Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
File:                     6c278590-b168-3097-9744-916cdc3a0492.roa (raw, json)
Hash identifier:          OJAhF6AtrU2iS2kOAgBq42aSQWGqOBA0k8/t5dgPtqM=
Subject key identifier:   84:7B:90:6E:B3:C9:E3:38:22:A6:CD:ED:7E:32:86:19:56:E0:8B:E6
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584CCBA74EB0CA0043C59EC84600
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     4181
IP address blocks:        146.174.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:4e:b0:ca:00:43:c5:9e:c8:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=83636c68-18cf-4b77-a79a-e9b94c830c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:5e:aa:b7:95:5d:c7:09:d3:d0:ac:55:a6:
                    ed:1e:d5:44:41:ba:b4:e9:d5:4e:fa:e0:1f:3e:23:
                    46:fc:1b:8f:28:91:6e:cc:c0:6f:2d:ce:7d:2f:fa:
                    7c:c2:52:e5:72:77:b0:07:5d:b9:0f:7c:3a:46:30:
                    55:9f:df:8a:1e:2b:f6:d6:79:a1:88:16:63:f6:ca:
                    23:db:14:99:87:57:4b:fc:f8:f8:8f:dc:74:40:a4:
                    7e:e8:ae:2c:87:ca:cf:49:61:45:be:4a:52:0d:96:
                    3b:91:15:94:93:fc:25:d1:ec:fa:36:5a:59:c1:ea:
                    7a:87:eb:4a:7c:5e:e7:78:56:99:6e:b9:70:7f:17:
                    dd:9f:2b:21:6b:d9:94:9e:ed:59:5c:d8:ad:65:46:
                    80:2f:47:36:ce:9c:12:e8:c5:72:60:ee:87:1d:b5:
                    f7:68:29:b4:5f:4a:ae:73:c0:45:32:8e:f6:65:93:
                    f9:98:7b:7b:c7:25:6a:f6:b9:46:59:a9:e2:58:07:
                    66:53:7e:89:0d:07:d1:b9:30:e7:a8:d3:67:6f:2f:
                    36:dc:75:1b:dc:a2:78:8c:9e:a0:39:e6:64:ad:25:
                    ce:4a:9b:4d:a5:61:71:a7:d4:42:e6:93:dc:71:d6:
                    5e:23:3a:19:74:70:d2:1f:06:90:5c:03:22:f7:b6:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:90:6E:B3:C9:E3:38:22:A6:CD:ED:7E:32:86:19:56:E0:8B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.174.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:dd:a8:b1:b9:4b:ba:ee:66:15:06:e5:c2:fd:61:e1:be:
         e7:27:fd:70:7d:66:a9:b5:ec:5e:d2:5e:12:63:bc:99:0c:9a:
         58:e3:c6:3c:7a:40:47:3b:d6:c5:31:69:0d:09:e6:ed:fd:e6:
         24:12:48:09:73:1a:b6:f9:13:dd:a5:62:e6:8a:99:dc:1f:3c:
         d1:48:e1:38:57:a5:68:67:73:f8:76:e7:3f:80:5e:dc:5a:dd:
         d8:2b:08:27:bd:79:b5:95:0f:10:bc:cd:7a:58:f2:76:d2:7c:
         3f:41:35:22:7e:3b:6d:89:03:69:b2:78:96:38:f4:f1:08:95:
         10:ef:32:20:dc:33:16:58:cc:26:50:99:c3:cc:75:d1:74:06:
         c7:32:34:cf:33:1f:75:78:28:ce:b7:29:49:5a:98:f4:ac:09:
         3d:c2:58:a2:cd:98:27:72:17:ad:c8:4c:bb:82:21:2a:39:63:
         8a:24:41:09:f1:ea:5d:c5:a9:64:f3:cd:1d:ce:7a:a5:be:a9:
         a6:e3:72:1e:e0:0f:21:4a:4b:05:36:85:47:ca:3f:9f:e2:97:
         59:d2:0d:69:11:da:fb:89:32:8a:aa:a1:18:7d:8c:43:36:62:
         8f:46:dc:d6:2d:63:41:af:ec:0a:bf:35:3c:69:eb:d1:a6:11:
         e1:90:4a:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp06wygBDxZ7IRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
ODM2MzZjNjgtMThjZi00Yjc3LWE3OWEtZTliOTRjODMwYzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEheqreVXccJ09CsVabtHtVEQbq06dVO+uAf
PiNG/BuPKJFuzMBvLc59L/p8wlLlcnewB125D3w6RjBVn9+KHiv21nmhiBZj9soj
2xSZh1dL/Pj4j9x0QKR+6K4sh8rPSWFFvkpSDZY7kRWUk/wl0ez6NlpZwep6h+tK
fF7neFaZbrlwfxfdnysha9mUnu1ZXNitZUaAL0c2zpwS6MVyYO6HHbX3aCm0X0qu
c8BFMo72ZZP5mHt7xyVq9rlGWaniWAdmU36JDQfRuTDnqNNnby823HUb3KJ4jJ6g
OeZkrSXOSptNpWFxp9RC5pPccdZeIzoZdHDSHwaQXAMi97Zn5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIR7kG6zyeM4IqbN7X4yhhlW4IvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvNmMyNzg1OTAtYjE2OC0z
MDk3LTk3NDQtOTE2Y2RjM2EwNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkq4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPZ3aixuUu67mYVBuXC/WHhvucn/XB9Zqm17F7SXhJjvJkMmljjxjx6
QEc71sUxaQ0J5u395iQSSAlzGrb5E92lYuaKmdwfPNFI4ThXpWhnc/h25z+AXtxa
3dgrCCe9ebWVDxC8zXpY8nbSfD9BNSJ+O22JA2myeJY49PEIlRDvMiDcMxZYzCZQ
mcPMddF0BscyNM8zH3V4KM63KUlamPSsCT3CWKLNmCdyF63ITLuCISo5Y4okQQnx
6l3FqWTzzR3OeqW+qabjch7gDyFKSwU2hUfKP5/il1nSDWkR2vuJMoqqoRh9jEM2
Yo9G3NYtY0Gv7Aq/NTxp69GmEeGQSnw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:47 2026 by rpki-client