Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/c7ec753d-ef9c-35d1-aee2-1eb29bca67e4.roa
File:                     c7ec753d-ef9c-35d1-aee2-1eb29bca67e4.roa (raw, json)
Hash identifier:          BB+ijj7NR1jDlDbgfoh3ujTd2/JboCRJSHZ5foRyngM=
Subject key identifier:   A3:C3:61:06:A8:AF:5D:05:63:39:BE:1A:F3:37:DA:C9:35:7D:D8:9D
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584CCFD72F32B920BDEE3FA00280
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/c7ec753d-ef9c-35d1-aee2-1eb29bca67e4.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     4543
IP address blocks:        170.149.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:2f:32:b9:20:bd:ee:3f:a0:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=f808a5ea-154e-4f28-b76b-8a5ec71dad5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:9d:56:a5:3d:c5:6b:20:6a:97:fa:41:d3:
                    7b:1c:e9:55:25:63:6c:1a:49:39:65:66:74:e4:ff:
                    b7:0a:ae:ca:80:8c:2e:68:ea:d2:96:52:c3:4c:db:
                    1f:f0:c0:94:dc:41:26:29:68:ac:1a:9f:f6:93:1a:
                    71:51:bc:29:71:cf:ec:3c:d7:83:78:f9:c0:38:14:
                    76:c0:40:9e:7a:14:eb:ed:92:26:13:4b:56:6b:45:
                    3f:33:3d:a9:35:16:a5:01:61:e8:1b:12:c7:bf:a9:
                    bb:3f:cc:13:0c:79:40:2a:f6:00:73:ab:47:46:45:
                    e2:29:e6:f1:9f:07:20:98:bb:30:af:03:d4:28:f6:
                    0e:fd:9a:87:4b:32:a3:17:58:60:bb:63:3f:a5:2f:
                    fb:4a:2c:73:e6:e3:91:c8:fe:16:38:f3:22:0d:4b:
                    ca:8c:89:bc:74:5b:38:ca:cc:aa:3e:91:8c:68:ad:
                    b3:5e:ac:32:7c:4b:b4:f3:dc:e2:73:e5:04:da:0a:
                    53:ab:7d:1d:2c:7a:e5:8e:54:3a:64:81:02:ac:cd:
                    99:d1:75:3d:b4:c3:5b:d8:9e:1f:9a:9e:2c:3c:e9:
                    99:f9:eb:08:ab:24:b7:c3:5d:83:92:a1:eb:03:7b:
                    2b:92:8a:39:55:16:80:11:0e:90:42:a5:2d:8a:e1:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:61:06:A8:AF:5D:05:63:39:BE:1A:F3:37:DA:C9:35:7D:D8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/c7ec753d-ef9c-35d1-aee2-1eb29bca67e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:c0:64:cb:7c:9f:cd:97:f3:47:c5:8c:69:93:6d:c0:f1:
         bd:b4:c3:eb:7f:76:73:5c:45:45:cf:08:70:27:56:39:44:78:
         13:93:19:79:cd:d9:26:09:89:c4:8d:26:53:d6:22:0d:74:cc:
         4e:c9:a5:fe:64:49:93:d5:e3:89:54:d8:38:8b:05:1d:16:0c:
         22:1c:ad:cf:23:8d:40:dc:99:35:8f:b6:52:28:08:72:5f:ec:
         32:a4:2b:2f:fe:14:31:17:2e:ee:ba:0f:48:38:0e:53:63:3f:
         e6:61:f8:5b:58:06:20:45:83:fd:53:5f:e1:39:0f:de:de:a4:
         2f:11:01:92:c0:27:25:6c:1f:8d:de:ac:b2:88:2a:3c:ea:41:
         80:e3:2d:21:6c:05:af:24:9c:55:4c:15:db:44:f0:bf:32:b5:
         f8:4d:c5:73:5b:55:91:22:4a:4f:b6:91:78:8c:dd:46:e4:38:
         38:a6:62:93:93:b2:63:5d:ff:35:4d:65:ab:60:3a:b8:ea:c8:
         b0:d1:60:ad:71:0e:9c:5d:70:4e:17:67:b2:b5:4c:cb:01:53:
         4e:59:51:3a:dd:37:f6:7c:8b:a2:23:18:8f:4f:bb:e2:42:b5:
         7c:c0:07:8e:de:77:32:77:61:f1:65:47:7b:76:27:6e:29:5a:
         f3:e0:21:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1y8yuSC97j+gAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj
NWQ2MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZjgwOGE1ZWEtMTU0ZS00ZjI4LWI3NmItOGE1ZWM3MWRhZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltqdVqU9xWsgapf6QdN7HOlVJWNsGkk5ZWZ0
5P+3Cq7KgIwuaOrSllLDTNsf8MCU3EEmKWisGp/2kxpxUbwpcc/sPNeDePnAOBR2
wECeehTr7ZImE0tWa0U/Mz2pNRalAWHoGxLHv6m7P8wTDHlAKvYAc6tHRkXiKebx
nwcgmLswrwPUKPYO/ZqHSzKjF1hgu2M/pS/7Sixz5uORyP4WOPMiDUvKjIm8dFs4
ysyqPpGMaK2zXqwyfEu089zic+UE2gpTq30dLHrljlQ6ZIECrM2Z0XU9tMNb2J4f
mp4sPOmZ+esIqyS3w12DkqHrA3srkoo5VRaAEQ6QQqUtiuGFkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPDYQaor10FYzm+GvM32sk1fdidMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz
MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvYzdlYzc1M2QtZWY5Yy0z
NWQxLWFlZTItMWViMjliY2E2N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh
N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky
YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm
MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpXBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhOwGTLfJ/Nl/NHxYxpk23A8b20w+t/dnNcRUXPCHAnVjlEeBOTGXnN
2SYJicSNJlPWIg10zE7Jpf5kSZPV44lU2DiLBR0WDCIcrc8jjUDcmTWPtlIoCHJf
7DKkKy/+FDEXLu66D0g4DlNjP+Zh+FtYBiBFg/1TX+E5D97epC8RAZLAJyVsH43e
rLKIKjzqQYDjLSFsBa8knFVMFdtE8L8ytfhNxXNbVZEiSk+2kXiM3UbkODimYpOT
smNd/zVNZatgOrjqyLDRYK1xDpxdcE4XZ7K1TMsBU05ZUTrdN/Z8i6IjGI9Pu+JC
tXzAB47edzJ3YfFlR3t2J24pWvPgIVs=
-----END CERTIFICATE-----
Generated at Thu Feb 26 22:50:49 2026 by rpki-client