Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa
File:                     2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa (raw, json)
Hash identifier:          zTf3FRPWf9204JfOE7JNufTE2D7JYpIHBIpBFHVLHLM=
Subject key identifier:   CF:ED:B8:C3:E9:BF:42:E9:2D:3A:E8:59:3A:ED:7E:46:47:ED:42:C2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584CF9B786F4A5C9088B664EE260
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     29802
IP address blocks:        139.177.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:86:f4:a5:c9:08:8b:66:4e:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=5a791346-1707-4277-8dba-04ddbb711294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:8e:e7:68:62:b2:4f:da:26:27:62:45:88:
                    42:1f:0a:9a:e0:ae:84:65:dd:9f:52:1b:77:90:a5:
                    85:70:d2:fc:86:14:82:46:c9:18:2e:0e:bf:e3:92:
                    06:67:f9:5d:04:4f:b6:e7:e0:83:ed:3a:7e:e0:1d:
                    94:8f:07:ae:57:a9:8c:aa:85:28:18:b4:f9:d4:76:
                    b3:42:6c:0c:61:86:7c:23:f4:fa:62:9a:5e:c3:51:
                    b5:1a:6c:7b:9c:d8:c9:d1:94:24:f9:2f:56:78:d0:
                    ef:1f:cb:d1:ea:b7:ea:c3:08:3c:98:82:2c:dc:b4:
                    d6:65:d2:c9:88:e8:e2:d8:25:8d:f9:5e:83:db:00:
                    ed:0c:06:c2:d0:ed:51:a5:e9:67:04:92:49:25:6c:
                    44:2b:4b:42:dc:ef:ce:db:f7:c3:d4:8b:bb:df:3b:
                    bd:79:ed:d3:2e:c4:49:a4:8c:17:6b:de:75:b9:ae:
                    19:37:ff:a2:da:66:1c:71:19:3f:25:0c:87:df:5d:
                    74:36:a2:b0:3a:0a:0e:5c:25:3e:82:99:ff:79:8f:
                    24:70:2c:cd:4e:38:65:b7:ac:93:0e:9f:75:61:3d:
                    11:9e:49:fa:52:c0:f8:d3:59:3b:a0:b7:84:1d:d1:
                    de:33:71:84:1d:f1:85:bd:80:6e:f4:bc:b2:e3:c7:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:ED:B8:C3:E9:BF:42:E9:2D:3A:E8:59:3A:ED:7E:46:47:ED:42:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2aa71534-b1de-384d-ad45-5b35b3bdbc67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:80:5e:5e:0e:77:a3:c5:85:f0:e5:85:9d:2e:d2:01:c0:da:
         14:8d:05:11:e3:a2:2c:51:cc:2e:5e:56:96:80:99:c4:45:bd:
         cc:7b:53:17:1d:3a:ab:66:e0:f9:d8:e8:e2:50:e8:31:03:23:
         ea:19:eb:52:15:f9:c8:e7:26:b5:ab:7b:43:6c:80:a5:1a:39:
         f6:99:02:29:b3:69:09:28:71:7d:7f:7b:ea:df:65:1a:87:9d:
         74:28:a0:2e:0a:ad:dc:e8:e5:1e:c4:5c:b7:5d:71:dc:77:f9:
         89:21:6b:53:d0:dd:d3:81:8a:b0:9f:15:cf:c0:a5:5c:0c:d4:
         2e:ee:b5:6c:96:86:10:32:6c:2c:d6:02:9f:58:d5:1e:1b:89:
         e1:80:db:37:f1:f1:34:a4:c0:98:2b:e4:06:ac:c3:f0:83:60:
         19:c0:9c:1d:fc:68:59:6b:9d:77:55:fb:85:c5:ff:13:bc:b8:
         c3:77:33:b0:8a:af:4d:88:ea:67:14:94:84:52:31:aa:93:30:
         36:5c:ad:e8:36:15:54:87:0a:df:18:8b:48:22:53:cf:e3:46:
         ea:5b:b9:0e:48:a8:12:61:d9:fd:2d:c3:76:ec:b3:a8:55:f5:
         dc:52:60:b9:a9:04:05:cd:bc:96:66:fd:e2:9e:b4:de:ef:fa:
         70:66:6f:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4b0pckIi2ZO4mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk
NWE3OTEzNDYtMTcwNy00Mjc3LThkYmEtMDRkZGJiNzExMjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLiO52hisk/aJidiRYhCHwqa4K6EZd2fUht3
kKWFcNL8hhSCRskYLg6/45IGZ/ldBE+25+CD7Tp+4B2UjweuV6mMqoUoGLT51Haz
QmwMYYZ8I/T6Yppew1G1Gmx7nNjJ0ZQk+S9WeNDvH8vR6rfqwwg8mIIs3LTWZdLJ
iOji2CWN+V6D2wDtDAbC0O1RpelnBJJJJWxEK0tC3O/O2/fD1Iu73zu9ee3TLsRJ
pIwXa951ua4ZN/+i2mYccRk/JQyH3110NqKwOgoOXCU+gpn/eY8kcCzNTjhlt6yT
Dp91YT0Rnkn6UsD401k7oLeEHdHeM3GEHfGFvYBu9Lyy48dnowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/tuMPpv0LpLTroWTrtfkZH7ULCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMmFhNzE1MzQtYjFkZS0z
ODRkLWFkNDUtNWIzNWIzYmRiYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmAXl4Od6PFhfDlhZ0u0gHA2hSNBRHjoixRzC5eVpaAmcRFvcx7Uxcd
Oqtm4PnY6OJQ6DEDI+oZ61IV+cjnJrWre0NsgKUaOfaZAimzaQkocX1/e+rfZRqH
nXQooC4Krdzo5R7EXLddcdx3+Ykha1PQ3dOBirCfFc/ApVwM1C7utWyWhhAybCzW
Ap9Y1R4bieGA2zfx8TSkwJgr5Aasw/CDYBnAnB38aFlrnXdV+4XF/xO8uMN3M7CK
r02I6mcUlIRSMaqTMDZcreg2FVSHCt8Yi0giU8/jRupbuQ5IqBJh2f0tw3bss6hV
9dxSYLmpBAXNvJZm/eKetN7v+nBmb6g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:14 2026 by rpki-client