Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/dfd3d048-8bdd-310b-bb35-6af01226903d.roa
File:                     dfd3d048-8bdd-310b-bb35-6af01226903d.roa (raw, json)
Hash identifier:          MESeTwr3LlxU63tqrEmcR1uIFaf/fnkpazejlbVSH+0=
Subject key identifier:   6B:BB:DC:FA:86:EF:BF:B0:C1:D5:89:21:F8:A0:37:56:D8:0F:73:80
Certificate issuer:       /CN=4e393a43-f67b-4eae-87ba-065de2fc159d
Certificate serial:       010D0C9F4328584CDF3249B4598A749A4FE0EE20
Authority key identifier: 15:95:98:E5:49:A3:D6:8F:5C:57:47:01:92:DD:BA:96:7C:1A:B7:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/dfd3d048-8bdd-310b-bb35-6af01226903d.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     63399
IP address blocks:        207.189.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:49:b4:59:8a:74:9a:4f:e0:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e393a43-f67b-4eae-87ba-065de2fc159d
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=a3b98f3f-7276-4213-9967-e578c24598d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:98:d7:b8:26:ce:fc:50:5f:6c:5c:8b:b7:
                    68:97:fd:d2:73:c9:30:c5:80:88:a8:d1:51:e8:a3:
                    e1:5d:a4:56:bc:c4:e2:8e:74:c9:18:ef:cc:27:8c:
                    1b:47:ad:cb:95:df:ae:1b:33:61:76:b0:ff:d3:81:
                    43:bb:c2:1b:e6:90:0b:5c:25:ff:b9:fa:0b:41:8e:
                    05:dc:c3:2a:ab:b6:94:23:79:ee:2e:65:dc:98:b6:
                    fc:16:dc:3f:66:1b:26:56:b9:26:20:bb:30:d5:1d:
                    ec:51:90:7e:52:2b:0b:71:f3:51:f6:20:55:7e:8e:
                    82:5f:58:cc:8c:dd:c0:9b:c3:61:27:94:bc:c1:98:
                    39:11:c1:f8:f6:0c:f2:06:55:db:9b:0f:1f:28:6c:
                    5c:08:07:a0:65:39:0c:0e:f2:a6:8a:ee:ea:ae:af:
                    6e:bb:71:29:72:2d:27:ee:8e:22:95:ec:c0:67:5c:
                    bd:a0:a5:eb:3e:1b:65:c4:0d:68:db:46:1a:fe:91:
                    88:8a:58:18:78:13:96:56:a0:60:78:13:10:6e:a7:
                    95:2c:96:fe:06:8c:2e:5a:b9:e4:f4:5c:45:f5:79:
                    94:39:71:36:20:89:e6:da:74:08:f6:29:cb:81:e2:
                    ee:57:da:9f:32:ac:12:cd:73:7a:c0:7e:62:1a:0a:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:DC:FA:86:EF:BF:B0:C1:D5:89:21:F8:A0:37:56:D8:0F:73:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/dfd3d048-8bdd-310b-bb35-6af01226903d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.crl

            X509v3 Authority Key Identifier:
                keyid:15:95:98:E5:49:A3:D6:8F:5C:57:47:01:92:DD:BA:96:7C:1A:B7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.189.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:dc:73:fe:bd:1d:23:40:44:f4:56:c3:a1:60:48:5c:d3:
