Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/317a0360-119c-3649-8fa3-88b54fb0a030.roa
File:                     317a0360-119c-3649-8fa3-88b54fb0a030.roa (raw, json)
Hash identifier:          5p0inKkMRxW9uCirWuHv5bebmEAZdkzQgncyNa5fLI4=
Subject key identifier:   D7:7E:EA:61:61:2D:3E:82:2A:12:C9:90:0C:7A:2A:C9:D7:27:E2:35
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584CED5E88E24FA450FDEE9D3500
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/317a0360-119c-3649-8fa3-88b54fb0a030.roa
Signing time:             Fri 20 Feb 2026 15:51:42 +0000
ROA not before:           Fri 20 Feb 2026 15:51:42 +0000
ROA not after:            Thu 21 May 2026 14:51:42 +0000
asID:                     26077
IP address blocks:        104.167.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:5e:88:e2:4f:a4:50:fd:ee:9d:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Feb 20 15:51:42 2026 GMT
            Not After : May 21 14:51:42 2026 GMT
        Subject: CN=7eb225d6-bba9-415f-9d1c-0dc2daccf17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:b5:1f:97:1d:1e:3c:82:1b:ca:42:06:4d:
                    d8:ba:59:5e:c9:0f:8c:25:d0:32:a7:8a:c2:7b:c7:
                    1f:91:97:67:5f:ab:2a:e0:ce:ed:30:95:18:1b:2b:
                    5c:4d:5e:97:60:59:cb:eb:21:f5:06:d7:a8:c7:39:
                    2f:8e:37:4a:30:6d:fc:46:11:81:5e:1b:4f:7c:db:
                    3e:d1:a6:5b:76:51:99:58:a0:43:a3:33:a9:d4:86:
                    3c:f1:8c:23:50:31:81:c6:31:9e:23:d5:a2:53:ad:
                    f0:d7:7b:6a:d3:c0:85:37:1e:65:e9:e3:31:79:9d:
                    b4:25:66:08:1a:ea:53:62:7a:20:26:7d:5d:c7:8d:
                    db:19:c4:cb:a1:a3:1a:8b:01:5c:99:6e:2f:55:c9:
                    6f:03:8a:7d:91:4d:a5:7c:56:95:95:ec:25:c4:06:
                    67:a0:b4:5d:95:c8:c8:75:a2:de:38:cf:c0:74:58:
                    c4:e2:cc:38:dc:93:31:d3:0d:00:9f:5f:1e:1f:a9:
                    03:9a:2c:51:d3:9e:ee:89:fa:bf:0c:e9:5e:b1:49:
                    58:9e:75:a5:a3:46:05:73:c2:07:51:0b:3e:47:ae:
                    88:f6:b2:fc:0f:a5:a0:12:84:0f:53:b7:0f:c0:8a:
                    dc:82:e4:57:5a:51:a5:43:61:d2:91:81:27:e0:2a:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7E:EA:61:61:2D:3E:82:2A:12:C9:90:0C:7A:2A:C9:D7:27:E2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/317a0360-119c-3649-8fa3-88b54fb0a030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:51:52:59:b7:68:b6:aa:6a:a2:3e:69:7f:b9:eb:dd:a0:eb:
         71:af:06:10:60:f2:18:51:fb:1e:a4:96:08:18:8c:fb:22:3a:
         e3:39:53:9c:e8:f4:91:05:57:70:98:5e:50:b3:c8:ac:69:06:
         2e:4c:3e:40:69:9b:19:1e:8b:6b:56:b4:20:9b:84:e8:4e:8e:
         21:83:d4:60:b1:db:8c:87:c7:9c:55:0d:24:f7:34:0f:62:ca:
         73:f2:f1:da:75:2f:c2:6d:f6:dc:a7:47:76:e7:b2:3d:b1:79:
         f3:70:d2:75:a8:1a:7d:cd:de:92:04:43:85:08:b7:ec:55:f9:
         ed:6b:85:6e:ad:4c:bb:f3:70:fc:e9:1d:89:0e:26:98:5d:55:
         f6:fa:14:9f:62:e2:e2:d1:43:70:2b:fc:d6:ef:02:d6:02:1d:
         9c:ad:24:40:a2:9b:23:cf:4c:83:e7:d1:03:c9:52:2d:42:d3:
         27:c4:ed:2e:5d:7b:2e:cc:52:e4:02:b5:ce:5f:c6:41:5b:42:
         0d:7a:27:ef:7b:63:e5:8d:70:36:3e:57:81:7e:3d:c7:2e:2d:
         54:0b:8f:04:f7:ff:a1:74:81:60:9a:fe:c5:21:a7:13:1a:70:
         3b:68:e6:10:8f:82:0a:f1:4e:67:b9:9f:75:ab:73:75:db:57:
         2c:6a:ec:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztXojiT6RQ/e6dNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj
NjBlMB4XDTI2MDIyMDE1NTE0MloXDTI2MDUyMTE0NTE0MlowLzEtMCsGA1UEAxMk
N2ViMjI1ZDYtYmJhOS00MTVmLTlkMWMtMGRjMmRhY2NmMTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjW1H5cdHjyCG8pCBk3YulleyQ+MJdAyp4rC
e8cfkZdnX6sq4M7tMJUYGytcTV6XYFnL6yH1BteoxzkvjjdKMG38RhGBXhtPfNs+
0aZbdlGZWKBDozOp1IY88YwjUDGBxjGeI9WiU63w13tq08CFNx5l6eMxeZ20JWYI
GupTYnogJn1dx43bGcTLoaMaiwFcmW4vVclvA4p9kU2lfFaVlewlxAZnoLRdlcjI
daLeOM/AdFjE4sw43JMx0w0An18eH6kDmixR057uifq/DOlesUlYnnWlo0YFc8IH
UQs+R66I9rL8D6WgEoQPU7cPwIrcguRXWlGlQ2HSkYEn4CqZLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNd+6mFhLT6CKhLJkAx6KsnXJ+I1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk
NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvMzE3YTAzNjAtMTE5Yy0z
NjQ5LThmYTMtODhiNTRmYjBhMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz
NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2
YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3
NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlRUlm3aLaqaqI+aX+5692g63GvBhBg8hhR+x6klggYjPsiOuM5U5zo
9JEFV3CYXlCzyKxpBi5MPkBpmxkei2tWtCCbhOhOjiGD1GCx24yHx5xVDST3NA9i
ynPy8dp1L8Jt9tynR3bnsj2xefNw0nWoGn3N3pIEQ4UIt+xV+e1rhW6tTLvzcPzp
HYkOJphdVfb6FJ9i4uLRQ3Ar/NbvAtYCHZytJECimyPPTIPn0QPJUi1C0yfE7S5d
ey7MUuQCtc5fxkFbQg16J+97Y+WNcDY+V4F+PccuLVQLjwT3/6F0gWCa/sUhpxMa
cDto5hCPggrxTme5n3Wrc3XbVyxq7ME=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:51:28 2026 by rpki-client