Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa
File:                     6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa (raw, json)
Hash identifier:          3HV+feS1BfWE8upADMUN4RXhhXAuPw3WFGMEC7U8aQ0=
Subject key identifier:   BF:8A:ED:A4:EB:F0:45:DA:DC:F0:61:A8:74:4C:01:5D:AB:DE:75:19
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584CED27814BF1CB43477AEA2E00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     10475
IP address blocks:        135.180.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:81:4b:f1:cb:43:47:7a:ea:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ef0ff5ae-e17f-4402-ab48-ee6e5696c42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:65:62:12:da:13:1c:ea:82:15:d7:18:9d:
                    59:93:a8:4a:0d:53:11:23:42:e5:77:fb:61:02:c4:
                    23:d8:8c:d4:34:65:38:02:0a:26:1d:e3:78:78:f1:
                    1d:60:7a:d3:57:13:be:77:1a:97:c0:e1:3b:53:6a:
                    a7:45:e4:b5:ed:d1:92:1e:18:0a:cd:9f:37:24:3c:
                    ac:0d:88:41:48:63:22:56:92:7d:04:d7:5e:a8:bd:
                    92:0c:ae:bb:51:84:7a:ba:04:32:17:6e:5e:df:ac:
                    20:be:a6:72:c7:9b:70:cb:fd:fd:47:10:bf:bd:f9:
                    70:1b:54:74:4f:57:59:50:bc:b0:7a:7c:6f:17:eb:
                    ad:48:48:94:8a:67:b7:ae:2f:b7:66:15:c0:a1:85:
                    fe:72:c2:86:24:63:53:eb:aa:e4:fe:1c:ef:71:ad:
                    18:1a:7e:e8:b8:d8:59:ed:f6:12:29:ed:3f:73:64:
                    0a:b9:fc:d4:2f:a7:af:f9:57:d1:a6:b7:b9:31:7e:
                    c6:b2:02:d0:08:e6:0d:ac:61:36:6a:12:65:85:d4:
                    10:aa:6b:5d:a5:19:59:ac:db:5f:6c:00:18:ea:b5:
                    a6:76:cd:20:37:75:a8:19:32:74:50:c2:8b:ce:5e:
                    8e:4e:a6:0a:75:51:96:2d:6b:a7:80:3e:2e:d0:fc:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:ED:A4:EB:F0:45:DA:DC:F0:61:A8:74:4C:01:5D:AB:DE:75:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.180.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:20:ff:b1:83:10:57:87:f9:c6:51:ed:97:73:3f:90:76:
         0b:99:e5:99:70:a8:2e:05:c4:5c:64:53:ab:66:a8:1e:23:30:
         af:8e:bf:85:bc:04:33:69:5a:b2:e9:4e:cf:06:c6:aa:53:87:
         30:c2:b0:19:a3:02:c2:87:a6:fe:51:05:28:95:68:92:20:68:
         e3:8c:e6:e1:11:e4:37:96:b8:f9:68:52:2e:ad:9f:de:0c:ec:
         50:aa:5b:b7:e8:3f:9b:7c:af:a2:14:b8:b1:fb:54:a0:2e:a8:
         8a:7d:dd:87:b5:47:df:5e:d1:2a:f6:02:08:fe:04:97:8a:17:
         d6:52:6b:5a:b6:05:68:86:ec:76:90:08:f1:03:f1:fa:29:2c:
         93:cc:5f:86:09:ac:78:39:7f:21:6f:00:c5:90:90:24:bd:82:
         54:f4:f1:bb:43:d8:d2:82:27:5a:5a:2d:41:23:0e:b8:7b:92:
         26:9d:c0:5a:df:68:63:dc:90:9f:99:06:99:82:39:69:64:b5:
         59:64:c3:20:b5:ab:ff:81:88:69:96:b4:f1:c7:35:1f:b6:83:
         90:26:9e:8c:d9:1e:9c:5d:a1:42:3a:45:c8:34:7a:2c:4c:9c:
         86:d4:fd:f8:b4:2a:98:a4:09:1d:30:0c:53:78:bf:fb:e1:18:
         6b:13:a7:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4FL8ctDR3rqLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZWYwZmY1YWUtZTE3Zi00NDAyLWFiNDgtZWU2ZTU2OTZjNDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheFlYhLaExzqghXXGJ1Zk6hKDVMRI0Lld/th
AsQj2IzUNGU4AgomHeN4ePEdYHrTVxO+dxqXwOE7U2qnReS17dGSHhgKzZ83JDys
DYhBSGMiVpJ9BNdeqL2SDK67UYR6ugQyF25e36wgvqZyx5twy/39RxC/vflwG1R0
T1dZULywenxvF+utSEiUime3ri+3ZhXAoYX+csKGJGNT66rk/hzvca0YGn7ouNhZ
7fYSKe0/c2QKufzUL6ev+VfRpre5MX7GsgLQCOYNrGE2ahJlhdQQqmtdpRlZrNtf
bAAY6rWmds0gN3WoGTJ0UMKLzl6OTqYKdVGWLWungD4u0Pzd5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+K7aTr8EXa3PBhqHRMAV2r3nUZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvNmMyYTZmYjYtNGM5YS0z
MjZhLTg1YTQtMDFlYTVjYWM4ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh7SkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvpIP+xgxBXh/nGUe2Xcz+QdguZ5ZlwqC4FxFxkU6tmqB4jMK+Ov4W8
BDNpWrLpTs8GxqpThzDCsBmjAsKHpv5RBSiVaJIgaOOM5uER5DeWuPloUi6tn94M
7FCqW7foP5t8r6IUuLH7VKAuqIp93Ye1R99e0Sr2Agj+BJeKF9ZSa1q2BWiG7HaQ
CPED8fopLJPMX4YJrHg5fyFvAMWQkCS9glT08btD2NKCJ1paLUEjDrh7kiadwFrf
aGPckJ+ZBpmCOWlktVlkwyC1q/+BiGmWtPHHNR+2g5AmnozZHpxdoUI6Rcg0eixM
nIbU/fi0KpikCR0wDFN4v/vhGGsTpzE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:10 2026 by rpki-client