Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/8f5e260b-a3a8-3d15-ab93-ec6306bf5900.roa
File:                     8f5e260b-a3a8-3d15-ab93-ec6306bf5900.roa (raw, json)
Hash identifier:          d4VyqlPHvVffSu+3CcEaSuLeVfIdLISZjSAvp02LBFE=
Subject key identifier:   FE:B3:2E:D6:A4:E9:54:A3:06:99:A6:B1:6A:F5:DC:A1:AA:B6:75:2C
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584CCFD7306C94323EEC412712A0
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/8f5e260b-a3a8-3d15-ab93-ec6306bf5900.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     40833
IP address blocks:        170.149.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:30:6c:94:32:3e:ec:41:27:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=21d8d0e3-c05e-43c8-97a5-82878e47e5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:0c:92:f2:78:80:c8:6a:2e:bc:d3:25:94:
                    ff:31:27:00:52:61:bd:35:98:b9:0f:30:83:8b:fd:
                    cc:7b:bc:69:45:6d:2b:36:af:e0:80:74:1d:97:2a:
                    1f:df:20:b6:b0:01:62:4f:b1:03:88:a4:74:62:de:
                    00:28:b4:86:7b:ec:d5:db:89:d7:c2:0f:ea:f2:4b:
                    50:43:c8:9a:bd:c5:f6:e3:40:1d:a5:1d:de:e8:a3:
                    3d:c5:b6:57:e5:a3:65:5b:74:fe:2c:90:ca:dc:95:
                    23:e0:2d:6c:52:93:62:c8:57:a0:ef:93:5e:3d:33:
                    94:d6:14:1a:11:be:64:bf:f5:f8:12:8a:26:23:85:
                    fb:0a:10:99:e9:e0:73:51:4e:b8:46:14:cc:ff:2c:
                    14:f7:f3:e7:38:be:bc:03:4e:ab:e1:bd:28:ab:3b:
                    60:bc:06:70:7a:8c:e3:d1:17:f6:0d:0c:5a:c7:9c:
                    20:d0:52:df:70:15:cd:3f:0f:94:8f:a5:99:cc:b2:
                    97:e8:81:af:36:e8:db:5f:71:d8:ec:57:81:71:e9:
                    ab:9e:e3:d2:9f:55:9a:0d:2c:e0:3b:b4:d1:3c:cf:
                    d7:4c:da:96:a4:8b:8e:3e:f6:f9:a6:70:9b:83:fb:
                    d2:49:b2:05:d0:67:a8:c0:ad:ad:01:a6:db:03:d2:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:2E:D6:A4:E9:54:A3:06:99:A6:B1:6A:F5:DC:A1:AA:B6:75:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/8f5e260b-a3a8-3d15-ab93-ec6306bf5900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:2d:f7:57:4e:ef:5d:cf:31:c8:59:12:52:6a:b0:1d:79:
         5e:34:eb:63:3e:83:1d:29:f8:0c:44:38:db:37:10:61:ae:82:
         7e:a8:14:d8:58:09:37:5d:cf:7e:52:9c:6a:4c:87:46:da:ee:
         2e:18:38:56:88:47:2f:d6:c1:f4:5f:67:00:81:6f:a7:a8:2f:
         1f:f4:74:44:f5:b2:1e:3f:a3:7b:79:29:41:d7:72:a7:39:a4:
         48:87:89:73:e6:7b:e3:87:ce:17:e5:d8:54:3f:6b:e4:42:06:
         3c:64:f6:8b:5f:54:c3:f3:2f:e4:ce:ad:38:48:d8:f1:aa:ae:
         44:27:50:ff:65:89:f7:85:58:7f:b5:cb:93:e4:b8:2e:6b:d5:
         80:80:35:1f:7e:d5:f0:08:e7:ef:a9:46:12:68:01:1e:7c:0d:
         8a:2f:31:dd:1d:cf:72:86:fe:68:e1:c6:56:b4:a4:c1:d4:50:
         f0:89:e9:c0:24:f5:d3:6d:a0:70:af:5d:a7:88:ec:d7:80:85:
         22:8d:50:9f:b7:e5:34:f6:26:99:ff:17:5a:0a:c5:d1:37:41:
         8a:5f:48:9e:cf:3b:c1:88:cc:b7:be:f1:86:96:5b:f2:fd:24:
         a0:40:79:4e:93:e2:38:34:c8:8e:7a:e7:6f:cc:b3:41:ad:40:
         71:c1:a7:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1zBslDI+7EEnEqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj
NWQ2MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk
MjFkOGQwZTMtYzA1ZS00M2M4LTk3YTUtODI4NzhlNDdlNWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAMkvJ4gMhqLrzTJZT/MScAUmG9NZi5DzCD
i/3Me7xpRW0rNq/ggHQdlyof3yC2sAFiT7EDiKR0Yt4AKLSGe+zV24nXwg/q8ktQ
Q8iavcX240AdpR3e6KM9xbZX5aNlW3T+LJDK3JUj4C1sUpNiyFeg75NePTOU1hQa
Eb5kv/X4EoomI4X7ChCZ6eBzUU64RhTM/ywU9/PnOL68A06r4b0oqztgvAZweozj
0Rf2DQxax5wg0FLfcBXNPw+Uj6WZzLKX6IGvNujbX3HY7FeBcemrnuPSn1WaDSzg
O7TRPM/XTNqWpIuOPvb5pnCbg/vSSbIF0GeowK2tAabbA9KFowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP6zLtak6VSjBpmmsWr13KGqtnUsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz
MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvOGY1ZTI2MGItYTNhOC0z
ZDE1LWFiOTMtZWM2MzA2YmY1OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh
N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky
YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm
MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpXoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABD9LfdXTu9dzzHIWRJSarAdeV4062M+gx0p+AxEONs3EGGugn6oFNhY
CTddz35SnGpMh0ba7i4YOFaIRy/WwfRfZwCBb6eoLx/0dET1sh4/o3t5KUHXcqc5
pEiHiXPme+OHzhfl2FQ/a+RCBjxk9otfVMPzL+TOrThI2PGqrkQnUP9lifeFWH+1
y5PkuC5r1YCANR9+1fAI5++pRhJoAR58DYovMd0dz3KG/mjhxla0pMHUUPCJ6cAk
9dNtoHCvXaeI7NeAhSKNUJ+35TT2Jpn/F1oKxdE3QYpfSJ7PO8GIzLe+8YaWW/L9
JKBAeU6T4jg0yI5652/Ms0GtQHHBp8U=
-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:34 2026 by rpki-client