Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa
File:                     a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa (raw, json)
Hash identifier:          dqVeEoeZAju1t/IjjH2Bghs9rAatQC0Q42vpehUfWfA=
Subject key identifier:   B4:7D:D7:94:74:B3:3C:0A:B3:3C:FD:D0:C9:76:8C:DB:74:F0:B7:DB
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F4328584CD13CA3D9024EBF566EC47580
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     1448
IP address blocks:        156.146.128.0/17 maxlen: 17
                          158.41.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a3:d9:02:4e:bf:56:6e:c4:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=0f398e55-cb87-49c5-a1db-91d653096bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:4c:79:a5:59:a4:2f:1d:f5:83:ce:12:78:
                    0b:9f:d2:62:27:a9:b4:5b:5c:25:2b:6f:d7:08:b2:
                    b7:e0:6a:ae:ca:22:7b:4a:f7:6e:a2:47:cb:b2:e9:
                    4b:b3:c4:82:a3:30:c1:64:b2:58:1e:e4:0c:24:9e:
                    aa:70:d3:bc:20:ad:b9:a6:07:79:94:25:e8:06:a8:
                    70:93:0d:71:7d:a1:b3:c8:dc:08:ad:57:8d:6d:8a:
                    8c:8d:b8:cd:82:38:19:60:a5:57:21:fa:9c:8c:08:
                    93:ad:7b:e9:17:e5:bf:34:9a:66:d6:6f:44:a9:b3:
                    9e:2c:fa:a7:f3:21:6a:40:79:59:72:cc:b9:98:20:
                    17:d4:b1:e6:f0:4f:1c:69:39:8d:e5:28:8b:ba:0c:
                    4c:ab:a4:ce:8f:05:42:87:03:2e:48:24:da:3b:10:
                    78:8f:4b:81:49:41:1c:4f:67:5b:11:a4:fa:a3:5f:
                    8d:b9:a0:9a:b4:27:63:cf:08:f5:80:f6:21:d3:34:
                    e7:8b:43:f1:7b:1e:c0:26:37:10:3e:11:ea:ee:aa:
                    ed:0d:b8:54:9c:a4:9f:09:e1:bc:c1:84:25:46:79:
                    33:36:d6:57:8a:29:6d:a5:26:a2:37:b1:94:a1:64:
                    e2:e4:ee:f9:f1:90:79:ef:41:e5:3e:99:1b:6e:73:
                    a3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7D:D7:94:74:B3:3C:0A:B3:3C:FD:D0:C9:76:8C:DB:74:F0:B7:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.128.0/17
                  158.41.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:af:b0:b4:dd:dd:50:38:76:a1:7a:5b:23:c4:27:ee:86:
         fc:29:97:d4:f6:3d:5a:11:90:47:7e:16:b2:0b:57:97:24:7c:
         19:e9:1c:63:96:4a:b1:f6:17:d5:9b:59:34:2e:eb:9b:f7:aa:
         54:30:f9:05:7c:ca:0e:55:b1:3e:9b:5e:94:1c:bc:cd:4f:2f:
         35:9d:7c:51:58:9c:f4:61:45:7a:da:44:4e:05:0f:eb:8b:88:
         18:f1:b2:63:45:60:cb:e2:ff:2e:80:9c:77:ac:51:af:fa:a6:
         cf:c3:89:26:8e:0b:28:12:e1:9e:4e:ed:85:21:93:72:95:e2:
         da:96:f9:a0:37:1a:86:c7:93:0a:57:5b:7a:cf:14:98:13:8b:
         cc:4e:d6:b0:ee:3d:5d:b7:57:1a:bb:da:c0:c4:79:af:63:1c:
         e1:98:d7:e4:88:83:72:eb:77:99:74:80:30:73:0f:14:c1:f3:
         ae:c3:c4:18:fd:ef:6a:b0:a4:1e:da:1d:c9:b6:ff:de:44:4a:
         67:bb:1c:66:33:68:4e:7d:85:47:dd:4a:50:16:51:b6:fa:f1:
         89:a0:d0:8d:75:1e:94:3a:b6:ce:9a:a9:6f:80:cf:af:dc:48:
         68:96:e2:1b:cc:6b:9e:84:c3:7f:72:79:33:77:6a:2b:1b:5f:
         15:f8:da:0e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzRPKPZAk6/Vm7EdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5
Yzk1MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
MGYzOThlNTUtY2I4Ny00OWM1LWExZGItOTFkNjUzMDk2YmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVlMeaVZpC8d9YPOEngLn9JiJ6m0W1wlK2/X
CLK34GquyiJ7SvduokfLsulLs8SCozDBZLJYHuQMJJ6qcNO8IK25pgd5lCXoBqhw
kw1xfaGzyNwIrVeNbYqMjbjNgjgZYKVXIfqcjAiTrXvpF+W/NJpm1m9EqbOeLPqn
8yFqQHlZcsy5mCAX1LHm8E8caTmN5SiLugxMq6TOjwVChwMuSCTaOxB4j0uBSUEc
T2dbEaT6o1+NuaCatCdjzwj1gPYh0zTni0Pxex7AJjcQPhHq7qrtDbhUnKSfCeG8
wYQlRnkzNtZXiiltpSaiN7GUoWTi5O758ZB570HlPpkbbnOj1wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLR915R0szwKszz90Ml2jNt08LfbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3
Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTFlMjE5ZjEtNGU2Zi0z
YjI1LThlNzAtMDBkOTQ5ZmEzOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2
NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl
OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj
OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH
nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAKt9r7C03d1QOHahelsjxCfuhvwpl9T2PVoRkEd+FrILV5ck
fBnpHGOWSrH2F9WbWTQu65v3qlQw+QV8yg5VsT6bXpQcvM1PLzWdfFFYnPRhRXra
RE4FD+uLiBjxsmNFYMvi/y6AnHesUa/6ps/DiSaOCygS4Z5O7YUhk3KV4tqW+aA3
GobHkwpXW3rPFJgTi8xO1rDuPV23Vxq72sDEea9jHOGY1+SIg3Lrd5l0gDBzDxTB
867DxBj972qwpB7aHcm2/95ESme7HGYzaE59hUfdSlAWUbb68Ymg0I11HpQ6ts6a
qW+Az6/cSGiW4hvMa56Ew39yeTN3aisbXxX42g4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:53 2026 by rpki-client