Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa
File:                     4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa (raw, json)
Hash identifier:          JzWI98m4rIIYY/2ikF+IT6HHwxyiKVg1u9G1i4JAddk=
Subject key identifier:   41:27:97:A4:38:3D:F3:30:B0:82:5C:E3:E2:FE:DE:FD:18:F4:14:B0
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAFBC817D647C3B38F4FCE200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        159.54.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:81:7d:64:7c:3b:38:f4:fc:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=59384d26-7ac2-47f3-81c6-1c8d1109504d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:f6:e2:03:99:d7:6f:77:32:23:fa:14:20:
                    52:38:31:90:b9:2a:6d:c7:3b:ca:21:b9:eb:d8:36:
                    d8:6c:1c:a1:41:93:4b:5e:ec:e7:d7:17:8c:7c:23:
                    45:15:69:eb:f1:22:75:0c:d1:4e:33:fa:50:a8:95:
                    f8:70:34:dd:ec:8d:9d:79:78:5f:7a:e2:57:a5:67:
                    70:87:7e:95:35:64:a3:de:56:ec:8a:d1:92:f1:09:
                    f2:d0:3d:23:60:60:9f:da:72:90:81:f7:51:2b:ec:
                    19:17:a7:87:e0:05:cf:62:42:bc:ad:6d:fc:b9:26:
                    5c:60:e1:6f:e7:61:69:2a:ea:55:5a:f3:75:fa:2f:
                    7d:2b:3d:72:b6:57:23:7c:89:d2:64:d2:0d:73:20:
                    a3:bd:b9:58:23:46:c5:93:71:0a:b6:0c:18:0e:da:
                    8c:f6:45:d6:80:3b:6f:fc:9f:41:10:ab:cd:b0:33:
                    c6:5f:ab:97:4b:75:d5:36:64:a6:e2:76:85:dd:e9:
                    bb:b5:71:69:ab:2b:d9:15:cb:7f:26:11:a6:a3:00:
                    a3:65:e8:ef:27:76:57:79:fc:dd:a5:08:d5:cc:1e:
                    f7:25:0a:59:c4:94:49:e3:57:fe:aa:05:3a:94:20:
                    5f:cf:75:49:49:96:40:54:8c:58:18:e7:49:b4:7a:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:97:A4:38:3D:F3:30:B0:82:5C:E3:E2:FE:DE:FD:18:F4:14:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fea92c2-ab8d-3185-8f0c-7066bae8cd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.54.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:18:79:9d:0b:ef:03:f1:07:1f:50:d7:17:3a:7a:9a:b4:d8:
         b5:e9:fc:d4:df:6f:38:80:0b:07:e3:3b:1a:b7:7c:30:78:1a:
         0e:f1:ce:0e:11:de:60:d5:38:ad:b8:0e:7c:2e:98:63:0f:4b:
         30:94:38:ac:f5:ef:b3:c0:fb:a9:24:a4:65:95:51:da:38:db:
         0f:6e:3b:47:d6:f8:51:c3:53:6c:cf:a6:8c:41:13:47:22:31:
         e3:dc:5f:ba:ad:29:29:61:ee:f4:c7:21:95:c9:0f:04:a6:75:
         cc:f5:90:35:cb:2d:9d:e9:42:b7:cb:57:a3:01:5f:79:d9:3d:
         c2:bb:38:61:62:e6:01:3f:c9:09:2d:77:02:ce:93:74:a4:0a:
         44:5f:cd:12:4d:a9:d5:a1:8f:f5:e3:49:8b:c3:57:a0:5e:4f:
         e6:23:a3:96:d3:17:f3:25:dc:66:f3:9a:03:54:0e:9b:1d:4a:
         6a:e3:5c:43:6f:22:c1:92:06:99:11:a5:32:de:d6:82:6f:b6:
         eb:1b:19:c1:eb:64:8c:a6:1e:d2:f7:8f:62:ef:ca:a7:83:22:
         ed:40:4d:f6:59:d8:d9:ba:7b:9c:4a:56:33:7f:03:8e:77:1a:
         7b:57:2d:98:69:86:22:93:4f:bf:10:f4:ad:54:13:41:af:15:
         f5:94:ec:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIF9ZHw7OPT84gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NTkzODRkMjYtN2FjMi00N2YzLTgxYzYtMWM4ZDExMDk1MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s/24gOZ1293MiP6FCBSODGQuSptxzvKIbnr
2DbYbByhQZNLXuzn1xeMfCNFFWnr8SJ1DNFOM/pQqJX4cDTd7I2deXhfeuJXpWdw
h36VNWSj3lbsitGS8Qny0D0jYGCf2nKQgfdRK+wZF6eH4AXPYkK8rW38uSZcYOFv
52FpKupVWvN1+i99Kz1ytlcjfInSZNINcyCjvblYI0bFk3EKtgwYDtqM9kXWgDtv
/J9BEKvNsDPGX6uXS3XVNmSm4naF3em7tXFpqyvZFct/JhGmowCjZejvJ3ZXefzd
pQjVzB73JQpZxJRJ41f+qgU6lCBfz3VJSZZAVIxYGOdJtHqJAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEnl6Q4PfMwsIJc4+L+3v0Y9BSwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZlYTkyYzItYWI4ZC0z
MTg1LThmMGMtNzA2NmJhZThjZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnzZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEYeZ0L7wPxBx9Q1xc6epq02LXp/NTfbziACwfjOxq3fDB4Gg7xzg4R
3mDVOK24DnwumGMPSzCUOKz177PA+6kkpGWVUdo42w9uO0fW+FHDU2zPpoxBE0ci
MePcX7qtKSlh7vTHIZXJDwSmdcz1kDXLLZ3pQrfLV6MBX3nZPcK7OGFi5gE/yQkt
dwLOk3SkCkRfzRJNqdWhj/XjSYvDV6BeT+Yjo5bTF/Ml3GbzmgNUDpsdSmrjXENv
IsGSBpkRpTLe1oJvtusbGcHrZIymHtL3j2LvyqeDIu1ATfZZ2Nm6e5xKVjN/A453
GntXLZhphiKTT78Q9K1UE0GvFfWU7Kg=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:21 2026 by rpki-client