Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
File:                     d546f647-962b-3c0b-af80-2d78bb80fcac.roa (raw, json)
Hash identifier:          JM+zTf7pH0whRawtzPaC11D8wZp1sHiiBR7GggB4A+4=
Subject key identifier:   19:AF:11:76:03:93:B3:E4:21:43:6E:6B:C0:5C:02:00:68:E6:20:2C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D6EDA5682DA4675952C53E8B0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        155.248.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:56:82:da:46:75:95:2c:53:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=d27b1ec7-30c3-4651-ad7e-63e24b262684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:af:30:3d:73:21:59:ce:c5:7d:5e:35:a6:
                    b2:b5:a3:96:85:5c:e5:ec:36:8e:8e:fb:66:15:a7:
                    6b:43:8b:cb:7e:2c:e0:2c:59:44:f5:d6:23:02:16:
                    bd:92:bb:4e:ff:d9:56:7c:76:98:ef:5b:02:74:25:
                    39:9e:3a:fc:76:01:01:a8:35:76:ee:e8:5a:c2:cd:
                    f8:99:d5:7a:c8:e5:9d:00:34:c8:cb:88:e3:36:ec:
                    a5:26:9f:0e:59:8a:41:a1:5e:6f:e5:92:8a:5c:b9:
                    68:e3:17:82:8a:24:c4:c4:fd:4b:fd:a2:6e:24:31:
                    30:3e:80:9d:e8:73:2a:db:be:3c:09:eb:61:3a:b1:
                    a9:d6:dd:2a:d0:78:fd:09:dd:f5:f2:9d:04:9e:dc:
                    e1:59:88:72:6f:4b:d8:41:0f:8f:be:31:d6:55:3c:
                    9a:d3:bf:93:f1:a7:ca:d8:6d:47:1b:bb:4e:dd:c6:
                    2e:63:1b:c0:6e:ce:6d:a0:5e:4d:87:38:ab:92:83:
                    44:ac:af:ed:59:83:2b:ed:98:9e:f2:db:88:24:74:
                    1d:fd:a9:2b:ef:cf:1f:aa:7d:9b:a8:5c:c3:e9:55:
                    19:d7:20:fb:00:40:49:87:8b:e0:b4:d2:84:74:5c:
                    f8:e5:18:8d:5e:b5:9d:12:61:5d:dd:1e:9f:b1:a3:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:11:76:03:93:B3:E4:21:43:6E:6B:C0:5C:02:00:68:E6:20:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.248.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:0d:de:a1:38:24:44:a2:bf:75:c3:43:b6:51:63:4e:71:
         67:95:51:f0:a2:f8:29:dd:3b:55:33:50:bb:2e:3a:92:2a:d9:
         9c:a9:bb:e1:ff:69:2a:8c:1a:0f:27:22:23:f7:ff:33:da:20:
         f6:4c:93:81:e1:98:8e:ae:3b:2c:9e:4d:b2:20:17:aa:74:45:
         fa:76:fa:44:2c:1d:49:80:c9:e3:7a:7a:1d:0f:cb:43:40:fa:
         fd:f9:34:df:a5:ec:6a:66:da:e2:0c:41:b6:a8:fe:f9:0e:0b:
         3d:75:c2:98:6e:f9:e6:ae:02:1a:e9:a1:d9:66:6c:9a:64:c5:
         f5:18:d5:9e:ef:39:3c:b1:70:48:75:6b:a9:7f:22:7a:b4:23:
         57:c2:2a:38:07:ec:ed:51:02:44:d1:97:41:ee:84:4c:ad:4c:
         c4:38:41:9b:4e:ce:30:c7:eb:c8:34:f1:9e:a7:26:d1:15:b8:
         da:c6:8c:fd:bf:2b:02:1e:3b:d4:c0:80:1c:b2:9d:12:a6:ed:
         22:9c:82:a0:5d:ad:fa:df:45:70:98:8c:97:22:4f:db:da:8b:
         d5:2a:4f:4a:e3:65:6f:ac:50:98:14:41:76:eb:44:24:ca:bd:
         16:73:80:5f:66:17:95:c6:09:73:b7:c8:48:36:6d:68:be:66:
         70:16:67:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2laC2kZ1lSxT6LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZDI3YjFlYzctMzBjMy00NjUxLWFkN2UtNjNlMjRiMjYyNjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5SvMD1zIVnOxX1eNaaytaOWhVzl7DaOjvtm
FadrQ4vLfizgLFlE9dYjAha9krtO/9lWfHaY71sCdCU5njr8dgEBqDV27uhaws34
mdV6yOWdADTIy4jjNuylJp8OWYpBoV5v5ZKKXLlo4xeCiiTExP1L/aJuJDEwPoCd
6HMq2748CethOrGp1t0q0Hj9Cd318p0EntzhWYhyb0vYQQ+PvjHWVTya07+T8afK
2G1HG7tO3cYuYxvAbs5toF5NhzirkoNErK/tWYMr7Zie8tuIJHQd/akr788fqn2b
qFzD6VUZ1yD7AEBJh4vgtNKEdFz45RiNXrWdEmFd3R6fsaNflwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmvEXYDk7PkIUNua8BcAgBo5iAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDU0NmY2NDctOTYyYi0z
YzBiLWFmODAtMmQ3OGJiODBmY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/jwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6uDd6hOCREor91w0O2UWNOcWeVUfCi+CndO1UzULsuOpIq2Zypu+H/
aSqMGg8nIiP3/zPaIPZMk4HhmI6uOyyeTbIgF6p0Rfp2+kQsHUmAyeN6eh0Py0NA
+v35NN+l7Gpm2uIMQbao/vkOCz11wphu+eauAhrpodlmbJpkxfUY1Z7vOTyxcEh1
a6l/Inq0I1fCKjgH7O1RAkTRl0HuhEytTMQ4QZtOzjDH68g08Z6nJtEVuNrGjP2/
KwIeO9TAgByynRKm7SKcgqBdrfrfRXCYjJciT9vai9UqT0rjZW+sUJgUQXbrRCTK
vRZzgF9mF5XGCXO3yEg2bWi+ZnAWZ4w=
-----END CERTIFICATE-----
Generated at Mon Apr 13 14:36:18 2026 by rpki-client