Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6773373-c8fd-35b0-a1df-e39369607ae4.roa
File:                     a6773373-c8fd-35b0-a1df-e39369607ae4.roa (raw, json)
Hash identifier:          NLbRg+oOw3J0kzu8Pg/sGMiE4EoV5+MBOi9FN8njvYg=
Subject key identifier:   F1:16:14:BE:24:EC:36:62:CA:A7:81:B5:F9:FB:8B:C9:21:76:50:33
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE88081FC396BD45781E80500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6773373-c8fd-35b0-a1df-e39369607ae4.roa
Signing time:             Wed 18 Feb 2026 22:01:06 +0000
ROA not before:           Wed 18 Feb 2026 22:01:06 +0000
ROA not after:            Tue 19 May 2026 21:01:06 +0000
asID:                     31898
IP address blocks:        147.224.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:80:81:fc:39:6b:d4:57:81:e8:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 22:01:06 2026 GMT
            Not After : May 19 21:01:06 2026 GMT
        Subject: CN=3516c59b-b1fe-478e-9eef-9207e86f4f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:5b:64:21:48:5d:9a:7e:a4:2f:7d:f8:29:
                    5b:16:30:a8:32:79:1e:02:4e:87:df:79:8f:ab:42:
                    de:f7:8c:a5:05:20:bf:6d:3d:17:cc:45:e9:95:22:
                    ef:33:5e:28:bb:9a:9a:6e:4b:84:6b:77:c1:48:f0:
                    f5:14:9a:32:c0:a9:a1:01:ea:5c:bb:70:59:6d:69:
                    8a:df:46:09:e9:4c:f6:04:c8:a9:6d:24:54:7f:11:
                    46:37:41:52:dc:1a:4c:17:26:c2:81:d9:74:80:ef:
                    b6:54:27:ed:cb:85:25:38:0c:05:fa:eb:ca:52:3a:
                    83:64:22:6c:0c:c5:2a:85:74:35:df:0e:48:24:92:
                    40:88:0f:45:4c:db:72:c6:72:d0:69:c2:17:3d:fd:
                    81:90:0d:ee:0d:e3:4f:52:21:49:cf:6c:49:d7:3a:
                    31:f9:47:1e:61:76:4f:5f:35:a7:dc:76:71:cf:ef:
                    09:52:24:0c:25:1e:9c:bb:97:77:b9:7f:e5:9a:9f:
                    74:68:fd:d6:aa:93:f6:df:d7:9f:02:3b:54:34:07:
                    0c:be:f1:a2:39:6f:ec:cc:22:8c:1d:1c:43:70:3c:
                    a6:ae:aa:04:b9:04:f3:30:e3:96:d8:05:61:5f:98:
                    67:55:5b:f0:ce:93:aa:46:75:86:e5:e6:21:7a:0c:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:16:14:BE:24:EC:36:62:CA:A7:81:B5:F9:FB:8B:C9:21:76:50:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6773373-c8fd-35b0-a1df-e39369607ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.224.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:9d:99:f8:03:72:76:3a:55:6c:10:a3:ef:62:e9:ac:76:
         c6:72:e7:c3:69:98:47:5d:31:8b:99:f9:46:24:b0:8b:ba:27:
         71:1d:04:cb:95:d4:54:93:94:b5:8f:d2:7c:d3:94:76:cb:8b:
         08:b6:d1:ea:c8:50:0e:65:eb:40:65:fb:77:24:f4:1b:cb:c4:
         c4:99:d5:bc:ce:63:32:64:ba:d6:e8:ca:67:1c:cf:7f:b7:98:
         17:bf:a6:19:fc:9a:f9:5b:ca:e8:10:56:2f:dc:a6:a2:dc:43:
         a1:e9:9c:c7:a9:73:79:99:e5:cd:0a:66:e3:e5:26:47:25:1c:
         dc:6d:1e:f2:31:60:44:6c:6f:10:17:f2:d3:6d:d2:9b:03:d7:
         1b:c5:4f:3f:30:f4:1d:b0:b5:49:3e:28:b3:68:a0:85:13:1c:
         90:a1:7b:40:df:cd:11:5d:d1:d9:f8:99:61:08:b5:1f:5b:7d:
         83:04:7b:18:06:be:5c:70:c9:b1:23:40:5e:3c:7c:76:7a:0e:
         02:45:21:4d:e7:49:d8:a5:6c:b4:c6:ec:a1:c5:77:8f:f3:3f:
         01:58:d3:5d:ae:52:76:ae:d2:ad:3c:0f:c2:00:fe:37:87:2d:
         32:cf:db:53:86:33:19:31:0b:3e:9b:80:4d:f7:e9:2f:59:50:
         72:3e:b4:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzogIH8OWvUV4HoBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxODIyMDEwNloXDTI2MDUxOTIxMDEwNlowLzEtMCsGA1UEAxMk
MzUxNmM1OWItYjFmZS00NzhlLTllZWYtOTIwN2U4NmY0ZjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXJbZCFIXZp+pC99+ClbFjCoMnkeAk6H33mP
q0Le94ylBSC/bT0XzEXplSLvM14ou5qabkuEa3fBSPD1FJoywKmhAepcu3BZbWmK
30YJ6Uz2BMipbSRUfxFGN0FS3BpMFybCgdl0gO+2VCfty4UlOAwF+uvKUjqDZCJs
DMUqhXQ13w5IJJJAiA9FTNtyxnLQacIXPf2BkA3uDeNPUiFJz2xJ1zox+UceYXZP
XzWn3HZxz+8JUiQMJR6cu5d3uX/lmp90aP3WqpP239efAjtUNAcMvvGiOW/szCKM
HRxDcDymrqoEuQTzMOOW2AVhX5hnVVvwzpOqRnWG5eYhegwdxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEWFL4k7DZiyqeBtfn7i8khdlAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTY3NzMzNzMtYzhmZC0z
NWIwLWExZGYtZTM5MzY5NjA3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk+AIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQEnZn4A3J2OlVsEKPvYumsdsZy58NpmEddMYuZ+UYksIu6J3EdBMuV
1FSTlLWP0nzTlHbLiwi20erIUA5l60Bl+3ck9BvLxMSZ1bzOYzJkutboymccz3+3
mBe/phn8mvlbyugQVi/cpqLcQ6HpnMepc3mZ5c0KZuPlJkclHNxtHvIxYERsbxAX
8tNt0psD1xvFTz8w9B2wtUk+KLNooIUTHJChe0DfzRFd0dn4mWEItR9bfYMEexgG
vlxwybEjQF48fHZ6DgJFIU3nSdilbLTG7KHFd4/zPwFY012uUnau0q08D8IA/jeH
LTLP21OGMxkxCz6bgE336S9ZUHI+tEM=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:56 2026 by rpki-client