Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa
File:                     9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa (raw, json)
Hash identifier:          FfGLHwpCIybaJJcvMexXl8alkSH0/nEaNvQP84h9R7c=
Subject key identifier:   32:44:48:77:EB:83:6A:D9:0B:61:8C:CD:B9:34:66:44:BB:72:5B:04
Certificate issuer:       /CN=e58dee25-2204-469c-b0eb-da831443b959
Certificate serial:       010D0C9F4328584CAE5E91E67EDA88CCA9AB5FC0
Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     3257
IP address blocks:        198.251.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:91:e6:7e:da:88:cc:a9:ab:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=3c6ca60f-2db0-42f0-a38b-a185b5c7ec97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:de:96:9b:fa:5f:5a:97:74:a8:e7:48:79:
                    9c:d8:97:e2:52:fd:8f:c5:85:92:f6:fa:d0:eb:be:
                    ce:3f:83:0d:87:f4:c7:c4:ad:e7:dc:71:3e:dc:72:
                    78:72:57:e9:82:04:6c:56:53:7e:1d:32:a7:5d:d1:
                    e7:b4:50:00:7f:64:48:65:d2:13:5e:ef:f3:23:96:
                    39:35:ea:23:54:3b:21:5e:3d:c0:37:d2:8d:12:f9:
                    9b:3b:23:ec:bb:d0:86:26:ad:f9:be:ec:4e:3c:91:
                    56:6c:eb:d9:ae:92:29:9f:c6:dd:00:66:02:38:0e:
                    d8:4b:e4:f7:c9:3c:b5:0d:69:c3:d2:d4:71:a5:aa:
                    43:6b:01:86:ac:6e:dd:ba:f9:61:a7:04:4c:88:7c:
                    3a:cd:1f:64:48:6b:d0:b6:80:70:ac:6a:d0:91:40:
                    f9:96:0e:4a:3b:5d:3b:91:dd:63:b3:79:8a:77:4b:
                    53:a8:5d:22:e3:f2:43:c3:1f:4c:f3:d1:3b:51:06:
                    bf:a1:3e:c5:47:93:34:de:c0:d2:58:4a:f6:c5:e6:
                    3c:aa:d4:68:cf:39:7d:df:c9:c3:b8:92:68:29:9d:
                    76:26:01:ce:86:8f:ff:99:98:f4:5e:a8:0b:81:95:
                    b2:37:38:16:94:29:c3:66:f5:b6:da:43:a3:e6:01:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:44:48:77:EB:83:6A:D9:0B:61:8C:CD:B9:34:66:44:BB:72:5B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/9aba445b-887b-3d9b-8c5d-05718f7f7e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl

            X509v3 Authority Key Identifier:
                keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:68:83:6d:83:c2:5b:e3:bd:01:ae:35:93:d3:0d:e5:e4:0c:
         aa:42:81:35:e4:58:02:29:46:a7:91:95:aa:54:10:bf:ee:36:
         56:35:77:5c:8b:9a:f3:c1:1b:cc:5e:39:21:c4:54:51:d3:41:
         e5:02:a3:b4:8c:19:21:1b:17:dc:f8:12:5b:5a:d5:0d:4d:ff:
         67:66:d6:b8:b5:21:cb:89:38:b6:3a:dc:59:f4:11:20:eb:5d:
         6f:25:46:6f:70:1f:ba:5e:3e:d5:0f:49:31:14:f4:7a:77:0f:
         9b:eb:f8:75:df:bb:58:9a:bc:10:79:66:a6:18:e6:b8:29:c7:
         b8:c8:73:13:a2:d9:81:df:5b:b2:6e:5d:ba:4b:dc:c9:39:a3:
         1c:8b:ae:99:ab:5a:a5:25:9d:a5:3c:54:5c:43:0e:c3:0c:45:
         41:d8:00:36:d5:a6:94:4e:1a:94:1b:b1:f4:6f:d2:6f:c8:40:
         59:f3:b7:18:4d:ad:9b:32:f9:d6:f6:25:87:14:49:03:64:34:
         ee:5a:66:3b:24:05:e5:8c:1a:76:3b:9a:17:47:e5:36:08:5e:
         c0:11:18:d9:2d:04:d2:ed:b1:91:bb:4b:dc:e6:22:15:83:08:
         3f:ae:e0:4a:d1:28:2c:48:90:79:cc:8c:d3:19:28:c7:4f:92:
         8a:87:dc:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXpHmftqIzKmrX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTU4ZGVlMjUtMjIwNC00NjljLWIwZWItZGE4MzE0NDNi
OTU5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2M2Y2E2MGYtMmRiMC00MmYwLWEzOGItYTE4NWI1YzdlYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7elpv6X1qXdKjnSHmc2JfiUv2PxYWS9vrQ
677OP4MNh/THxK3n3HE+3HJ4clfpggRsVlN+HTKnXdHntFAAf2RIZdITXu/zI5Y5
NeojVDshXj3AN9KNEvmbOyPsu9CGJq35vuxOPJFWbOvZrpIpn8bdAGYCOA7YS+T3
yTy1DWnD0tRxpapDawGGrG7duvlhpwRMiHw6zR9kSGvQtoBwrGrQkUD5lg5KO107
kd1js3mKd0tTqF0i4/JDwx9M89E7UQa/oT7FR5M03sDSWEr2xeY8qtRozzl938nD
uJJoKZ12JgHOho//mZj0XqgLgZWyNzgWlCnDZvW22kOj5gFK2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJESHfrg2rZC2GMzbk0ZkS7clsEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNThk
ZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgzMTQ0M2I5NTkvOWFiYTQ0NWItODg3Yi0z
ZDliLThjNWQtMDU3MThmN2Y3ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU4ZGVlMjUtMjIwNC00NjljLWIw
ZWItZGE4MzE0NDNiOTU5L2U1OGRlZTI1LTIyMDQtNDY5Yy1iMGViLWRhODMxNDQz
Yjk1OS5jcmwwHwYDVR0jBBgwFoAUUnUQ5/3m/Rd4J0tjZp1pLp+xtrYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lNThkZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgz
MTQ0M2I5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvsfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVog22DwlvjvQGuNZPTDeXkDKpCgTXkWAIpRqeRlapUEL/uNlY1d1yL
mvPBG8xeOSHEVFHTQeUCo7SMGSEbF9z4Elta1Q1N/2dm1ri1IcuJOLY63Fn0ESDr
XW8lRm9wH7pePtUPSTEU9Hp3D5vr+HXfu1iavBB5ZqYY5rgpx7jIcxOi2YHfW7Ju
XbpL3Mk5oxyLrpmrWqUlnaU8VFxDDsMMRUHYADbVppROGpQbsfRv0m/IQFnztxhN
rZsy+db2JYcUSQNkNO5aZjskBeWMGnY7mhdH5TYIXsARGNktBNLtsZG7S9zmIhWD
CD+u4ErRKCxIkHnMjNMZKMdPkoqH3G4=
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:32:23 2026 by rpki-client