Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
File:                     2bd54a4b-cf66-3ad7-b279-8094b32af154.roa (raw, json)
Hash identifier:          9XmmEI9lT7WLBP0H/eG2zXPiZxlEsy1AQErxWQgK2Vs=
Subject key identifier:   6C:5B:A2:ED:4B:DB:C3:47:0B:17:A6:2C:4B:9A:3A:BD:20:39:00:B8
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584CD4075A2528F2CE32160FA100
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     47050
IP address blocks:        173.224.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:5a:25:28:f2:ce:32:16:0f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=01884ab4-88b6-47ec-bad4-ec522a997af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:c1:cd:8c:23:39:5e:63:c6:ce:ef:2c:3f:
                    48:a8:f6:57:1d:55:ab:27:d1:a5:39:e5:0f:0c:58:
                    45:0a:1c:2c:ff:bb:06:84:8e:e5:d0:0c:23:1a:7a:
                    7d:2a:cf:eb:af:ef:f9:5c:d3:66:9d:1d:2c:9e:0b:
                    47:07:18:b7:e5:c1:40:01:30:0e:0e:a2:d1:0a:a0:
                    9b:23:30:9f:3e:cd:8b:bd:57:13:72:19:be:8a:4d:
                    1e:f9:69:06:e6:d7:af:15:7c:e5:ed:91:50:d7:a5:
                    ad:61:1c:80:a5:96:2b:45:58:e7:3f:8b:a6:85:de:
                    d2:06:8b:f7:19:7d:e4:d0:92:f1:54:9d:32:7d:ee:
                    30:0c:be:d6:29:bc:d3:df:21:36:cc:00:5f:98:0c:
                    aa:20:87:ee:af:99:a9:eb:3c:ca:18:21:71:5d:70:
                    2c:73:85:96:b4:b0:0d:64:af:07:28:99:7a:f6:e4:
                    9d:f6:07:49:1c:75:f3:13:ed:11:18:36:a3:d3:cf:
                    7f:9e:81:96:b0:8d:9d:cf:49:8c:92:60:e2:14:62:
                    94:32:9f:64:35:ca:85:3d:39:83:45:87:12:7b:96:
                    b3:ec:4d:c9:5b:67:07:0a:9a:d5:a2:d7:81:6c:ce:
                    87:54:7b:90:99:da:f1:87:62:37:07:12:e0:56:31:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:A2:ED:4B:DB:C3:47:0B:17:A6:2C:4B:9A:3A:BD:20:39:00:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:64:7e:0a:b1:19:6f:a9:e8:ee:2f:e3:45:11:f5:a0:09:
         8e:2e:1e:1d:57:83:5f:12:ea:f5:a0:ec:40:e3:b4:01:30:d4:
         7f:f3:4f:06:cb:37:df:71:ee:4b:33:03:c9:aa:17:a0:9b:fa:
         b3:7c:e1:0b:fe:26:4f:c3:81:76:9f:37:a9:f7:66:13:66:05:
         59:5c:9c:1c:f7:25:3b:67:71:44:8a:5f:54:1d:ab:39:77:e4:
         03:2c:7d:9e:d5:af:02:4f:3f:4a:bf:1a:40:49:59:2e:5f:eb:
         38:7a:44:ab:cc:58:5d:5c:07:1d:7c:14:78:75:f2:f3:2b:f2:
         1a:61:3c:dc:8c:45:e5:16:49:a4:0a:9a:87:04:c9:69:fd:a8:
         b3:43:f1:36:d7:c8:17:61:bd:bf:20:0a:36:b3:c5:f7:1d:23:
         64:7e:f6:dc:02:cb:ad:9e:3d:ae:30:33:d2:d9:9f:d1:c9:57:
         49:f6:c3:3c:be:be:14:97:3f:aa:11:4b:ae:2c:5a:fa:96:c5:
         ec:51:c6:51:34:05:7e:dd:36:fa:84:2a:da:e8:67:de:fa:ec:
         a0:9b:e8:24:78:ab:fc:52:2a:45:84:e9:bf:08:4f:6c:34:8a:
         0b:64:ac:3b:98:f6:af:49:b2:a0:c5:84:78:f7:52:34:58:16:
         c1:3d:93:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB1olKPLOMhYPoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4
OTcwMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
MDE4ODRhYjQtODhiNi00N2VjLWJhZDQtZWM1MjJhOTk3YWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUDBzYwjOV5jxs7vLD9IqPZXHVWrJ9GlOeUP
DFhFChws/7sGhI7l0AwjGnp9Ks/rr+/5XNNmnR0sngtHBxi35cFAATAODqLRCqCb
IzCfPs2LvVcTchm+ik0e+WkG5tevFXzl7ZFQ16WtYRyApZYrRVjnP4umhd7SBov3
GX3k0JLxVJ0yfe4wDL7WKbzT3yE2zABfmAyqIIfur5mp6zzKGCFxXXAsc4WWtLAN
ZK8HKJl69uSd9gdJHHXzE+0RGDaj089/noGWsI2dz0mMkmDiFGKUMp9kNcqFPTmD
RYcSe5az7E3JW2cHCprVoteBbM6HVHuQmdrxh2I3BxLgVjH6TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxbou1L28NHCxemLEuaOr0gOQC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm
MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvMmJkNTRhNGItY2Y2Ni0z
YWQ3LWIyNzktODA5NGIzMmFmMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi
ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl
ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm
NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreBXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHSZH4KsRlvqejuL+NFEfWgCY4uHh1Xg18S6vWg7EDjtAEw1H/zTwbL
N99x7kszA8mqF6Cb+rN84Qv+Jk/DgXafN6n3ZhNmBVlcnBz3JTtncUSKX1Qdqzl3
5AMsfZ7VrwJPP0q/GkBJWS5f6zh6RKvMWF1cBx18FHh18vMr8hphPNyMReUWSaQK
mocEyWn9qLND8TbXyBdhvb8gCjazxfcdI2R+9twCy62ePa4wM9LZn9HJV0n2wzy+
vhSXP6oRS64sWvqWxexRxlE0BX7dNvqEKtroZ9767KCb6CR4q/xSKkWE6b8IT2w0
igtkrDuY9q9JsqDFhHj3UjRYFsE9k2k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:21 2026 by rpki-client