Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f4d963c9-c5d4-3370-b83c-5ddc08c1273b.roa
File:                     f4d963c9-c5d4-3370-b83c-5ddc08c1273b.roa (raw, json)
Hash identifier:          aTMeuAKo543dD1iV9YFcqMKJD6fAq1DY1+IzK8FXZpQ=
Subject key identifier:   79:57:25:78:FD:18:5A:84:BD:38:48:21:09:79:C4:AD:37:9B:90:2B
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584CE8F7692E6CB30495D369A040
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f4d963c9-c5d4-3370-b83c-5ddc08c1273b.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     10397
IP address blocks:        162.244.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:69:2e:6c:b3:04:95:d3:69:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=6d8172fa-3547-4f99-b56f-0ba57676492f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:0c:c6:8e:34:5c:4f:4e:14:ad:5d:72:6a:
                    4e:3d:88:e1:ed:71:c1:59:be:42:ec:59:9d:46:16:
                    78:0c:0f:f3:aa:4c:bf:cc:18:2d:21:fc:18:35:b2:
                    ba:76:dd:e6:f9:3e:7d:ba:1c:c7:b1:ea:c4:39:54:
                    e1:2d:a7:28:d5:32:a0:c6:f5:4a:e1:a3:ec:5c:dc:
                    a0:46:bd:85:25:34:3b:b5:70:0a:b1:17:74:06:47:
                    47:1c:2e:dd:15:f2:e0:6b:8c:8d:0a:6e:c1:41:06:
                    46:57:3c:59:42:89:ea:4d:8a:df:74:0a:0b:bd:cf:
                    7e:8e:f1:2a:18:35:f8:02:58:28:a5:0a:65:cf:fc:
                    8e:8b:cc:c1:37:f1:18:7c:8b:18:11:09:76:a1:88:
                    35:76:ee:d8:8a:c1:d5:b3:b8:57:0d:c4:7d:ba:09:
                    e4:42:bc:14:49:a4:a8:1e:53:7f:12:a5:8b:24:2b:
                    db:57:03:60:b1:31:98:0d:3a:57:e3:fa:a3:da:68:
                    1d:c8:fb:eb:fb:57:12:f3:3c:9d:6c:20:02:65:c0:
                    3d:48:6a:c9:4a:c6:04:97:e0:9b:7d:fc:d7:be:8f:
                    e5:63:51:2a:1c:17:c6:db:f1:ba:a7:6e:e1:5c:a5:
                    15:33:bc:56:64:5e:b4:97:91:bb:18:53:9e:e6:c7:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:57:25:78:FD:18:5A:84:BD:38:48:21:09:79:C4:AD:37:9B:90:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f4d963c9-c5d4-3370-b83c-5ddc08c1273b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:59:6b:08:d6:9a:2d:e1:d5:aa:d7:58:0c:91:7d:4a:93:b1:
         a4:4b:60:15:21:08:2d:ae:60:58:78:e2:ca:d2:99:0e:24:45:
         b1:fe:dd:75:7e:5c:1a:fd:f2:77:2e:6a:31:f9:f0:2b:01:cd:
         83:c8:3a:b0:30:d5:a5:fb:9c:f2:46:89:57:1a:d3:55:a2:03:
         67:18:77:c1:ef:8d:33:9c:50:62:9e:1e:6e:57:5f:cb:76:87:
         f4:5f:c7:f6:b7:bd:96:ea:3e:27:ae:ba:62:fb:d0:3c:92:e6:
         89:32:2d:83:33:a7:af:bb:0c:2a:9f:3b:3a:68:01:e6:52:08:
         71:ed:bb:a6:a8:7b:71:8e:36:b4:bc:89:2d:8b:95:3e:4e:8e:
         22:df:40:e5:5b:0a:be:06:fe:d8:3f:89:31:79:d7:c1:73:8d:
         1e:2e:8f:c1:9a:24:92:20:9a:20:aa:a3:df:3a:e8:1a:08:c1:
         a7:f8:fb:d8:6b:8f:1c:75:70:61:a0:53:df:23:3a:4d:85:60:
         db:5a:29:8a:21:c5:4c:f2:fe:7a:e0:ff:94:06:14:87:18:a7:
         e7:c4:f2:c8:b8:c4:d7:44:c2:7e:22:d8:3f:42:51:28:8c:bb:
         40:44:b4:1c:3b:27:37:8a:90:54:8f:f4:99:a1:10:fe:9f:9b:
         df:8f:be:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo92kubLMEldNpoEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
NmQ4MTcyZmEtMzU0Ny00Zjk5LWI1NmYtMGJhNTc2NzY0OTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RMMxo40XE9OFK1dcmpOPYjh7XHBWb5C7Fmd
RhZ4DA/zqky/zBgtIfwYNbK6dt3m+T59uhzHserEOVThLaco1TKgxvVK4aPsXNyg
Rr2FJTQ7tXAKsRd0BkdHHC7dFfLga4yNCm7BQQZGVzxZQonqTYrfdAoLvc9+jvEq
GDX4AlgopQplz/yOi8zBN/EYfIsYEQl2oYg1du7YisHVs7hXDcR9ugnkQrwUSaSo
HlN/EqWLJCvbVwNgsTGYDTpX4/qj2mgdyPvr+1cS8zydbCACZcA9SGrJSsYEl+Cb
ffzXvo/lY1EqHBfG2/G6p27hXKUVM7xWZF60l5G7GFOe5seLSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlXJXj9GFqEvThIIQl5xK03m5ArMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjRkOTYzYzktYzVkNC0z
MzcwLWI4M2MtNWRkYzA4YzEyNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovRnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENZawjWmi3h1arXWAyRfUqTsaRLYBUhCC2uYFh44srSmQ4kRbH+3XV+
XBr98ncuajH58CsBzYPIOrAw1aX7nPJGiVca01WiA2cYd8HvjTOcUGKeHm5XX8t2
h/Rfx/a3vZbqPieuumL70DyS5okyLYMzp6+7DCqfOzpoAeZSCHHtu6aoe3GONrS8
iS2LlT5OjiLfQOVbCr4G/tg/iTF518FzjR4uj8GaJJIgmiCqo9866BoIwaf4+9hr
jxx1cGGgU98jOk2FYNtaKYohxUzy/nrg/5QGFIcYp+fE8si4xNdEwn4i2D9CUSiM
u0BEtBw7JzeKkFSP9JmhEP6fm9+Pvgg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:19 2026 by rpki-client