Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/137597c6-8511-36fa-9625-786097165597.roa
File:                     137597c6-8511-36fa-9625-786097165597.roa (raw, json)
Hash identifier:          arKNgP0q5J8pZrbP4cOkSi25hk5Gqd4GE3hwGkccJ9E=
Subject key identifier:   C7:94:CB:5D:B1:D0:3A:61:1E:A9:D1:9B:63:46:CA:20:32:5B:4D:DF
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE571B67A0B90F0C48208BC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/137597c6-8511-36fa-9625-786097165597.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        159.112.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:1b:67:a0:b9:0f:0c:48:20:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c3acd48a-5251-441e-ac07-38dbde9dd5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:94:bc:6b:e2:ec:1c:cc:32:f6:c4:8c:2d:
                    af:56:85:34:08:d3:cb:36:95:21:fd:de:fe:57:24:
                    e5:29:fd:a9:9c:27:10:ed:81:61:7f:cd:ff:49:fd:
                    ed:63:74:2c:92:57:71:7c:e7:bb:1c:d4:ca:e9:90:
                    41:67:ab:83:f3:6c:80:95:f4:ae:b8:89:47:ad:17:
                    b1:cd:b1:b0:70:a2:00:21:64:db:0f:28:1f:98:1a:
                    5f:25:ad:74:09:82:16:e8:91:e7:ff:76:0e:63:f0:
                    a9:70:35:e6:c6:e1:ff:91:26:ef:10:a9:0b:d7:77:
                    ea:8e:0c:dd:41:0f:e0:65:a7:32:ba:31:b2:5f:e8:
                    9c:75:06:47:ae:47:eb:bf:43:93:d2:3b:a1:0e:e9:
                    eb:3e:6c:62:50:89:17:21:c5:31:f4:c4:74:04:e4:
                    05:f0:6b:e3:37:63:8d:4a:5c:09:80:6b:f5:6a:70:
                    ec:ae:bc:b9:27:38:dc:09:34:9d:be:c8:68:8f:89:
                    31:9c:aa:10:a9:eb:9e:bb:3c:c3:a9:e2:64:a2:d2:
                    ec:05:a9:41:9f:92:ea:44:37:4f:c4:1e:a4:5c:62:
                    03:2d:10:58:ba:0b:38:5e:08:9d:76:29:ab:18:76:
                    fa:19:81:89:ed:b7:35:39:39:c9:69:6f:a7:1a:45:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:CB:5D:B1:D0:3A:61:1E:A9:D1:9B:63:46:CA:20:32:5B:4D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/137597c6-8511-36fa-9625-786097165597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:47:33:8b:6d:48:c4:7c:5a:0d:d4:ea:2b:a7:14:12:9d:ed:
         95:eb:3e:11:b2:75:02:22:f6:65:1c:37:7f:d8:68:28:e8:b0:
         3f:d5:a4:4f:43:98:ce:46:5a:79:c0:53:26:b5:a2:51:31:1c:
         34:31:42:7b:90:3f:b2:b1:95:19:04:fe:c3:2b:da:bd:cc:2a:
         d1:33:73:64:c1:39:e5:9f:a1:58:9a:79:10:3b:53:24:02:90:
         b6:bb:88:a2:af:3d:85:d4:16:fa:09:4a:6e:92:8f:ef:3e:a0:
         c2:3b:08:f4:2c:bb:b7:89:16:8c:90:83:a1:07:b8:89:50:a9:
         5d:2b:f4:9c:62:c9:fe:3e:86:58:56:b4:fc:c5:f1:49:b6:64:
         e5:55:be:e4:b5:28:e1:64:b7:09:82:06:1e:fa:73:8a:97:56:
         58:8e:e9:5a:f6:d5:27:e1:3c:c2:16:e3:cb:4c:98:1a:3f:31:
         9c:4f:15:cb:4d:8e:fe:78:71:ce:6c:44:33:ad:08:c6:dc:30:
         e0:f6:e2:29:51:b0:33:f9:b9:8b:48:a9:ea:dd:ba:0f:df:2c:
         6d:b4:82:6b:de:f7:6b:5c:56:b2:2e:7d:cf:da:18:84:f8:65:
         9b:06:ad:cd:32:8e:e2:8c:c4:f3:34:4c:7d:a4:3d:de:4c:a5:
         bf:0c:ae:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxtnoLkPDEggi8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzNhY2Q0OGEtNTI1MS00NDFlLWFjMDctMzhkYmRlOWRkNWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomyUvGvi7BzMMvbEjC2vVoU0CNPLNpUh/d7+
VyTlKf2pnCcQ7YFhf83/Sf3tY3QskldxfOe7HNTK6ZBBZ6uD82yAlfSuuIlHrRex
zbGwcKIAIWTbDygfmBpfJa10CYIW6JHn/3YOY/CpcDXmxuH/kSbvEKkL13fqjgzd
QQ/gZacyujGyX+icdQZHrkfrv0OT0juhDunrPmxiUIkXIcUx9MR0BOQF8GvjN2ON
SlwJgGv1anDsrry5JzjcCTSdvshoj4kxnKoQqeueuzzDqeJkotLsBalBn5LqRDdP
xB6kXGIDLRBYugs4XgiddimrGHb6GYGJ7bc1OTnJaW+nGkVGhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeUy12x0DphHqnRm2NGyiAyW03fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTM3NTk3YzYtODUxMS0z
NmZhLTk2MjUtNzg2MDk3MTY1NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn3CQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRHM4ttSMR8Wg3U6iunFBKd7ZXrPhGydQIi9mUcN3/YaCjosD/VpE9D
mM5GWnnAUya1olExHDQxQnuQP7KxlRkE/sMr2r3MKtEzc2TBOeWfoViaeRA7UyQC
kLa7iKKvPYXUFvoJSm6Sj+8+oMI7CPQsu7eJFoyQg6EHuIlQqV0r9Jxiyf4+hlhW
tPzF8Um2ZOVVvuS1KOFktwmCBh76c4qXVliO6Vr21SfhPMIW48tMmBo/MZxPFctN
jv54cc5sRDOtCMbcMOD24ilRsDP5uYtIqerdug/fLG20gmve92tcVrIufc/aGIT4
ZZsGrc0yjuKMxPM0TH2kPd5Mpb8Mrs0=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:54 2026 by rpki-client