Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2825ad7-327c-3173-92ef-0dba0cbd2bbf.roa
File:                     c2825ad7-327c-3173-92ef-0dba0cbd2bbf.roa (raw, json)
Hash identifier:          56YRU4Dtt6qMouSBEJzhIljk0gvKZ9yyG0FDfqEPP2E=
Subject key identifier:   CE:3A:92:51:40:D9:DC:A4:9F:3D:D3:DD:40:35:11:39:DC:92:49:DF
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB2156183FE6AC3BCEE3820
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2825ad7-327c-3173-92ef-0dba0cbd2bbf.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        157.137.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:15:61:83:fe:6a:c3:bc:ee:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=0ea6ecb5-fd2f-4d24-bb90-7f8a0d726d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4d:a0:e0:68:c8:b0:91:e2:51:85:64:ed:dc:
                    45:bc:d2:d1:f9:7f:1b:f3:85:9e:98:fc:6d:02:26:
                    a3:a1:2e:90:6f:0b:94:14:3a:ff:c1:81:a4:18:42:
                    dc:fb:6f:4c:65:54:e9:bb:ab:e9:31:e5:c2:76:a9:
                    43:68:bd:a7:bd:23:60:c7:5a:6e:68:03:e7:93:35:
                    33:ff:4e:c4:cd:1d:e2:56:01:9f:09:6c:68:19:9d:
                    b0:65:58:81:ba:1e:6c:06:c5:ac:a4:ed:d6:9a:e4:
                    e3:2b:67:be:9d:8e:7a:9e:94:87:99:ea:6a:2d:27:
                    1c:5b:98:5b:82:6a:c4:20:02:87:42:1b:be:b6:87:
                    99:2c:8e:ca:1c:51:50:15:fa:86:65:83:59:17:cc:
                    91:b9:e2:cd:68:3b:13:79:13:54:75:15:52:36:23:
                    54:a2:b7:80:d3:67:31:80:94:66:09:c7:0e:b9:7d:
                    f2:fb:18:3e:08:5d:33:ec:33:16:10:4b:78:dd:e8:
                    b0:eb:fc:2d:d6:76:de:ed:43:e8:aa:60:2b:d3:40:
                    b3:c2:00:52:2c:0f:a3:8d:67:51:5f:dc:94:bd:60:
                    f3:a4:dc:1f:40:97:aa:a8:e0:69:37:c0:53:df:14:
                    1f:7f:e9:58:c9:8d:74:83:17:36:e3:ca:5f:94:d7:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3A:92:51:40:D9:DC:A4:9F:3D:D3:DD:40:35:11:39:DC:92:49:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2825ad7-327c-3173-92ef-0dba0cbd2bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.137.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:79:d7:fd:db:e2:a0:18:eb:e5:16:3c:5c:81:26:93:32:09:
         10:5e:01:ec:59:f9:49:bf:a7:a4:c2:fe:09:58:5e:8b:24:26:
         34:02:33:87:aa:f1:84:c6:dc:ce:6d:3a:a0:5f:e5:f1:bf:fe:
         b8:ec:0c:c0:f6:ac:8c:cd:32:00:d0:af:07:49:71:95:9d:1a:
         fa:a1:c6:eb:60:84:68:5a:fa:85:ab:75:44:34:0f:37:08:05:
         d3:8f:4b:79:52:be:b9:9a:27:9d:eb:56:ce:eb:6c:f8:34:1f:
         75:ad:03:88:d5:f0:67:be:54:d5:4a:99:00:ce:48:2c:94:ce:
         49:89:42:1e:0c:cd:2b:1a:06:69:53:74:88:aa:c4:da:8d:7e:
         2d:ad:c7:ef:19:98:80:e3:58:38:f0:a4:25:cd:dc:38:2b:ed:
         3f:ae:c5:22:ca:e0:50:37:6d:d9:a4:c3:6c:fd:e5:87:20:cf:
         3f:c8:f2:1c:32:22:08:9b:6a:7f:a4:91:16:43:83:b2:30:a3:
         68:b0:7b:f8:69:1b:64:81:17:db:9d:b9:00:a9:3e:b6:ab:09:
         96:30:c1:33:3c:ed:7e:db:32:87:58:d8:a3:23:14:d1:ea:ad:
         df:dd:bf:43:16:a6:19:39:7f:d8:91:48:35:e9:34:70:3b:bc:
         6a:d4:3d:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shVhg/5qw7zuOCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
MGVhNmVjYjUtZmQyZi00ZDI0LWJiOTAtN2Y4YTBkNzI2ZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh02g4GjIsJHiUYVk7dxFvNLR+X8b84WemPxt
AiajoS6QbwuUFDr/wYGkGELc+29MZVTpu6vpMeXCdqlDaL2nvSNgx1puaAPnkzUz
/07EzR3iVgGfCWxoGZ2wZViBuh5sBsWspO3WmuTjK2e+nY56npSHmepqLSccW5hb
gmrEIAKHQhu+toeZLI7KHFFQFfqGZYNZF8yRueLNaDsTeRNUdRVSNiNUoreA02cx
gJRmCccOuX3y+xg+CF0z7DMWEEt43eiw6/wt1nbe7UPoqmAr00CzwgBSLA+jjWdR
X9yUvWDzpNwfQJeqqOBpN8BT3xQff+lYyY10gxc248pflNf8WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM46klFA2dyknz3T3UA1ETnckknfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzI4MjVhZDctMzI3Yy0z
MTczLTkyZWYtMGRiYTBjYmQyYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGl51/3b4qAY6+UWPFyBJpMyCRBeAexZ+Um/p6TC/glYXoskJjQCM4eq
8YTG3M5tOqBf5fG//rjsDMD2rIzNMgDQrwdJcZWdGvqhxutghGha+oWrdUQ0DzcI
BdOPS3lSvrmaJ53rVs7rbPg0H3WtA4jV8Ge+VNVKmQDOSCyUzkmJQh4MzSsaBmlT
dIiqxNqNfi2tx+8ZmIDjWDjwpCXN3Dgr7T+uxSLK4FA3bdmkw2z95Ycgzz/I8hwy
Igiban+kkRZDg7Iwo2iwe/hpG2SBF9uduQCpPrarCZYwwTM87X7bModY2KMjFNHq
rd/dv0MWphk5f9iRSDXpNHA7vGrUPUU=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:58 2026 by rpki-client