Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa
File:                     a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa (raw, json)
Hash identifier:          evi24tAfweBnc3CrLMVqyZmvQd3wxBooTtnA6yux2C8=
Subject key identifier:   FA:7A:7C:0F:DA:26:50:CE:22:7C:A5:F0:1B:D4:D3:DF:0B:79:F0:94
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584D06479C36801C85F7394B2580
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     8143
IP address blocks:        170.205.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:9c:36:80:1c:85:f7:39:4b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=0d9071c5-7138-4848-ba96-415555512285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:75:72:90:ee:6d:2e:ca:76:18:44:50:88:
                    69:ea:d8:48:35:c0:82:97:5b:2a:ab:bd:e9:de:d2:
                    3a:a9:f1:86:ee:0d:f2:af:78:9f:d8:9f:e1:1c:62:
                    3b:08:6e:d1:da:a4:a3:0b:a0:4d:c5:6f:0f:c3:af:
                    df:5d:36:1e:12:cd:08:84:46:69:27:72:28:db:a4:
                    bf:ce:c6:25:81:db:b9:db:cb:d2:d3:24:43:0b:32:
                    79:0a:89:2b:bb:60:48:63:79:e0:b1:dc:a6:9e:7f:
                    64:5e:c5:9c:80:03:68:09:60:dc:f7:b7:cf:97:3a:
                    d9:78:9c:b2:ec:20:7f:a2:84:d3:e9:eb:9b:83:86:
                    12:ae:77:b6:b3:52:c5:9f:73:42:d6:82:a9:5c:4c:
                    f2:6a:0e:13:0d:e3:e1:7b:e4:a7:db:9f:bd:3d:3d:
                    37:cd:d3:14:c6:d1:11:46:f9:9d:7e:44:a6:35:ec:
                    e6:9d:dd:d0:c4:22:18:8d:de:67:8f:af:f6:75:53:
                    bc:48:de:0e:aa:89:d4:60:a1:75:b1:29:04:1f:df:
                    97:65:d4:6a:91:26:95:57:9f:2e:9a:11:a6:f0:89:
                    91:92:de:18:a6:56:59:70:03:3c:ac:65:d1:ae:91:
                    a4:c2:b2:02:cc:20:e8:c2:ee:a4:31:ed:36:53:fc:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:7C:0F:DA:26:50:CE:22:7C:A5:F0:1B:D4:D3:DF:0B:79:F0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a9ee670f-e9f9-3cba-a4fc-b9c4f2381232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:2d:32:ad:68:cd:2f:af:1e:8e:24:26:5e:8c:c5:70:fb:
         95:e5:7a:d0:fa:06:de:63:31:84:5d:61:e0:14:2d:4c:9b:27:
         d2:96:3a:73:62:5c:75:f3:f1:de:a5:c1:25:47:9e:08:34:51:
         fa:4c:99:07:b8:9b:7e:1d:e2:54:28:aa:ed:4d:1b:7b:11:49:
         e7:53:78:28:c4:8a:f5:38:41:c3:52:1d:c9:36:7f:85:c7:19:
         47:b9:c8:dd:49:3c:ef:fc:c4:e1:72:3a:e4:07:f4:c8:d3:65:
         72:72:b5:f6:b9:8d:4a:c6:3b:67:fb:a1:5a:3a:6d:93:8e:fc:
         e4:be:1e:79:5a:6c:c8:db:da:7e:f4:d9:1c:fd:44:ae:02:63:
         94:a9:c7:d1:48:ca:e6:4d:9f:d3:ff:63:f5:35:59:13:fe:5a:
         23:74:01:ba:40:3f:ff:96:f8:79:ec:9f:d1:3e:2a:00:df:50:
         07:4f:0f:f8:96:00:3d:ee:7d:7b:4c:eb:76:cf:f0:6b:62:bd:
         fc:e0:f3:48:84:0f:41:0e:5a:9a:26:aa:6a:04:fb:ea:00:22:
         ee:9a:25:fb:ee:18:ba:68:fa:a2:9c:20:a8:81:5d:a2:53:9e:
         35:31:92:7e:41:fb:68:c4:e9:76:64:c8:83:d2:11:c7:f0:dc:
         99:65:48:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR5w2gByF9zlLJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3
ZjUxMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk
MGQ5MDcxYzUtNzEzOC00ODQ4LWJhOTYtNDE1NTU1NTEyMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30R1cpDubS7KdhhEUIhp6thINcCCl1sqq73p
3tI6qfGG7g3yr3if2J/hHGI7CG7R2qSjC6BNxW8Pw6/fXTYeEs0IhEZpJ3Io26S/
zsYlgdu528vS0yRDCzJ5Cokru2BIY3ngsdymnn9kXsWcgANoCWDc97fPlzrZeJyy
7CB/ooTT6eubg4YSrne2s1LFn3NC1oKpXEzyag4TDePhe+Sn25+9PT03zdMUxtER
RvmdfkSmNezmnd3QxCIYjd5nj6/2dVO8SN4OqonUYKF1sSkEH9+XZdRqkSaVV58u
mhGm8ImRkt4YplZZcAM8rGXRrpGkwrICzCDowu6kMe02U/xpiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPp6fA/aJlDOInyl8BvU098LefCUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm
ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvYTllZTY3MGYtZTlmOS0z
Y2JhLWE0ZmMtYjljNGYyMzgxMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli
ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm
N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi
MWRhZjdmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASiLTKtaM0vrx6OJCZejMVw+5XletD6Bt5jMYRdYeAULUybJ9KWOnNi
XHXz8d6lwSVHngg0UfpMmQe4m34d4lQoqu1NG3sRSedTeCjEivU4QcNSHck2f4XH
GUe5yN1JPO/8xOFyOuQH9MjTZXJytfa5jUrGO2f7oVo6bZOO/OS+HnlabMjb2n70
2Rz9RK4CY5Spx9FIyuZNn9P/Y/U1WRP+WiN0AbpAP/+W+Hnsn9E+KgDfUAdPD/iW
AD3ufXtM63bP8Gtivfzg80iED0EOWpomqmoE++oAIu6aJfvuGLpo+qKcIKiBXaJT
njUxkn5B+2jE6XZkyIPSEcfw3JllSMA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:46 2026 by rpki-client