Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/25e13f76-1c76-348c-aa26-189734dff4ef.roa
File:                     25e13f76-1c76-348c-aa26-189734dff4ef.roa (raw, json)
Hash identifier:          T6BTs3uyIMy8ArVCX2S4gGtl5oxrTD/Ooe4hSIrxxqc=
Subject key identifier:   AB:3D:67:1A:5E:FA:4F:5E:E4:F5:FA:78:54:F2:BB:BB:4C:51:95:D6
Certificate issuer:       /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial:       010D0C9F4328584CEA5CEA00396D45C8B26C7700
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/25e13f76-1c76-348c-aa26-189734dff4ef.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     14127
IP address blocks:        134.199.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:ea:00:39:6d:45:c8:b2:6c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=3df3376d-2527-4e4f-9650-b4b79171894b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a4:dd:cd:bf:25:fc:c8:99:4a:0a:ff:d5:1f:
                    ce:76:70:5e:60:ac:45:a1:12:05:22:c8:58:19:32:
                    12:38:3a:61:90:84:01:85:b4:75:d2:f4:34:e7:4c:
                    28:80:26:55:79:4b:67:19:2f:5c:93:bd:03:5d:64:
                    68:f4:fb:aa:62:80:cd:b8:85:62:02:2c:87:97:49:
                    25:dd:c3:9d:18:d9:c1:15:fe:a5:0a:1a:f4:57:1d:
                    74:0f:2d:6e:45:b0:e4:92:d2:b2:93:8f:58:46:fa:
                    9e:5c:3e:ee:dc:2a:11:fc:b5:dc:28:4e:d5:40:d5:
                    12:34:5e:70:1c:dd:60:56:c5:b5:d2:99:e8:aa:2f:
                    ac:bb:4c:ad:81:51:4c:1d:b9:e8:6f:e6:b1:eb:1b:
                    2a:55:e1:a5:3f:c8:4b:c1:8b:bd:35:8d:1e:69:8c:
                    48:a2:0f:4b:a4:07:35:ea:7a:b4:05:11:80:9a:7b:
                    3c:43:3f:43:5d:9b:0c:d6:96:ce:10:3c:b7:fa:9f:
                    c1:a2:30:04:2e:1d:6a:83:31:5c:49:37:4a:ae:8f:
                    c0:9b:0c:af:51:33:2e:15:64:c1:bb:d6:98:0f:c3:
                    1d:d2:81:25:ed:36:62:9a:86:6f:f9:be:85:16:32:
                    b0:15:1b:99:49:f2:c1:89:28:6d:2b:1d:94:51:7a:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:67:1A:5E:FA:4F:5E:E4:F5:FA:78:54:F2:BB:BB:4C:51:95:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/25e13f76-1c76-348c-aa26-189734dff4ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl

            X509v3 Authority Key Identifier:
                keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:8a:79:dd:7d:d3:bd:c2:78:fe:9e:18:6a:a1:92:c9:6c:
         bc:10:af:2b:0c:1a:a1:5b:78:4c:1b:6d:0f:64:2c:82:e8:01:
         de:4f:47:3b:6a:2b:ea:65:63:cc:09:f7:03:57:32:35:cc:cd:
         f0:ed:9d:17:57:a9:4f:b9:87:dd:76:d9:cd:2a:e2:7d:7d:6c:
         91:e4:76:cf:94:d0:fe:11:69:04:03:32:91:64:f9:9b:41:26:
         c3:db:48:2f:cf:94:98:58:c9:da:8c:11:f4:14:d5:71:d2:18:
         82:4a:cb:48:25:c7:78:5b:e1:9b:42:ca:4b:e7:b6:c2:d5:d4:
         50:65:bf:15:59:f2:ed:b5:97:a1:e1:d7:a2:74:fa:e0:2c:24:
         bb:24:be:5e:be:71:4a:d1:9a:c6:71:52:72:5d:c4:66:73:7f:
         ee:3a:08:d6:fe:53:c2:7c:41:c4:7a:10:fd:0f:7a:40:e8:37:
         ae:f1:42:b7:b2:4d:c6:4e:84:73:4d:24:fa:f2:67:95:c9:6b:
         dd:f5:94:3b:ee:83:16:44:09:14:f9:0f:70:19:37:30:52:00:
         95:e6:dd:13:54:50:a3:29:e8:29:39:05:de:b7:5a:1f:90:08:
         37:94:79:60:0a:27:d5:03:7b:36:15:0e:cc:df:65:5e:41:25:
         98:2a:53:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXOoAOW1FyLJsdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJhNTcxNDAtYTM2OS00YTNhLThlZGMtNjk3MzJkMTc5
OTI0MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
M2RmMzM3NmQtMjUyNy00ZTRmLTk2NTAtYjRiNzkxNzE4OTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KTdzb8l/MiZSgr/1R/OdnBeYKxFoRIFIshY
GTISODphkIQBhbR10vQ050wogCZVeUtnGS9ck70DXWRo9PuqYoDNuIViAiyHl0kl
3cOdGNnBFf6lChr0Vx10Dy1uRbDkktKyk49YRvqeXD7u3CoR/LXcKE7VQNUSNF5w
HN1gVsW10pnoqi+su0ytgVFMHbnob+ax6xsqVeGlP8hLwYu9NY0eaYxIog9LpAc1
6nq0BRGAmns8Qz9DXZsM1pbOEDy3+p/BojAELh1qgzFcSTdKro/AmwyvUTMuFWTB
u9aYD8Md0oEl7TZimoZv+b6FFjKwFRuZSfLBiShtKx2UUXrnJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKs9Zxpe+k9e5PX6eFTyu7tMUZXWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYmE1
NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQxNzk5MjQvMjVlMTNmNzYtMWM3Ni0z
NDhjLWFhMjYtMTg5NzM0ZGZmNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmJhNTcxNDAtYTM2OS00YTNhLThl
ZGMtNjk3MzJkMTc5OTI0L2ZiYTU3MTQwLWEzNjktNGEzYS04ZWRjLTY5NzMyZDE3
OTkyNC5jcmwwHwYDVR0jBBgwFoAUDWL403FgbahEpHyrzghxZgeTlQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mYmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTcz
MmQxNzk5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsc1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo1inndfdO9wnj+nhhqoZLJbLwQrysMGqFbeEwbbQ9kLILoAd5PRztq
K+plY8wJ9wNXMjXMzfDtnRdXqU+5h9122c0q4n19bJHkds+U0P4RaQQDMpFk+ZtB
JsPbSC/PlJhYydqMEfQU1XHSGIJKy0glx3hb4ZtCykvntsLV1FBlvxVZ8u21l6Hh
16J0+uAsJLskvl6+cUrRmsZxUnJdxGZzf+46CNb+U8J8QcR6EP0PekDoN67xQrey
TcZOhHNNJPryZ5XJa931lDvugxZECRT5D3AZNzBSAJXm3RNUUKMp6Ck5Bd63Wh+Q
CDeUeWAKJ9UDezYVDszfZV5BJZgqUxs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:19 2026 by rpki-client