Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa
File:                     084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa (raw, json)
Hash identifier:          zQS7ZjYGlhYEHD+Ma1YF1dkmiAiMbVLVz7MJo/pomgw=
Subject key identifier:   BA:13:F4:18:58:0B:FE:CF:F9:A3:74:63:AD:0E:7F:DB:53:1B:6A:1F
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D0217B6824085D85FF14B7C00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        74.51.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b6:82:40:85:d8:5f:f1:4b:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=fa9cb4dd-00ca-4daf-a149-ed26da431e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:fd:13:59:37:a0:e8:1b:64:3d:0d:d5:86:
                    b9:1d:bf:34:25:3e:c4:b0:16:62:8b:58:d7:d7:83:
                    41:02:32:ce:03:52:9d:1b:cb:3d:e3:8b:43:ad:51:
                    5b:f1:a7:a6:14:e9:d1:60:ca:80:1e:a8:6c:d5:c1:
                    fc:2f:39:9d:ae:91:ab:2c:45:cb:92:46:1d:a5:e2:
                    5c:30:fe:24:db:66:2d:fb:7d:f5:00:fe:ca:fc:4f:
                    cc:17:ce:52:f1:06:7c:41:c7:4a:f3:eb:c2:fd:4d:
                    3c:86:86:5e:dd:bc:9b:e2:d8:a2:f6:03:3d:0a:79:
                    e4:3a:bd:e2:f2:3e:c5:86:5a:54:55:23:7a:c2:72:
                    c3:a5:e7:55:93:85:37:39:bf:0a:04:c9:76:c1:40:
                    ce:78:c7:32:a1:b9:46:39:aa:4c:69:af:c0:47:43:
                    53:9e:4d:d7:24:24:41:ab:5f:5f:90:50:da:50:fa:
                    21:84:af:7c:7a:29:d2:ba:5e:70:77:4f:cd:70:58:
                    e9:ba:23:63:8c:dd:fa:42:ca:ed:f3:c9:d6:2e:f4:
                    14:f8:50:c4:c0:88:7b:e7:6c:9a:e0:a6:f0:31:a7:
                    08:6a:84:71:8b:5a:39:5d:48:87:29:94:00:f3:f1:
                    83:3f:bc:0c:1f:4c:2b:35:29:73:2b:3d:c2:42:16:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:F4:18:58:0B:FE:CF:F9:A3:74:63:AD:0E:7F:DB:53:1B:6A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:0d:93:18:bb:86:45:d4:cb:ed:aa:72:35:3e:de:c8:9b:
         92:2b:e2:82:21:47:b8:7a:1a:99:17:d6:f4:f4:a6:bb:ff:ff:
         8c:88:42:f8:1d:6e:be:b6:38:2f:3d:7f:28:b6:09:04:31:ef:
         e7:91:f4:ab:82:37:0e:26:f8:4e:1b:53:fc:4a:a7:e5:23:b9:
         bf:5f:d4:6a:15:1f:b5:56:e6:64:a0:2c:f1:eb:5d:18:b4:b6:
         e5:e4:2d:59:83:07:48:c4:45:cf:30:ac:c3:40:f0:42:be:83:
         2e:ef:fc:0c:bb:4f:0b:3a:5e:3e:c9:ae:c6:ee:31:27:0b:ef:
         c6:11:92:2d:15:d8:94:a8:c4:17:27:5f:f0:b0:53:2e:6c:67:
         db:6d:9f:e0:bc:c0:be:88:08:6b:ae:06:57:42:f6:e3:e1:85:
         88:06:90:40:e8:9f:c1:db:0e:c1:f6:60:9d:3d:de:ed:37:03:
         bd:6f:ad:b2:19:b2:8a:42:73:a4:5f:af:21:d5:9c:08:94:77:
         00:1a:91:ff:a5:fa:d9:7c:34:3b:ce:7b:8c:8f:28:31:e2:f9:
         2b:9d:a8:7d:13:23:cd:bb:36:54:f9:45:37:40:71:73:f7:f3:
         f6:e9:dd:a8:27:41:ce:e2:fc:cd:7c:1d:81:c1:28:93:f5:6c:
         8a:85:c4:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF7aCQIXYX/FLfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZmE5Y2I0ZGQtMDBjYS00ZGFmLWExNDktZWQyNmRhNDMxZTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwr9E1k3oOgbZD0N1Ya5Hb80JT7EsBZii1jX
14NBAjLOA1KdG8s944tDrVFb8aemFOnRYMqAHqhs1cH8LzmdrpGrLEXLkkYdpeJc
MP4k22Yt+331AP7K/E/MF85S8QZ8QcdK8+vC/U08hoZe3byb4tii9gM9CnnkOr3i
8j7FhlpUVSN6wnLDpedVk4U3Ob8KBMl2wUDOeMcyoblGOapMaa/AR0NTnk3XJCRB
q19fkFDaUPohhK98einSul5wd0/NcFjpuiNjjN36Qsrt88nWLvQU+FDEwIh752ya
4KbwMacIaoRxi1o5XUiHKZQA8/GDP7wMH0wrNSlzKz3CQhaXJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoT9BhYC/7P+aN0Y60Of9tTG2ofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDg0YTRmMmQtY2M2ZS0z
ZjQ4LThjMTUtMTc5M2ExZGQ3OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKQDZMYu4ZF1MvtqnI1Pt7Im5Ir4oIhR7h6GpkX1vT0prv//4yIQvgd
br62OC89fyi2CQQx7+eR9KuCNw4m+E4bU/xKp+Ujub9f1GoVH7VW5mSgLPHrXRi0
tuXkLVmDB0jERc8wrMNA8EK+gy7v/Ay7Tws6Xj7JrsbuMScL78YRki0V2JSoxBcn
X/CwUy5sZ9ttn+C8wL6ICGuuBldC9uPhhYgGkEDon8HbDsH2YJ093u03A71vrbIZ
sopCc6RfryHVnAiUdwAakf+l+tl8NDvOe4yPKDHi+SudqH0TI827NlT5RTdAcXP3
8/bp3agnQc7i/M18HYHBKJP1bIqFxHA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:10 2026 by rpki-client