Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa
File:                     df4a0f30-4592-38ec-8796-28a0bfedf387.roa (raw, json)
Hash identifier:          GUdR1T6Kt6CXQGkbfM5xEG+Co7tzz2Slk1PKXSsoJm8=
Subject key identifier:   4B:F8:91:CC:FE:02:F6:94:26:FD:07:88:61:76:B9:A9:96:6D:ED:EC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBF1755093E7F61CD7486FA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     31898
IP address blocks:        129.145.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:55:09:3e:7f:61:cd:74:86:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=819e1810-12d7-4692-8c6b-f2eee6efc460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:b0:5d:12:04:ac:c0:b8:cf:89:70:7a:7e:
                    19:28:1c:63:64:46:c9:30:2e:e9:3a:7c:c0:46:41:
                    52:91:86:e6:af:6b:c3:b1:51:0d:f3:11:76:2a:e1:
                    f1:ab:74:11:46:a4:06:6e:04:3d:5e:b5:cf:9d:ec:
                    8d:6c:fc:ce:c6:32:db:dc:27:ee:e2:79:3f:3c:d2:
                    06:ca:e8:b9:44:92:d0:83:58:7e:7b:b2:ef:c6:08:
                    18:c2:67:65:f3:2a:43:ce:85:d0:9d:16:0c:03:12:
                    c9:3b:c0:de:47:c3:b2:5a:d6:e1:eb:00:ae:a9:fb:
                    e9:5f:5f:c3:3f:07:99:16:8e:fe:b4:67:30:c0:aa:
                    0d:34:02:63:9c:ab:f2:6b:34:67:ed:15:7a:77:aa:
                    a5:d8:e9:eb:f5:98:65:c9:09:a9:3c:26:cf:b2:dc:
                    a0:e4:2d:36:28:4f:f5:03:c7:f7:71:d6:c5:80:bc:
                    66:54:3f:2f:93:58:ed:fa:71:1e:d3:32:14:17:b4:
                    31:53:e5:0d:d5:11:87:50:50:d5:49:38:d2:d8:bc:
                    5b:b0:a2:a6:ed:23:bc:11:67:23:e9:43:5a:a5:c9:
                    2f:02:d3:01:f9:4b:af:a7:f0:ef:32:31:f0:e9:ce:
                    26:09:ab:2c:60:f5:e4:e1:2c:8d:9c:8b:f0:ca:8d:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:91:CC:FE:02:F6:94:26:FD:07:88:61:76:B9:A9:96:6D:ED:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.145.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:63:f7:03:e3:9f:58:47:37:fc:f6:3f:0d:d2:48:d3:ef:12:
         50:f2:e8:e1:f3:02:b4:d0:40:b1:9c:27:cf:a1:0a:f6:c8:c2:
         0c:5d:5a:50:25:eb:7a:8d:d8:4d:87:c3:86:51:06:d9:b1:19:
         00:0f:99:48:14:14:18:1b:ab:bf:e8:1c:02:7e:5e:2a:55:40:
         1f:3f:4d:9b:b9:d8:46:24:70:91:c5:d1:2e:46:c1:4d:fb:30:
         d2:e1:0a:5e:ad:53:ee:5d:b5:bf:e5:42:df:91:12:f2:01:ea:
         11:b7:4d:88:5d:56:42:f1:a9:d9:88:53:f9:4c:c9:23:2e:48:
         e0:79:ee:d7:3e:83:63:04:07:17:4f:7a:77:aa:ca:e5:52:13:
         29:0e:9b:d3:e5:c3:03:56:de:51:a7:8d:01:df:5e:ca:05:07:
         9c:c5:e0:1d:86:45:01:71:62:f1:b1:c7:fa:31:1d:2a:3e:97:
         e9:aa:c3:69:d8:9e:b2:37:b1:ab:e2:50:cb:c3:9d:2f:62:e4:
         ba:99:f0:26:cd:48:73:38:e2:5c:0d:50:11:de:1d:16:ee:71:
         0e:50:92:18:77:04:65:f5:35:a5:df:1f:f6:e1:f3:47:c3:50:
         8a:69:8d:2f:8b:6e:bb:be:64:3d:db:b6:d4:1f:73:3f:d2:54:
         72:ed:fb:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1UJPn9hzXSG+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
ODE5ZTE4MTAtMTJkNy00NjkyLThjNmItZjJlZWU2ZWZjNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/2wXRIErMC4z4lwen4ZKBxjZEbJMC7pOnzA
RkFSkYbmr2vDsVEN8xF2KuHxq3QRRqQGbgQ9XrXPneyNbPzOxjLb3Cfu4nk/PNIG
yui5RJLQg1h+e7LvxggYwmdl8ypDzoXQnRYMAxLJO8DeR8OyWtbh6wCuqfvpX1/D
PweZFo7+tGcwwKoNNAJjnKvyazRn7RV6d6ql2Onr9ZhlyQmpPCbPstyg5C02KE/1
A8f3cdbFgLxmVD8vk1jt+nEe0zIUF7QxU+UN1RGHUFDVSTjS2LxbsKKm7SO8EWcj
6UNapckvAtMB+Uuvp/DvMjHw6c4mCassYPXk4SyNnIvwyo0rbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEv4kcz+AvaUJv0HiGF2uamWbe3sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGY0YTBmMzAtNDU5Mi0z
OGVjLTg3OTYtMjhhMGJmZWRmMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVj9wPjn1hHN/z2Pw3SSNPvElDy6OHzArTQQLGcJ8+hCvbIwgxdWlAl
63qN2E2Hw4ZRBtmxGQAPmUgUFBgbq7/oHAJ+XipVQB8/TZu52EYkcJHF0S5GwU37
MNLhCl6tU+5dtb/lQt+REvIB6hG3TYhdVkLxqdmIU/lMySMuSOB57tc+g2MEBxdP
eneqyuVSEykOm9PlwwNW3lGnjQHfXsoFB5zF4B2GRQFxYvGxx/oxHSo+l+mqw2nY
nrI3saviUMvDnS9i5LqZ8CbNSHM44lwNUBHeHRbucQ5Qkhh3BGX1NaXfH/bh80fD
UIppjS+Lbru+ZD3bttQfcz/SVHLt+68=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:33 2026 by rpki-client