5me5mqeDitZZJ7wzvpDhRUZCi0iIZafuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPwhYRR92kSggIm/MIo7oD7EDVbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTljNDQyMzAtZWM1NS0z
NjM4LThhOTEtODdhMjRkMDg0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAp6aGMSknb8RaoBkCQn0Hk9p+3yIXOgSJJwwgLbMw2DWOZNx7wKCfHM
hJHA8Mmf3d7k7tDrLgFnax5GUJFPdaWU6xkzk/AP2pNmk2nSMzQu+mt9FxlwFS1Q
WOMv05XdnMImtrd4IQS7ls5AEIZNH4rhxvh7KCXhUusDKzPc0zSWaOdLarAbyqjN
Ln7myi3VZy7UF8sjQP0uBz2Qz+F+Up/tqe/Aokaub6DjrsfoTL7BFuE00HOSWxCz
HHNFxPlOwoOj3Uu7W36TSuvIVMyHv9slolXADzjcZXRFT/GS6S2/QWJlnN7NItRF
ibMAiOVmTpYUl9gDAY0lWeVzkgQeBSo=
-----END CERTIFICATE-----
Generated at Tue Feb 17 22:59:26 2026 by rpki-client