Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fba59d8c-ed11-3a6a-bf2e-280deb5f1be0.roa
File:                     fba59d8c-ed11-3a6a-bf2e-280deb5f1be0.roa (raw, json)
Hash identifier:          bkNAEoFxjbArYPS7O/8pIQkLaQE4VizZBJZov4p3KnE=
Subject key identifier:   2D:51:3D:CF:67:14:A1:10:80:CC:58:C8:0D:00:9B:4F:E8:0E:46:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE57D47E03A4489B94A271EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fba59d8c-ed11-3a6a-bf2e-280deb5f1be0.roa
Signing time:             Tue 17 Feb 2026 20:07:10 +0000
ROA not before:           Tue 17 Feb 2026 20:07:10 +0000
ROA not after:            Mon 18 May 2026 19:07:10 +0000
asID:                     19905
IP address blocks:        173.22.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7d:47:e0:3a:44:89:b9:4a:27:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 17 20:07:10 2026 GMT
            Not After : May 18 19:07:10 2026 GMT
        Subject: CN=0d6533f6-8baa-44d5-90d6-9408e6fee98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:73:48:f2:bc:8b:55:f4:2a:30:4c:5f:94:
                    29:2f:88:9e:a3:4e:7d:16:05:78:38:7c:5f:b6:f6:
                    82:58:d4:8f:cc:ad:1c:c1:10:54:91:1d:64:0e:e8:
                    ca:59:a5:f2:00:19:ce:41:07:39:0b:3a:ef:83:2b:
                    37:a1:3c:51:ab:63:66:2e:fe:40:91:3d:09:65:76:
                    00:87:a4:a3:51:06:c4:5f:fe:03:fc:ff:b2:02:e4:
                    15:9d:f3:d9:67:02:a6:ec:89:27:7e:bd:d6:92:c4:
                    c3:ef:2c:fd:1c:4c:3d:ec:bf:0e:47:21:a0:bd:ea:
                    c5:0a:49:40:58:77:b2:db:ce:ef:43:81:8a:23:fc:
                    f0:71:95:a3:0b:4f:5b:ba:37:d2:11:d4:66:f1:e7:
                    c9:7a:a5:db:ea:39:ce:34:dd:c2:56:61:1a:32:24:
                    6a:17:a5:af:2a:94:b5:c2:28:9c:4d:d3:6e:ae:86:
                    88:8c:73:d8:38:69:da:a9:57:b2:e5:8f:74:67:9a:
                    64:fa:b9:5d:9a:f4:c3:ca:4a:5b:d8:4a:84:c4:d1:
                    c6:dc:86:03:e6:6b:85:ef:fe:28:46:58:81:cf:1b:
                    bb:4a:53:8b:d0:58:cd:79:cf:40:b6:c5:c7:12:de:
                    84:8b:1b:b2:19:c3:25:26:ed:32:29:24:36:fd:43:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:51:3D:CF:67:14:A1:10:80:CC:58:C8:0D:00:9B:4F:E8:0E:46:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fba59d8c-ed11-3a6a-bf2e-280deb5f1be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:c7:05:fa:34:a7:14:11:ad:c0:e3:c0:2d:2f:f1:8c:03:
         cc:a4:75:2f:14:4f:30:d5:b5:8b:0c:25:1e:2d:d7:7d:9e:77:
         d5:10:aa:0f:a8:a9:c4:d0:9e:50:07:07:65:1a:5b:e7:53:ee:
         2a:84:d2:7a:a8:8d:10:db:c2:08:72:7d:51:01:b6:05:50:3f:
         95:fb:75:c1:16:ff:63:e1:0e:9d:52:ed:c1:03:dd:ee:7d:63:
         9d:27:0c:3e:82:f7:bd:16:fe:44:c4:62:ca:e3:93:d8:cf:17:
         79:6e:a2:ea:d1:4e:2a:2e:27:51:91:30:6f:5f:aa:e6:07:f6:
         08:ef:67:76:22:ee:48:2b:5d:26:a3:44:77:46:d4:90:25:4c:
         ca:a5:0c:fb:c6:38:59:47:04:53:7b:39:01:3d:fb:e7:14:ee:
         ab:d4:f6:d5:6e:cd:ca:51:68:f5:f2:02:0c:36:96:e4:26:7b:
         a9:72:77:cd:dd:0f:0f:89:95:77:1c:4b:ea:24:02:95:5a:ef:
         12:2d:ab:c2:9e:42:e8:7d:df:2c:db:66:ab:2c:28:f0:2e:b0:
         d5:a1:fa:95:de:d7:4d:89:ad:d4:5e:e8:c0:a1:c5:16:7a:6e:
         43:b6:46:79:af:81:f6:80:11:a0:62:05:f4:b5:c4:fa:d4:98:
         5f:49:cd:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlfUfgOkSJuUonHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIxNzIwMDcxMFoXDTI2MDUxODE5MDcxMFowLzEtMCsGA1UEAxMk
MGQ2NTMzZjYtOGJhYS00NGQ1LTkwZDYtOTQwOGU2ZmVlOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHBzSPK8i1X0KjBMX5QpL4ieo059FgV4OHxf
tvaCWNSPzK0cwRBUkR1kDujKWaXyABnOQQc5Czrvgys3oTxRq2NmLv5AkT0JZXYA
h6SjUQbEX/4D/P+yAuQVnfPZZwKm7Iknfr3WksTD7yz9HEw97L8ORyGgverFCklA
WHey287vQ4GKI/zwcZWjC09bujfSEdRm8efJeqXb6jnONN3CVmEaMiRqF6WvKpS1
wiicTdNuroaIjHPYOGnaqVey5Y90Z5pk+rldmvTDykpb2EqExNHG3IYD5muF7/4o
RliBzxu7SlOL0FjNec9AtsXHEt6EixuyGcMlJu0yKSQ2/UPM2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1RPc9nFKEQgMxYyA0Am0/oDkYSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmJhNTlkOGMtZWQxMS0z
YTZhLWJmMmUtMjgwZGViNWYxYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6cxwX6NKcUEa3A48AtL/GMA8ykdS8UTzDVtYsMJR4t132ed9UQqg+o
qcTQnlAHB2UaW+dT7iqE0nqojRDbwghyfVEBtgVQP5X7dcEW/2PhDp1S7cED3e59
Y50nDD6C970W/kTEYsrjk9jPF3luourRTiouJ1GRMG9fquYH9gjvZ3Yi7kgrXSaj
RHdG1JAlTMqlDPvGOFlHBFN7OQE9++cU7qvU9tVuzcpRaPXyAgw2luQme6lyd83d
Dw+JlXccS+okApVa7xItq8KeQuh93yzbZqssKPAusNWh+pXe102JrdRe6MChxRZ6
bkO2RnmvgfaAEaBiBfS1xPrUmF9JzSs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:48 2026 by rpki-client