Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ac9e1c56-6cac-3110-acd0-364d84886057.roa
File:                     ac9e1c56-6cac-3110-acd0-364d84886057.roa (raw, json)
Hash identifier:          t1HahsbNd2TpFIQMEa0ydDj5qZY9gNNjSako2/h2Ltg=
Subject key identifier:   31:0C:9D:7A:3E:01:CB:E4:52:A8:18:10:95:4F:81:36:2F:EB:0F:F3
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584C9966F703CB4661D30C641200
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ac9e1c56-6cac-3110-acd0-364d84886057.roa
Signing time:             Wed 21 Jan 2026 14:00:38 +0000
ROA not before:           Wed 21 Jan 2026 14:00:38 +0000
ROA not after:            Tue 21 Apr 2026 13:00:38 +0000
asID:                     398465
IP address blocks:        104.171.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:66:f7:03:cb:46:61:d3:0c:64:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jan 21 14:00:38 2026 GMT
            Not After : Apr 21 13:00:38 2026 GMT
        Subject: CN=1a9823ef-8f00-487c-b26b-69e7cebbba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:6e:53:ea:3c:07:56:f3:13:3c:9d:44:35:
                    89:47:fa:35:a7:26:9b:ac:fa:4b:5c:9f:d5:f3:5b:
                    5c:80:89:02:dd:27:93:12:66:a2:32:5a:82:97:82:
                    ea:a1:0c:2f:83:57:67:5d:26:17:a5:c7:07:82:60:
                    5e:0d:43:ea:40:03:7e:89:f8:e1:d1:f8:17:68:1d:
                    1c:d1:a8:d9:03:3f:81:52:5e:8e:d0:7f:a4:7e:04:
                    c2:a7:d9:9f:5b:0e:4c:fb:ad:58:7a:54:a4:9c:e0:
                    da:4f:dc:54:65:d0:48:6e:af:99:58:78:2b:58:fb:
                    6d:3e:2f:ec:92:f5:76:02:c4:29:62:0b:d6:c4:d2:
                    44:48:a6:45:9d:53:41:10:03:28:07:6a:f0:ea:f5:
                    f7:2d:38:e9:ab:54:a7:10:03:b1:aa:2f:f6:eb:1f:
                    f9:5c:f5:25:01:fd:c8:ed:e0:0a:79:c6:e0:e8:27:
                    05:ba:f5:a5:77:a0:5f:63:4f:2e:c4:33:02:97:30:
                    dc:ac:79:be:c9:33:92:c6:ef:a3:ad:1c:24:54:b6:
                    f1:d2:62:4e:90:3f:ff:8b:ce:0b:4e:90:d2:2c:0a:
                    9e:55:d2:8c:89:08:30:03:e4:64:e9:d3:f6:29:2f:
                    a6:2d:ae:07:81:56:8e:ac:e3:5f:8f:62:f2:c8:8c:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0C:9D:7A:3E:01:CB:E4:52:A8:18:10:95:4F:81:36:2F:EB:0F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ac9e1c56-6cac-3110-acd0-364d84886057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:44:ae:2b:99:b1:a2:0d:ba:a5:18:53:ef:a2:43:01:92:d7:
         fb:8d:2a:a0:4f:e0:c4:a1:cb:12:a7:ed:ce:49:6d:56:2f:0c:
         d3:a0:20:94:4b:5b:c7:ba:12:7b:f5:80:a8:a1:71:58:b6:f6:
         08:14:5d:c7:a6:de:90:42:9d:a7:a5:f2:92:b2:b2:31:71:65:
         ae:16:d1:71:5d:1f:ec:89:e1:49:64:94:93:e8:85:40:3f:37:
         0a:16:b0:1d:ab:6a:73:d6:e8:58:76:c8:7c:9a:22:5e:d7:d9:
         70:be:3c:e9:8e:b8:57:58:31:f1:34:3c:a0:ee:1a:92:77:13:
         82:24:c1:d9:3c:5c:53:33:bd:c1:b6:8d:51:f8:7b:5c:00:a3:
         5c:0a:61:d9:ff:06:70:0a:4d:a6:b2:84:0f:e5:d8:48:5d:b9:
         d7:ad:40:7e:d3:62:6c:c3:b2:46:36:a8:77:c3:78:fb:05:7b:
         ca:2f:7e:2f:36:0e:f6:b9:38:03:cc:a4:a2:d4:1a:5e:f1:c0:
         ef:9b:bb:53:b0:d5:c8:ea:84:44:b2:d9:06:e4:61:83:fe:20:
         95:ac:66:4b:dd:28:4c:5b:99:7e:46:af:f9:3a:05:f8:31:13:
         7c:db:db:ed:3a:bc:75:be:3e:a2:82:3f:f4:56:31:ab:9a:2f:
         5f:bf:b9:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZvcDy0Zh0wxkEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2
NjNlMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk
MWE5ODIzZWYtOGYwMC00ODdjLWIyNmItNjllN2NlYmJiYTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfRuU+o8B1bzEzydRDWJR/o1pyabrPpLXJ/V
81tcgIkC3SeTEmaiMlqCl4LqoQwvg1dnXSYXpccHgmBeDUPqQAN+ifjh0fgXaB0c
0ajZAz+BUl6O0H+kfgTCp9mfWw5M+61YelSknODaT9xUZdBIbq+ZWHgrWPttPi/s
kvV2AsQpYgvWxNJESKZFnVNBEAMoB2rw6vX3LTjpq1SnEAOxqi/26x/5XPUlAf3I
7eAKecbg6CcFuvWld6BfY08uxDMClzDcrHm+yTOSxu+jrRwkVLbx0mJOkD//i84L
TpDSLAqeVdKMiQgwA+Rk6dP2KS+mLa4HgVaOrONfj2LyyIxfhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEMnXo+AcvkUqgYEJVPgTYv6w/zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy
ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvYWM5ZTFjNTYtNmNhYy0z
MTEwLWFjZDAtMzY0ZDg0ODg2MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2
YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3
NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm
NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKugMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAREriuZsaINuqUYU++iQwGS1/uNKqBP4MShyxKn7c5JbVYvDNOgIJRL
W8e6Env1gKihcVi29ggUXcem3pBCnael8pKysjFxZa4W0XFdH+yJ4UlklJPohUA/
NwoWsB2ranPW6Fh2yHyaIl7X2XC+POmOuFdYMfE0PKDuGpJ3E4Ikwdk8XFMzvcG2
jVH4e1wAo1wKYdn/BnAKTaayhA/l2EhdudetQH7TYmzDskY2qHfDePsFe8ovfi82
Dva5OAPMpKLUGl7xwO+bu1Ow1cjqhESy2QbkYYP+IJWsZkvdKExbmX5Gr/k6Bfgx
E3zb2+06vHW+PqKCP/RWMauaL1+/uY8=
-----END CERTIFICATE-----
Generated at Mon Feb 23 14:45:37 2026 by rpki-client