Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
File:                     017a6557-62d6-3351-a77b-bc0a23b230d3.roa (raw, json)
Hash identifier:          +cYjmQJMf9in8lKqydj1rSpD1aCDiTJZJoC9w8YHpso=
Subject key identifier:   E9:D3:EC:2F:CD:6D:2A:06:0F:C5:57:23:BA:6E:7F:70:68:C2:D1:DE
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584CAE5EA865C4C1580969DA8780
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1742
IP address blocks:        140.247.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a8:65:c4:c1:58:09:69:da:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5971200d-111b-4845-87eb-a744aad3dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:e4:a7:12:58:92:f7:c5:60:fb:bd:50:32:
                    99:95:ff:66:2b:b8:b0:7e:18:bd:3c:51:cb:b6:7e:
                    0a:9e:73:f0:5e:e3:4b:c2:35:04:09:d7:2c:61:d1:
                    53:6c:cb:8d:23:b7:0d:25:f7:a4:3a:a8:f0:f8:57:
                    23:41:b1:d6:4e:97:90:57:c4:10:f7:82:75:62:42:
                    e3:a8:4f:72:18:1a:eb:4c:5a:cb:38:c3:e0:83:14:
                    52:f2:52:70:45:5e:59:57:14:7a:6e:05:44:02:a1:
                    69:aa:ed:a2:ed:89:8f:e8:00:a8:12:55:37:9c:e7:
                    ac:54:c2:40:d1:8c:f7:05:c2:c1:ed:32:a1:48:3a:
                    b2:f8:b3:e9:4d:5d:84:77:56:f2:cd:bf:81:c9:1a:
                    5a:3b:32:77:d7:4b:33:3e:e6:24:ed:70:65:d6:d1:
                    cf:81:b2:3c:55:5b:fe:ae:7d:3d:f1:23:2a:45:6b:
                    cc:71:af:33:6c:9b:e7:f5:11:c6:cf:6e:4a:48:ef:
                    8b:34:a5:cf:b5:90:b8:f7:16:88:15:d8:0a:38:22:
                    bb:0a:29:5e:0b:aa:35:a6:e7:f5:77:74:2b:8a:98:
                    59:a8:33:08:a2:d0:3c:7a:53:b5:36:16:2f:12:72:
                    c0:05:c8:c2:73:1b:b3:9c:b4:88:56:42:ed:d8:b0:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:EC:2F:CD:6D:2A:06:0F:C5:57:23:BA:6E:7F:70:68:C2:D1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:29:61:6e:fc:0d:db:7b:e0:66:b9:03:7e:1e:d8:70:d1:
         3f:09:a2:21:15:1e:af:5c:f3:d7:db:02:4a:2b:e2:bf:a1:2b:
         f3:71:42:98:4a:1f:fe:33:bb:40:a0:95:fb:78:66:eb:28:14:
         77:d7:fa:73:b0:77:39:fd:70:94:86:11:50:af:a0:1d:b3:51:
         a3:e8:ae:14:cf:fc:26:ab:bb:48:ef:ad:5a:04:19:97:16:81:
         45:26:e7:d6:00:ed:e8:bb:4a:19:60:17:60:2c:51:ce:c4:bc:
         3a:3c:22:aa:90:37:26:2b:5c:46:90:2d:4b:b1:00:70:79:61:
         e5:d7:e4:a0:66:e6:a2:23:06:f2:d8:ef:4d:f1:ec:9b:04:d3:
         32:0a:ca:a6:e9:94:ed:44:01:07:86:82:ed:13:e5:e7:c2:99:
         e6:b7:82:aa:3b:c2:a7:5b:e0:73:16:c8:7d:e7:ad:59:ff:8c:
         2a:e5:bc:9b:71:c6:6d:e6:3c:70:e4:60:d3:e8:3f:82:ea:9a:
         33:a8:4a:66:bd:fe:41:c5:86:b0:0d:17:5a:19:de:a6:76:c4:
         bf:24:9d:07:d2:3a:d0:9a:61:e2:f2:94:27:15:3d:5a:c1:8c:
         90:58:30:9f:c5:75:38:e2:e7:d3:51:6c:ae:25:27:6a:7c:90:
         7a:a0:02:89
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyuXqhlxMFYCWnah4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NTk3MTIwMGQtMTExYi00ODQ1LTg3ZWItYTc0NGFhZDNkY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwjkpxJYkvfFYPu9UDKZlf9mK7iwfhi9PFHL
tn4KnnPwXuNLwjUECdcsYdFTbMuNI7cNJfekOqjw+FcjQbHWTpeQV8QQ94J1YkLj
qE9yGBrrTFrLOMPggxRS8lJwRV5ZVxR6bgVEAqFpqu2i7YmP6ACoElU3nOesVMJA
0Yz3BcLB7TKhSDqy+LPpTV2Ed1byzb+ByRpaOzJ310szPuYk7XBl1tHPgbI8VVv+
rn098SMqRWvMca8zbJvn9RHGz25KSO+LNKXPtZC49xaIFdgKOCK7CileC6o1puf1
d3QriphZqDMIotA8elO1NhYvEnLABcjCcxuznLSIVkLt2LAHUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOnT7C/NbSoGD8VXI7puf3BowtHeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvMDE3YTY1NTctNjJkNi0z
MzUxLWE3N2ItYmMwYTIzYjIzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjPcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaPYpYW78Ddt74Ga5A34e2HDRPwmiIRUer1zz19sCSiviv6Er83FCmEof
/jO7QKCV+3hm6ygUd9f6c7B3Of1wlIYRUK+gHbNRo+iuFM/8Jqu7SO+tWgQZlxaB
RSbn1gDt6LtKGWAXYCxRzsS8OjwiqpA3JitcRpAtS7EAcHlh5dfkoGbmoiMG8tjv
TfHsmwTTMgrKpumU7UQBB4aC7RPl58KZ5reCqjvCp1vgcxbIfeetWf+MKuW8m3HG
beY8cORg0+g/guqaM6hKZr3+QcWGsA0XWhnepnbEvySdB9I60Jph4vKUJxU9WsGM
kFgwn8V1OOLn01FsriUnanyQeqACiQ==
-----END CERTIFICATE-----
Generated at Thu Feb 26 21:40:36 2026 by rpki-client