Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
File:                     1fc2f9c1-18b2-3364-9d9a-02587108c597.roa (raw, json)
Hash identifier:          Z8pG92i5hiMNuLnrTFMtbgjckVqAPPVSoIN3Udc3d9E=
Subject key identifier:   EE:4E:E0:8D:DB:36:5C:49:80:29:51:C1:2E:D8:E5:20:4B:9D:89:15
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F4328584CFDE7AF4994BDC82BE8A9C340
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     62802
IP address blocks:        170.4.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:af:49:94:bd:c8:2b:e8:a9:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=6dd47975-4255-469e-b8c8-908b4654e573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:59:1a:9e:79:73:19:2a:ba:59:01:b1:5d:
                    ac:35:92:d0:22:c2:5a:7a:75:cc:e9:bb:4e:58:25:
                    16:66:19:9c:77:da:b6:42:22:7d:ce:bf:87:3e:39:
                    09:10:06:3d:a8:e7:80:11:70:9c:c8:1c:4a:6d:00:
                    26:c1:4b:ea:5c:82:74:0a:b5:86:49:a1:0f:2e:d3:
                    a2:a9:8c:7e:39:7f:2b:93:45:df:27:b7:b0:1b:21:
                    d4:c3:25:3f:ce:2e:ce:5b:51:7e:a4:e9:70:e8:7a:
                    c9:06:b4:d8:b4:36:3b:c1:4e:9e:66:fe:ff:93:f3:
                    92:5e:54:e0:4e:83:b6:9d:91:1c:13:fc:ea:a0:67:
                    28:a2:98:d3:e8:ec:ca:5c:b5:1a:f2:b7:30:a1:3e:
                    33:bd:47:98:e7:10:e2:7c:a4:56:1e:a9:16:fa:f8:
                    e3:4e:0e:01:bc:b4:67:d8:72:9c:93:f4:5c:c3:4e:
                    50:97:23:63:60:be:d4:f5:7a:1a:d5:c1:3b:1a:45:
                    dc:51:4e:70:37:93:b8:82:a3:c9:bd:04:b2:d0:fc:
                    f0:b7:a6:90:7b:75:c6:98:a8:b3:14:3f:77:99:fd:
                    c4:5d:92:ee:8d:8d:2d:1f:6c:48:ed:76:ec:bc:d8:
                    b8:b3:bd:b5:97:34:bf:f1:94:da:9f:d5:5f:ff:68:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4E:E0:8D:DB:36:5C:49:80:29:51:C1:2E:D8:E5:20:4B:9D:89:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:61:62:f7:a8:45:39:bf:37:a2:d0:a3:23:d0:1d:8d:c3:4b:
         60:5a:dc:57:ca:f2:5d:d2:6f:02:79:b0:5e:13:53:68:40:af:
         9f:03:f0:ec:06:1c:1e:c8:d0:1e:f8:11:38:45:89:6c:e4:fc:
         94:9e:ff:94:48:91:c1:ba:43:a5:3f:ee:0e:0e:a7:d2:9f:10:
         f5:2f:51:62:f6:da:97:35:71:c3:be:5b:6a:ad:a0:fb:5e:5b:
         a7:36:a0:14:79:73:77:61:ef:9c:2e:fc:11:39:9a:22:b9:40:
         11:99:bc:cb:47:55:bc:b0:67:88:00:5b:43:26:0f:c7:ee:c4:
         2b:db:05:f7:c0:dc:b2:28:ea:4f:e4:05:29:e2:e7:c6:1c:b2:
         bf:db:ec:10:b8:66:7f:64:77:d2:b6:b0:8a:d5:eb:fb:21:2c:
         72:c7:97:94:85:51:53:d2:a5:20:45:2d:99:48:00:56:0e:46:
         25:04:2b:ee:2c:cb:f7:60:82:74:a7:1b:05:01:87:06:d5:a2:
         90:8f:34:09:16:c0:38:75:c5:bf:7d:95:f7:d4:be:35:a8:e2:
         7c:f5:0f:5a:f4:41:75:b0:e3:32:a8:bb:f4:20:20:78:bc:3a:
         35:5c:ae:1c:d8:48:52:f9:b4:84:31:7f:a2:0e:aa:44:82:57:
         c3:78:62:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz9569JlL3IK+ipw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh
MDE1MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
NmRkNDc5NzUtNDI1NS00NjllLWI4YzgtOTA4YjQ2NTRlNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmZZGp55cxkqulkBsV2sNZLQIsJaenXM6btO
WCUWZhmcd9q2QiJ9zr+HPjkJEAY9qOeAEXCcyBxKbQAmwUvqXIJ0CrWGSaEPLtOi
qYx+OX8rk0XfJ7ewGyHUwyU/zi7OW1F+pOlw6HrJBrTYtDY7wU6eZv7/k/OSXlTg
ToO2nZEcE/zqoGcoopjT6OzKXLUa8rcwoT4zvUeY5xDifKRWHqkW+vjjTg4BvLRn
2HKck/Rcw05QlyNjYL7U9Xoa1cE7GkXcUU5wN5O4gqPJvQSy0Pzwt6aQe3XGmKiz
FD93mf3EXZLujY0tH2xI7XbsvNi4s721lzS/8ZTan9Vf/2gozQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5O4I3bNlxJgClRwS7Y5SBLnYkVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh
YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvMWZjMmY5YzEtMThiMi0z
MzY0LTlkOWEtMDI1ODcxMDhjNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0
MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy
YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4
ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgTBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5hYveoRTm/N6LQoyPQHY3DS2Ba3FfK8l3SbwJ5sF4TU2hAr58D8OwG
HB7I0B74EThFiWzk/JSe/5RIkcG6Q6U/7g4Op9KfEPUvUWL22pc1ccO+W2qtoPte
W6c2oBR5c3dh75wu/BE5miK5QBGZvMtHVbywZ4gAW0MmD8fuxCvbBffA3LIo6k/k
BSni58Ycsr/b7BC4Zn9kd9K2sIrV6/shLHLHl5SFUVPSpSBFLZlIAFYORiUEK+4s
y/dggnSnGwUBhwbVopCPNAkWwDh1xb99lffUvjWo4nz1D1r0QXWw4zKou/QgIHi8
OjVcrhzYSFL5tIQxf6IOqkSCV8N4Yqo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:01 2026 by rpki-client