         41:f6:c6:97:c7:9e:4c:56:7d:3e:ba:73:62:c5:fa:c4:7b:07:
         fb:ab:3d:2b:9f:6c:a2:e1:36:bc:3f:f6:5e:95:1a:de:a7:7b:
         4e:13:05:d0:44:6d:9a:a8:49:fe:bb:ea:ef:f8:f3:60:b4:b2:
         c5:e7:d1:c3:7c:cb:c6:4c:56:10:9d:4f:34:f4:3d:41:11:0b:
         b0:04:f0:6a:1f:3b:ce:af:aa:06:4f:c0:08:6c:be:8b:75:24:
         84:17:c7:be:88:d6:d4:c9:2c:bc:24:21:40:24:46:5c:ac:5e:
         ca:45:5c:e2:ee:bb:07:43:af:15:d1:fe:7b:75:da:38:cf:3e:
         2d:2e:1d:e1:00:a2:da:10:5b:aa:73:71:73:7c:2e:b9:f1:a2:
         d3:04:c5:51:b7:3f:a9:9a:2e:57:2b:37:22:42:50:7e:25:47:
         27:a2:d2:ee:b0:8c:56:c5:ab:98:cd:77:a5:b9:14:e7:60:ad:
         29:28:fa:4e:5e:28:4c:9c:ce:d5:5b:80:95:aa:8f:f3:78:8e:
         8e:61:b6:f8:1c:b8:17:20:5f:57:5b:63:29:94:bf:72:1e:63:
         02:49:b0:7f:9a:22:bf:19:31:5c:d6:20:17:2e:f3:e4:1c:a2:
         ab:dd:67:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMkm0WYp0mk/g7iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUzOTNhNDMtZjY3Yi00ZWFlLTg3YmEtMDY1ZGUyZmMx
NTlkMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
YTNiOThmM2YtNzI3Ni00MjEzLTk5NjctZTU3OGMyNDU5OGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgmY17gmzvxQX2xci7dol/3Sc8kwxYCIqNFR
6KPhXaRWvMTijnTJGO/MJ4wbR63Lld+uGzNhdrD/04FDu8Ib5pALXCX/ufoLQY4F
3MMqq7aUI3nuLmXcmLb8Ftw/ZhsmVrkmILsw1R3sUZB+UisLcfNR9iBVfo6CX1jM
jN3Am8NhJ5S8wZg5EcH49gzyBlXbmw8fKGxcCAegZTkMDvKmiu7qrq9uu3Epci0n
7o4ilezAZ1y9oKXrPhtlxA1o20Ya/pGIilgYeBOWVqBgeBMQbqeVLJb+BowuWrnk
9FxF9XmUOXE2IInm2nQI9inLgeLuV9qfMqwSzXN6wH5iGgo14QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGu73PqG77+wwdWJIfigN1bYD3OAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTM5
M2E0My1mNjdiLTRlYWUtODdiYS0wNjVkZTJmYzE1OWQvZGZkM2QwNDgtOGJkZC0z
MTBiLWJiMzUtNmFmMDEyMjY5MDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUzOTNhNDMtZjY3Yi00ZWFlLTg3
YmEtMDY1ZGUyZmMxNTlkLzRlMzkzYTQzLWY2N2ItNGVhZS04N2JhLTA2NWRlMmZj
MTU5ZC5jcmwwHwYDVR0jBBgwFoAUFZWY5Umj1o9cV0cBkt26lnwatwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTM5M2E0My1mNjdiLTRlYWUtODdiYS0wNjVk
ZTJmYzE1OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz72QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+b3HP+vR0jQET0VsOhYEhc00H2xpfHnkxWfT66c2LF+sR7B/urPSuf
bKLhNrw/9l6VGt6ne04TBdBEbZqoSf676u/482C0ssXn0cN8y8ZMVhCdTzT0PUER
C7AE8GofO86vqgZPwAhsvot1JIQXx76I1tTJLLwkIUAkRlysXspFXOLuuwdDrxXR
/nt12jjPPi0uHeEAotoQW6pzcXN8LrnxotMExVG3P6maLlcrNyJCUH4lRyei0u6w
jFbFq5jNd6W5FOdgrSko+k5eKEycztVbgJWqj/N4jo5htvgcuBcgX1dbYymUv3Ie
YwJJsH+aIr8ZMVzWIBcu8+QcoqvdZ/o=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:16 2026 by rpki-client