Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa
File:                     1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa (raw, json)
Hash identifier:          KzM7w4P3maIllDaPhEKPAbvjN3KVgJmfkYmdt3KO0Oo=
Subject key identifier:   0F:CE:3F:DA:79:6A:7B:D3:B2:B9:8E:00:A6:BC:28:81:70:D7:05:8A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAFBC74C3E47BDD627103FA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        155.248.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:74:c3:e4:7b:dd:62:71:03:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=8fbeb02b-4134-4431-9889-b9e1a31f421d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:7a:f6:01:62:c3:91:27:e0:7f:55:d0:5f:
                    f5:f4:ad:a5:6e:29:bc:c0:ee:3b:20:64:f3:80:6b:
                    54:78:e5:99:d3:e0:a7:ce:d3:f9:a2:94:81:71:ee:
                    98:26:20:28:f3:b3:3b:ec:f3:b8:90:9c:0c:c6:02:
                    28:d9:d2:4a:47:be:30:93:66:70:01:70:b3:a5:d3:
                    e9:6c:84:6e:98:59:37:e4:32:fc:2b:fb:6b:fe:4d:
                    3f:fb:38:0e:74:6c:09:7e:58:90:f4:4d:ef:5f:17:
                    02:f8:02:d0:da:3e:28:e0:b9:f4:59:98:03:ad:58:
                    78:32:04:b9:37:06:9e:e1:b3:a4:4a:d8:10:35:63:
                    1c:7a:2f:c5:38:2e:26:76:76:f7:3c:42:b5:d3:ac:
                    8b:ac:ac:70:ab:97:bd:d3:6c:3a:7d:18:2b:58:cc:
                    a7:0e:69:66:97:65:de:2e:e8:4f:6c:01:b6:61:e3:
                    59:de:02:c2:93:14:c3:cc:c8:6a:d2:bc:f5:03:ae:
                    0e:d3:de:8c:e4:d4:19:1d:36:79:99:e6:e3:05:f2:
                    5a:de:5b:ab:7f:4e:db:b6:19:3a:8f:95:d9:5b:3e:
                    37:e1:37:fd:1d:6d:e0:da:1d:4c:75:ee:e9:71:ca:
                    62:56:32:f6:1f:1d:15:ff:54:ca:a7:70:07:9c:41:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CE:3F:DA:79:6A:7B:D3:B2:B9:8E:00:A6:BC:28:81:70:D7:05:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.248.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:77:18:41:e5:3e:7b:1c:85:12:ce:19:48:5e:60:b4:82:9a:
         8b:ce:1d:ae:95:d2:17:41:1a:1f:51:5c:7a:ac:9e:1c:5f:87:
         3e:10:17:43:bf:72:38:db:f0:0e:30:33:84:95:81:4f:31:73:
         91:8f:17:67:46:85:b5:aa:4c:7f:03:3d:43:02:9d:c9:3f:06:
         bd:51:d4:04:d6:97:41:22:62:a0:e5:ab:ae:88:d8:0c:1e:dc:
         bd:09:fc:f2:ef:47:12:52:6d:f7:89:50:c8:a0:02:0c:33:33:
         e1:bb:e9:a2:aa:78:5d:ec:90:ab:f6:c0:2d:b6:07:8e:bd:3f:
         8b:fe:9f:be:59:8c:e6:d4:83:82:0f:32:73:4b:b4:68:ee:ee:
         7f:8b:66:3f:55:87:39:44:c4:2b:8d:b4:13:3d:41:d4:9e:96:
         62:c2:e7:0c:bb:e8:f4:d2:5f:32:45:c1:5d:cc:d5:07:c7:f4:
         8c:86:3d:b7:7b:d4:bd:af:5a:8d:20:5e:29:1d:15:71:21:1e:
         71:72:6f:63:ca:aa:2c:4c:cc:87:9f:4c:6c:d2:5f:d3:41:0d:
         dc:d5:01:91:b1:a2:89:0e:48:64:12:cf:4d:b9:16:b6:9f:fa:
         3a:78:39:c6:47:0c:3b:ac:c6:58:1b:a5:6d:dd:4e:58:43:35:
         98:61:70:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHTD5HvdYnED+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
OGZiZWIwMmItNDEzNC00NDMxLTk4ODktYjllMWEzMWY0MjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv169gFiw5En4H9V0F/19K2lbim8wO47IGTz
gGtUeOWZ0+CnztP5opSBce6YJiAo87M77PO4kJwMxgIo2dJKR74wk2ZwAXCzpdPp
bIRumFk35DL8K/tr/k0/+zgOdGwJfliQ9E3vXxcC+ALQ2j4o4Ln0WZgDrVh4MgS5
Nwae4bOkStgQNWMcei/FOC4mdnb3PEK106yLrKxwq5e902w6fRgrWMynDmlml2Xe
LuhPbAG2YeNZ3gLCkxTDzMhq0rz1A64O096M5NQZHTZ5mebjBfJa3lurf07bthk6
j5XZWz434Tf9HW3g2h1Mde7pccpiVjL2Hx0V/1TKp3AHnEHfQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/OP9p5anvTsrmOAKa8KIFw1wWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTA2MWJhMWMtMWRiNy0z
NThhLTk4YTAtNGZlMWM4ZjljMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/jgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJ3GEHlPnschRLOGUheYLSCmovOHa6V0hdBGh9RXHqsnhxfhz4QF0O/
cjjb8A4wM4SVgU8xc5GPF2dGhbWqTH8DPUMCnck/Br1R1ATWl0EiYqDlq66I2Awe
3L0J/PLvRxJSbfeJUMigAgwzM+G76aKqeF3skKv2wC22B469P4v+n75ZjObUg4IP
MnNLtGju7n+LZj9VhzlExCuNtBM9QdSelmLC5wy76PTSXzJFwV3M1QfH9IyGPbd7
1L2vWo0gXikdFXEhHnFyb2PKqixMzIefTGzSX9NBDdzVAZGxookOSGQSz025Fraf
+jp4OcZHDDusxlgbpW3dTlhDNZhhcCo=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:08 2026 by rpki-client