Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa
File:                     48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa (raw, json)
Hash identifier:          JT1pTtaBbs7TlJLqd1sIxFa1AyShToPGEacqZPTEmGU=
Subject key identifier:   25:DE:AD:22:3F:EB:D8:2E:CD:7F:76:00:C9:27:A3:81:9E:A6:F0:04
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584CC07C9DD4A2831C77B9CA6A00
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        170.225.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9d:d4:a2:83:1c:77:b9:ca:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=03fdc276-ea4e-46ee-948f-da8d3a2bfe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:00:86:53:bb:f1:57:84:fe:b4:30:01:a3:
                    9a:c6:98:0f:0c:f3:ee:a0:4d:4f:5b:13:a6:f2:40:
                    4d:bd:8f:9c:ca:ac:76:87:da:8f:cf:12:26:f3:b4:
                    5c:c7:dd:70:5a:26:a3:9c:4a:39:79:33:87:51:81:
                    b5:48:a3:3c:a5:98:67:c6:46:f9:ca:9f:bb:17:f4:
                    30:20:99:45:18:2d:ad:5e:6e:e3:cb:f5:47:83:61:
                    b0:26:58:59:8b:18:7e:21:10:a7:ab:cf:17:a7:f5:
                    5c:e5:96:3c:21:b7:7a:50:58:2f:2e:97:05:6c:f8:
                    86:45:4f:9b:11:9b:14:89:f4:07:f9:b0:18:ea:b3:
                    36:2e:75:e0:06:e4:83:d4:a1:46:db:c0:e1:aa:b7:
                    90:6f:64:71:d1:57:57:8e:b0:8d:67:54:57:a2:b0:
                    59:ba:77:ba:d5:e4:0d:ed:09:1e:4b:e3:db:d8:5b:
                    33:e3:31:f0:bf:7a:83:b2:3e:b7:4d:b7:8f:b0:cc:
                    3b:1b:43:e4:07:91:ef:aa:2a:56:62:c7:b5:de:ec:
                    28:40:eb:dd:d0:dc:1e:94:a8:d9:a2:44:ba:f8:d4:
                    7d:b9:dd:f8:2a:8f:01:39:f9:50:23:5c:ba:8c:64:
                    49:61:ee:95:8a:7b:33:f1:b2:0f:c7:c1:b1:41:dc:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DE:AD:22:3F:EB:D8:2E:CD:7F:76:00:C9:27:A3:81:9E:A6:F0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/48f1c7a9-7c6b-38ee-af5e-03a70ac11bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:19:46:e3:20:22:b3:06:a8:d4:96:ec:fd:86:71:67:78:
         95:b1:77:e9:6b:1e:39:36:96:b7:d8:c3:fa:8c:6f:56:03:01:
         92:36:ff:4c:85:57:c1:a5:c5:1e:48:41:e6:bb:dd:73:20:3d:
         8d:af:09:03:45:36:2a:c1:f8:37:30:8a:f5:69:c6:c6:82:de:
         0e:72:a4:04:c8:3e:f2:a2:de:79:ad:50:5c:c5:a2:e8:66:19:
         14:6e:71:08:c4:b3:21:8a:7f:eb:31:93:8f:d2:e8:79:5e:a8:
         96:fb:3c:e3:ba:32:0f:97:c4:5c:15:d8:20:ea:0e:54:c1:2a:
         e6:9f:50:38:cb:d4:53:97:0e:b9:70:89:9e:4e:4e:06:d0:3e:
         4c:d3:b5:1b:63:eb:cb:15:36:e1:16:3f:11:8b:fb:6d:6e:85:
         45:98:0f:69:b4:93:c6:8b:dc:93:17:8d:d1:62:fc:8e:46:b0:
         93:d2:90:cb:72:40:c7:d0:7b:88:a2:57:0d:8c:1f:98:41:72:
         53:1c:f8:e4:60:13:58:f6:6f:41:d6:8b:fe:15:23:c2:9e:b6:
         3a:9e:06:ba:a9:6f:f6:57:4e:89:97:cc:7c:99:c4:70:d5:32:
         bc:c7:c6:67:8d:17:72:df:09:0d:f5:7b:09:e4:fd:b6:e9:bb:
         c7:51:ef:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzAfJ3UooMcd7nKagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4
Mjc5MB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
MDNmZGMyNzYtZWE0ZS00NmVlLTk0OGYtZGE4ZDNhMmJmZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U0AhlO78VeE/rQwAaOaxpgPDPPuoE1PWxOm
8kBNvY+cyqx2h9qPzxIm87Rcx91wWiajnEo5eTOHUYG1SKM8pZhnxkb5yp+7F/Qw
IJlFGC2tXm7jy/VHg2GwJlhZixh+IRCnq88Xp/Vc5ZY8Ibd6UFgvLpcFbPiGRU+b
EZsUifQH+bAY6rM2LnXgBuSD1KFG28DhqreQb2Rx0VdXjrCNZ1RXorBZune61eQN
7QkeS+Pb2Fsz4zHwv3qDsj63TbePsMw7G0PkB5HvqipWYse13uwoQOvd0NwelKjZ
okS6+NR9ud34Ko8BOflQI1y6jGRJYe6Vinsz8bIPx8GxQdxkPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXerSI/69guzX92AMkno4GepvAEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5
N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNDhmMWM3YTktN2M2Yi0z
OGVlLWFmNWUtMDNhNzBhYzExYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5
ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw
ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0
OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCkGUbjICKzBqjUluz9hnFneJWxd+lrHjk2lrfYw/qMb1YDAZI2/0yF
V8GlxR5IQea73XMgPY2vCQNFNirB+DcwivVpxsaC3g5ypATIPvKi3nmtUFzFouhm
GRRucQjEsyGKf+sxk4/S6HleqJb7POO6Mg+XxFwV2CDqDlTBKuafUDjL1FOXDrlw
iZ5OTgbQPkzTtRtj68sVNuEWPxGL+21uhUWYD2m0k8aL3JMXjdFi/I5GsJPSkMty
QMfQe4iiVw2MH5hBclMc+ORgE1j2b0HWi/4VI8KetjqeBrqpb/ZXTomXzHyZxHDV
MrzHxmeNF3LfCQ31ewnk/bbpu8dR78w=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:22 2026 by rpki-client