Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa
File:                     48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa (raw, json)
Hash identifier:          Uf1LC+qDLLaeywu2u5D7lF16Tj1q8ONxYbn0FhjFovU=
Subject key identifier:   4F:0F:76:A3:60:85:E8:D6:74:8E:51:60:A6:DE:F4:27:B4:C4:1A:D6
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584DA11AC0B373DDECFAF71D9000
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        170.225.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c0:b3:73:dd:ec:fa:f7:1d:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=7cbc2b03-9156-4666-909d-56baa37ae65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:39:64:62:12:8e:19:1b:bc:75:ac:07:ad:
                    79:d9:b1:5e:55:da:54:11:a6:c7:8a:b1:57:6c:02:
                    47:84:e6:20:79:ad:61:c2:68:73:08:30:73:1b:39:
                    f7:9a:13:97:8c:f9:49:1f:2c:08:3a:a2:a7:d6:f0:
                    98:b0:23:5a:f5:b8:2a:5f:24:ea:7b:84:e1:f1:df:
                    f2:12:20:8b:07:92:a0:ac:13:49:48:64:42:85:f9:
                    a7:d4:de:4c:82:4c:95:66:08:74:bb:0a:b2:c3:7d:
                    9b:fe:d9:5f:40:3d:7a:1d:22:97:a6:2e:e3:53:bb:
                    a7:fd:46:a0:43:f6:28:aa:d6:55:29:53:d1:f4:12:
                    d2:92:13:bb:65:7f:ae:b1:79:ce:5d:9f:d9:6c:b5:
                    98:2d:d7:2b:19:f6:2a:a6:f4:c3:fb:5c:c7:9f:bb:
                    bd:62:44:fe:c9:91:ed:39:87:c6:d0:d1:a5:9a:57:
                    40:79:36:54:81:5d:87:8e:d8:62:46:54:0f:1f:ef:
                    6a:5f:e3:a7:69:a8:3d:d5:ec:63:30:c2:5b:8a:50:
                    90:11:25:f5:45:50:04:29:2f:ac:58:4a:04:c0:75:
                    22:9b:57:11:c7:56:d4:50:39:79:7f:45:31:19:7e:
                    e0:fd:9b:91:5f:b9:57:d1:bd:2a:4f:a6:d5:46:94:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:76:A3:60:85:E8:D6:74:8E:51:60:A6:DE:F4:27:B4:C4:1A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:e1:ae:ad:21:83:c4:69:2b:73:85:a3:0f:51:29:c2:8d:
         0c:2f:35:80:19:43:a4:01:fb:63:98:84:4a:a9:eb:ea:0c:ca:
         2e:63:8d:a1:8e:1f:93:0d:95:10:87:76:8d:34:08:79:fb:62:
         a5:69:63:29:67:ad:5a:fb:e3:ba:ba:a7:d5:82:03:21:0e:7c:
         fe:5b:0f:24:94:d2:9f:c7:a8:94:cb:f2:c7:54:61:f2:7c:08:
         de:62:a3:9a:3c:02:4c:d9:7f:a9:af:2c:dd:cc:9d:17:a1:dd:
         78:7c:6d:99:bd:72:c5:f4:6f:95:4b:77:f9:2f:07:3a:42:f5:
         8d:10:d9:2b:b4:72:f2:b0:2a:d0:10:1d:30:e6:ac:c5:7b:a4:
         1d:39:5b:d1:6d:7e:ee:20:f0:1b:8a:ad:13:00:c0:d4:26:ea:
         ac:23:db:a5:1d:58:ec:bc:2a:5a:c9:68:56:fb:2c:f4:ae:e7:
         9c:2b:ee:ba:68:be:9b:c5:5b:48:1c:de:d7:7d:10:fb:cd:3f:
         94:aa:13:9f:64:c5:39:8d:3b:13:17:e4:bf:5a:f9:67:7f:dc:
         9c:6d:e1:3a:02:ff:7a:85:7c:cc:4c:23:a3:36:18:db:66:14:
         4b:ce:04:4b:4e:3c:07:61:2f:55:cf:39:d9:02:7d:a0:e7:d0:
         3a:63:ee:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsCzc93s+vcdkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4
Mjc5MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
N2NiYzJiMDMtOTE1Ni00NjY2LTkwOWQtNTZiYWEzN2FlNjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvY5ZGISjhkbvHWsB6152bFeVdpUEabHirFX
bAJHhOYgea1hwmhzCDBzGzn3mhOXjPlJHywIOqKn1vCYsCNa9bgqXyTqe4Th8d/y
EiCLB5KgrBNJSGRChfmn1N5MgkyVZgh0uwqyw32b/tlfQD16HSKXpi7jU7un/Uag
Q/YoqtZVKVPR9BLSkhO7ZX+usXnOXZ/ZbLWYLdcrGfYqpvTD+1zHn7u9YkT+yZHt
OYfG0NGlmldAeTZUgV2HjthiRlQPH+9qX+Onaag91exjMMJbilCQESX1RVAEKS+s
WEoEwHUim1cRx1bUUDl5f0UxGX7g/ZuRX7lX0b0qT6bVRpSi4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8PdqNghejWdI5RYKbe9Ce0xBrWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5
N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNDhmMWM3YTktN2M2Yi0z
OGVlLWFmNWUtMDNhNzBhYzExYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5
ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw
ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0
OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFm24a6tIYPEaStzhaMPUSnCjQwvNYAZQ6QB+2OYhEqp6+oMyi5jjaGO
H5MNlRCHdo00CHn7YqVpYylnrVr747q6p9WCAyEOfP5bDySU0p/HqJTL8sdUYfJ8
CN5io5o8AkzZf6mvLN3MnReh3Xh8bZm9csX0b5VLd/kvBzpC9Y0Q2Su0cvKwKtAQ
HTDmrMV7pB05W9Ftfu4g8BuKrRMAwNQm6qwj26UdWOy8KlrJaFb7LPSu55wr7rpo
vpvFW0gc3td9EPvNP5SqE59kxTmNOxMX5L9a+Wd/3Jxt4ToC/3qFfMxMI6M2GNtm
FEvOBEtOPAdhL1XPOdkCfaDn0Dpj7pk=
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:01:32 2026 by rpki-client